# deptrust

> Use this tool when you need to identify and manage known vulnerabilities in your project's dependencies across multiple package managers. It solves problems related to security and compliance by checking package versions against public vulnerability databases, providing outputs in the form of vulnerability reports. It takes package dependencies as input and can be used in development, testing, and deployment contexts to ensure secure and reliable software releases.

Canonical page: https://skillsregistry.net/skills/clidey-deptrust  
JSON: https://api.skillsregistry.net/v1/skills/clidey-deptrust

## Description

deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more.

It runs locally as a CLI and as an MCP server. It calls public package registry and OSV APIs directly; there is no hosted deptrust service to trust or configure.

## Trust

- **Trust score (0–1):** 0.67
- **Verification tier:** scanned
- **Last scanned:** 2026-08-30

## Facts

- **Version:** 1.0.0
- **Skill type:** atomic
- **Execution layer:** mcp-remote
- **Runtime environment:** api
- **Category:** version-control
- **Updated:** 2026-08-30

## Source

- **Source listing:** [Glama](https://glama.ai/mcp/servers/f4v4u0ainf)
- **Repository:** <https://github.com/clidey/deptrust>

## Use it

Resolve this record through the SkillsRegistry MCP server (no auth, read-only):

```
claude mcp add --transport http --scope user skillsregistry https://api.skillsregistry.net/mcp
```

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_skill",
    "arguments": {
      "slug": "clidey-deptrust"
    }
  }
}
```

REST: `GET https://api.skillsregistry.net/v1/skills/clidey-deptrust` · pull for local use: `GET https://api.skillsregistry.net/v1/skills/clidey-deptrust/pull`

---
SkillsRegistry indexes agent skills from public registries and GitHub. Skills we have analysed are scanned with Circle-IR and scored on six dimensions; each listing states its scan coverage. More: https://skillsregistry.net/llms.txt