Search / io.github.ux-xd/dephealth
protogridR0· no sign-inPackage alive? Verdict with evidence: deprecated, archived, stale or active; plus runtime EOL dates.
v0.1.1 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"dephealth": {
"type": "http",
"url": "https://dephealth.dsh.sh/mcp"
}
}
}claude mcp add --transport http dephealth https://dephealth.dsh.sh/mcp[mcp_servers.dephealth]
url = "https://dephealth.dsh.sh/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"dephealth": {
"type": "remote",
"url": "https://dephealth.dsh.sh/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"dephealth": {
"type": "http",
"url": "https://dephealth.dsh.sh/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=dephealth&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vZGVwaGVhbHRoLmRzaC5zaC9tY3AifQ%3D%3D"
}{
"servers": {
"dephealth": {
"type": "http",
"url": "https://dephealth.dsh.sh/mcp"
}
}
}{
"mcpServers": {
"dephealth": {
"httpUrl": "https://dephealth.dsh.sh/mcp"
}
}
}extensions:
"dephealth":
enabled: true
name: "dephealth"
type: streamable_http
uri: "https://dephealth.dsh.sh/mcp"
timeout: 300
protocol.modernsupports 2026-07-28 (server/discover)protocol.statelessanswers without a sessionprotocol.transportstreamable HTTPprotocol.list_ttltools/list declares ttlMs 0, so clients re-fetch it on every useauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations3 of 3 tools declare readOnlyHint or destructiveHinttools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHinttools.token_costabout 1,181 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website +reachable +uptime-97% ~updated-49d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://dephealth.dsh.sh/mcp streamable-http | none | yes | 97% | 407 ms | 2026-07-28 | 2026-10-20 |
deps_auditread-only | Health verdict for every package in a manifest or a list, in one call (≤25 packages): deprecated / archived / stale / active / unknown per package with the latest version, release and push ages, advisory counts and replacements, plus a summary. Use when reviewing a repository's package.json or requirements.txt before an upgrade, an audit or a fork decision. |
package_healthread-only | Is this package alive? One verdict — deprecated, archived, stale, active or unknown — with the evidence: per-version deprecation from the native registry, yanked/retracted latest release, repository archived and last-push dates, maintainer and dependent counts, advisory ids for the exact version, and what replaced it. Use when choosing, pinning or upgrading a dependency in npm, PyPI, crates.io, RubyGems, Go, Maven, NuGet or Packagist. |
runtime_eolread-only | Support and end-of-life dates for a runtime, OS, database or framework version from endoflife.date (470+ products): each cycle with a verdict — supported, security-only or eol — the latest patch, LTS flag and days to EOL. Use when deciding which Node, Python, Ubuntu, PostgreSQL, Java, Django… version to target or whether a deployed one is still safe. |
Schemas: list_tools.
{
"name": "io.github.ux-xd/dephealth",
"_meta": {
"io.modelcontextprotocol.registry/publisher-provided": {
"auth": "none",
"tools": [
"package_health",
"deps_audit",
"runtime_eol"
],
"factory": "agie",
"not_for": "Not a vulnerability scanner (advisory ids only, no CVSS triage or reachability), not license compliance, not a popularity ranking, and it cannot see private registries or vendored code.",
"category": "developer-tools",
"keywords": [
"dependency health",
"package deprecated",
"is this package maintained",
"abandoned package",
"yanked release",
"archived repository",
"end of life",
"eol",
"endoflife.date",
"npm",
"pypi",
"crates.io",
"rubygems",
"go modules",
"nuget",
"packagist",
"maven",
"advisories",
"deps.dev",
"supply chain"
],
"when_to_use": "Before pinning, upgrading or auditing a dependency: package_health returns whether it is deprecated, archived, stale or active with the raw registry evidence, advisories for the version you use and the replacement if there is one; deps_audit does the same for a whole manifest; runtime_eol says whether a Node, Python, OS or database version is still supported and when it dies."
}
},
"icons": [
{
"src": "https://dephealth.dsh.sh/favicon.svg"
}
],
"title": "Dependency Health MCP",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://dephealth.dsh.sh/mcp",
"type": "streamable-http"
}
],
"version": "0.1.1",
"repository": {
"url": "https://github.com/ux-xd/dephealth-mcp",
"source": "github"
},
"websiteUrl": "https://dephealth.dsh.sh",
"description": "Package alive? Verdict with evidence: deprecated, archived, stale or active; plus runtime EOL dates."
}