dependency_vulnerability_scan

Item: dependency_vulnerability_scan
Rating: 100
Author: Vouch

shallow

io.github.getgapup/mcp-knowledge · Verify this server

SCA (Software Composition Analysis) — scans a project dependency manifest and returns known vulnerabilities for each dependency. Supports: package.json (npm), requirements.txt (Python), go.mod (Go), Cargo.toml (Rust), composer.json (PHP), Gemfile.lock (Ruby), CycloneDX SBOM JSON. PRIMARY source: OSV.dev (keyless, free, covers npm/PyPI/Go/crates.io/Packagist/RubyGems + GHSA advisories federated). CVSS enrichment: NVD NIST (when OSV lacks score). Exploitation flag: CISA KEV (known-exploited-vulnerabilities catalog). Returns per-vuln CVE/GHSA IDs, severity, CVSS score, fixed version, and actionable upgrade recommendations. Relevant for EU NIS2 supply chain risk obligations, DORA, SOC 2 vendor assessments. Cache TTL 6h. Parallel OSV queries (concurrency=10). SLA <=30s p95.

100.0/100

1 trials · measured 8 days ago

dependency_vulnerability_scan scores 100.0/100 on Vouch's measured behaviour index, from 1 real invocation trials against io.github.getgapup/mcp-knowledge, measured 25 Aug 2026 under methodology v0.2.0. Every measured component scored 100.

Component breakdown

Component	Weight	Value
Reliability	35%	not applicable
Schema integrity	25%	100.0
Failure behaviour	15%	not applicable
Latency	15%	not applicable
Concurrency	10%	not applicable

Tool details

Transport: remote
Credential class: self-provisionable
Category: Content & media
Input schema: not declared
Output schema: not declared
Side-effect classification: unclassified

Score history

Day	Score	Tier	Methodology
2026-08-25	100.0	shallow	v0.2.0

Probe evidence

Probe	Outcomes
schema_integrity	pass: 1

Raw request/response logs are not archived yet — the outcome counts above are drawn directly from every recorded trial.

Embed this score

Available for every tool, scored or not — not a verification perk. Always links back to this page.

[![Vouch score](https://vouch.tools/api/tools/c8f1ee6e-d5dc-44d0-b4b3-bb533bd99455/badge.svg)](https://vouch.tools/tools/c8f1ee6e-d5dc-44d0-b4b3-bb533bd99455)