Is the supply-chain-risk-mcp MCP server actively maintained?

The supply-chain-risk-mcp MCP server was last committed 13d ago and has 0 contributors. Issue health: 50% of issues resolved. AgentRank freshness score reflects real-time maintenance activity.

supply-chain-risk-mcp MCP Server

Name: bk-ml/supply-chain-risk-mcp
Rating: 3.0 (1 reviews)
Author: bk-ml

bk-ml/supply-chain-risk-mcp

Score: 49.1 Rank #6417 MCP Server

Are you the maintainer of bk-ml/supply-chain-risk-mcp? Claim this listing →

An MCP (Model Context Protocol) server that assesses open-source dependency risk — CVEs, license conflicts, maintenance health — for npm, PyPI, Cargo, Maven packages plus a 3-agent reviewer (Triage → Research → Synthesis) built on top of it that evaluates a PR's dependency changes end-to-end. Built on free, no-auth APIs: OSV.dev,deps.dev, github

Add AgentRank to Claude Code Discover and compare tools like bk-ml/supply-chain-risk-mcp — your AI finds the right one automatically

Get API Access →

claude mcp add agentrank -- npx -y agentrank-mcp-server

Overview

bk-ml/supply-chain-risk-mcp is a Python MCP server. An MCP (Model Context Protocol) server that assesses open-source dependency risk — CVEs, license conflicts, maintenance health — for npm, PyPI, Cargo, Maven packages plus a 3-agent reviewer (Triage → Research → Synthesis) built on top of it that evaluates a PR's dependency changes end-to-end. Built on free, no-auth APIs: OSV.dev,deps.dev, github

Ranked #6417 out of 24850 indexed tools.

Ecosystem

Python No license

Score Breakdown

Stars 15% 1

1 stars → early stage

Freshness 25% 13d ago

Last commit 13d ago → recently updated

Issue Health 25% 50%

No issues filed → no history to score

Contributors 10% 0

0 contributors → solo project

Dependents 25% 0

No dependents → no downstream usage

npm Downloads N/A

PyPI Downloads N/A

Forks 0

Description Detailed

License None

Weights: Freshness 20% · Issue Health 20% · Dependents 22% · Stars 10% · Contributors 8% · How we score →

How to Improve

License low impact

Add an MIT or Apache-2.0 license to signal trust and enable adoption

Contributors medium impact

Single-contributor projects carry bus-factor risk — welcoming contributors boosts confidence

Dependents medium impact

No downstream dependents detected yet — adoption by other projects is the strongest trust signal

Badge all embed codes →

Markdown

[![AgentRank](https://agentrank-ai.com/api/badge/tool/bk-ml--supply-chain-risk-mcp)](https://agentrank-ai.com/tool/bk-ml--supply-chain-risk-mcp/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge)

HTML

<a href="https://agentrank-ai.com/tool/bk-ml--supply-chain-risk-mcp/?utm_source=badge&utm_medium=readme&utm_campaign=agentrank_badge"><img src="https://agentrank-ai.com/api/badge/tool/bk-ml--supply-chain-risk-mcp" alt="AgentRank"></a>

Embed Widget docs →

HTML

<script src="https://agentrank-ai.com/embed.js" data-tool="bk-ml/supply-chain-risk-mcp"></script>

Details

Stars: 1
Forks: 0
Open Issues: 0
Closed Issues: 0
Contributors: 0
Dependents: —
Language: Python
License: —
Last Commit: 13d ago

Matched Queries

"model context protocol""model-context-protocol"

See alternatives to bk-ml/supply-chain-risk-mcp → Browse mcp-server category → Compare bk-ml/supply-chain-risk-mcp → How to Build an MCP Server in 2026 →MCP Server Comparison: Top 10 Head-to-Head →

View on GitHub →