jone0709/oss_evaluator
3.1
If you are the rightful owner of oss_evaluator and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
The OpenSSF Security Evaluator is a FastMCP server designed to provide comprehensive security analysis for software packages across various ecosystems, integrating with Claude Desktop for enhanced AI-powered evaluations.
OpenSSF Security Evaluator - MCP Server
🛡️ Security evaluation for software packages with Claude Desktop integration
Overview
The OpenSSF Security Evaluator is a FastMCP server that provides comprehensive security analysis for software packages across multiple ecosystems. It integrates seamlessly with Claude Desktop to provide AI-powered security evaluation capabilities.
Features
🛡️ Security Analysis
- Vulnerability Scanning - Real-time vulnerability detection via OSV.dev
- Supply Chain Protection - Typosquatting and malicious package detection
- Version-Specific Analysis - Evaluate specific package versions
- Risk Scoring - 0-100 security scoring system
- GitHub Security Analysis - Repository health and maintenance metrics
📦 Package Manager Support
- npm (JavaScript/Node.js) - ✅ Full support
- PyPI (Python) - ✅ Full support
- Cargo (Rust) - ✅ Full support
- Maven (Java) - ✅ Full support
- NuGet (.NET) - ✅ Full support
- RubyGems (Ruby) - ✅ Full support
- Go Modules - 🟡 Basic support
🔄 Alternative Discovery
- Enhanced Ranking - Multi-factor compatibility scoring
- Curated Alternatives - AI-picked alternatives for popular packages
- License Compatibility - Automatic license checking
Installation
Prerequisites
- Python 3.8 or higher
- Claude Desktop application
Step 1: Clone and Setup
# Create project directory
mkdir openssf-evaluator
cd openssf-evaluator
# Download the files (or clone if using git)
# Place evaluator.py, requirements.txt, openssf_config.ini in this directory