DepTrust is a local CLI and MCP server that helps AI coding agents avoid pulling vulnerable or risky dependency versions into a project. It checks package versions across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more using public registry and OSV data. The output gives simple allow, review, or block recommendations based on known vulnerabilities and risk signals such as very new releases. That makes it useful for developers who let agents edit dependency files, generate install commands, or scaffold projects without human package-by-package review. It surfaced in a July 1 Show HN MCP query and was verified on the official clidey/deptrust GitHub repository, which documents both CLI and MCP usage.
Reader rating
No ratings yet
You might also like
codemap is an MIT-licensed project brain for AI coding tools that gives LLMs instant architectural context from your codebase without burning tokens. It generates a fast tree/context view, dependency flow, dependency blast-radius analysis, and a layered handoff format for cross-agent continuation, then exposes everything through a JSON context bundle and an MCP server compatible with Claude Code and Codex. A built-in Codex plugin and community skill registry make it easy to install and share. Developers use codemap to onboard agents to large repos in seconds, keep session continuity across handoffs, and scope the impact of a change before running it.
Ollama is a local AI platform for running, managing, and sharing open models on your own machine or private infrastructure. It makes it easy to pull models, serve them through an API, and integrate local inference into developer workflows without relying on a fully managed cloud stack. Teams use Ollama for privacy-sensitive assistants, internal tools, offline experimentation, and rapid testing of open-weight models across laptops, workstations, and servers. It is especially useful for developers, operators, and AI builders who want quick setup with less operational overhead. What makes Ollama distinctive is how approachable it is: it packages model runtime, distribution, and deployment into a streamlined experience that helps people get productive with local AI in minutes instead of spending days on configuration.
FileForge Finder is an AI-powered local file search utility that optimizes search results for developer workflows. It uses natural language processing to understand query intent and prioritize relevant files, code snippets, and documentation. The tool integrates with popular IDEs and terminals to provide instant, context-aware file retrieval, reducing time spent navigating complex project structures. It supports multiple file formats and offers advanced filtering by content type, modification date, and relevance.
From the blog
NVIDIA's $12B Poolside deal reveals a new M&A structure: IP licensing + talent transfer + founder retention. Compute scarcity is rewriting the playbook for frontier AI labs…
Gemini’s new student hub shows where useful AI is heading: not better answer boxes, but study workflows with notes, quizzes, deadlines, and review loops…
Amazon is destroying rare books for AI training data. Robin Williams' family revived his Instagram to fight AI likeness abuse. These are the same story — AI treating culture as free raw material.
