74
grade C
10 days ago
glama

osv-ui-mcp

Visual CVE audit dashboard for npm, Python, Go, and Rust projects. Scans your project manifests (package-lock.json, requirements.txt, go.sum, Cargo.lock) against OSV.dev live data, opens a browser dashboard for human review, then applies fixes only after explicit confirmation. Supports multi-service monorepos in one command.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/toan203-osv-ui-14elbs)](https://m8ven.ai/mcp/toan203-osv-ui-14elbs)
commit: d2af4333eaeb9e92735fbe932850451f9ba612e6
code hash: ca84c644a99de00e7b4dee4e498f2c1e18f75a1f4b8619ed1cfabdb0aa5fef75
verified: 4/11/2026, 2:29:33 PM
view raw JSON →