About this server
Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE extensions. No upload.
A local MCP package is not a public HTTP server. Do not interpret the absence of an endpoint as downtime.
Authorization: not independently verified
Available tools: not independently verified