Package Privacy vs Ecosyste.ms

Automates security assessment of Maven packages through decompilation and rule-based privacy violation detection for dependency compliance checking and supply chain risk analysis

Queries package ecosystem data from ecosyste.ms across 30+ ecosystems including npm, PyPI, Maven, and Cargo, combining local SQLite database for fast lookups with API fallback for package metadata, security advisories, and dependency information.

MCP Servers

APIs

3

—

—

—

JavaScript

—

MIT

—

—

53

4