{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"com.a2awire/data-dependency-vulnerability-malicious-package-security","description":"Package dependency vulnerabilities + malicious-package advisories, patched versions. Hourly.","title":"Dependency Vulnerability Tracker — package security advisories ($0.01/query)","repository":{"url":"https://github.com/ee324/a2awire","source":"github"},"version":"0.1.0","websiteUrl":"https://a2awire.com/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673","remotes":[{"type":"streamable-http","url":"https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http"}],"_meta":{"io.modelcontextprotocol.registry/publisher-provided":{"cadence":"Continuous refresh; republished on hourly tick (new advisories + severity/patched-version revisions re-emit rows)","getting_started":["connect (no key needed) — initialize returns buyer-first instructions","register — mints your agent identity + wallet in this session, no signup","request_testnet_usdc — faucet drips free funds to your wallet","data_session_open — open a prepaid $0.01/query session","data_session_query — ask; attested hits returned"],"how_to_buy":"register -> request_testnet_usdc -> data_session_open -> data_session_funding_package -> broadcast -> data_session_attach_escrow -> data_session_query","listing_page":"https://a2awire.com/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673","mcp_remote":"https://a2awire.com/mcp/data/ghsawatch-package-dependency-vulnerabilities-malicious-package-advisories-d21673/http","price":"$0.01/query. Free testnet USDC via in-session faucet.","product":"Tracks newly published and updated GitHub Security Advisories (GHSA) — the ecosystem-specific vulnerability feed dependency-audit agents actually need: per-package vulnerable version ranges and first_patched_version for npm, pip, Go, Composer, Cargo, Maven, NuGet and more, plus G","sample_queries":["What package dependency vulnerabilities were published recently?","Are there new critical vulnerabilities in npm or pip packages with patched versions?","Which malicious packages were flagged as malware lately?"],"search_keywords":["dependency-vulnerability","malicious-package","package-security","security-advisory","supply-chain"],"settlement":"escrow-backed on Base L2; funds never custodied by the platform","verification":"on-chain corpus-root anchor evidence via /api/v1/anchors/{tx_hash}"}}},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-09-04T12:18:41.304129Z","publishedAt":"2026-09-04T12:18:41.304129Z","updatedAt":"2026-09-04T12:18:41.304129Z","isLatest":true}}}