MCP低风险未认领
supply-chain-guard
Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
homeofehomeofe/supply-chain-guard
server.json
{
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"name": "io.github.homeofe/supply-chain-guard",
"description": "Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.",
"repository": {
"url": "https://github.com/homeofe/supply-chain-guard",
"source": "github"
},
"version": "6.5.3",
"packages": [
{
"registryType": "npm",
"registryBaseUrl": "https://registry.npmjs.org",
"identifier": "supply-chain-guard",
"version": "6.5.3",
"transport": {
"type": "stdio"
},
"packageArguments": [
{
"value": "mcp",
"type": "positional"
}
]
}
]
}权限
声明检测
运行代码—
node安装—
npm:supply-chain-guard@6.5.3安装时运行脚本—无
网络无无
需要的凭据无无
工作区外的路径—无
智能体工具—无
检查
低风险 · 没有发现需要提醒的地方。
未经人工审核 · 已做规则检查;模型审核尚未开启。
版本
- #36.5.3最新2026年10月9日
- #26.5.22026年10月7日
- #16.5.12026年10月7日
supply-chain-guard在 Codeg 中打开