Ecosyste.ms Package Data

Ecosyste.ms Package Data

Official
ecosyste-ms

Queries package ecosystem data from 40+ registries including npm, PyPI, and RubyGems for metadata, dependencies, versions, and security advisories. Uses fast local SQLite database with API fallback for comprehensive package information.

Enables querying package ecosystem data from ecosyste.ms, including package metadata, versions, security advisories, dependencies, and repository information across 40+ package registries with fast local SQLite lookups and API fallback.

6166 views1Local (stdio)

What it does

  • Query package metadata across 40+ registries
  • Lookup security advisories and vulnerabilities
  • Analyze package dependencies and versions
  • Search repository information and statistics
  • Access version history and release data
  • Check package maintenance status

Best for

Security auditing and vulnerability assessmentPackage dependency analysisOpen source research and due diligenceSoftware supply chain monitoring
Fast local SQLite database40+ package registries supportedZero setup required

About Ecosyste.ms Package Data

Ecosyste.ms Package Data is an official MCP server published by ecosyste-ms that provides AI assistants with tools and capabilities via the Model Context Protocol. Query package ecosystem data and package metadata across 40+ registries with fast local SQLite lookups and API fallback It is categorized under developer tools.

How to install

You can install Ecosyste.ms Package Data in your AI client of choice. Use the install panel on this page to get one-click setup for Cursor, Claude Desktop, VS Code, and other MCP-compatible clients. This server runs locally on your machine via the stdio transport.

License

Ecosyste.ms Package Data is released under the MIT license. This is a permissive open-source license, meaning you can freely use, modify, and distribute the software.

@ecosyste-ms/mcp

MCP server for querying package ecosystem data from ecosyste.ms.

Queries a local SQLite database of critical packages for fast lookups, with API fallback for packages not in the database.

Installation

npm install -g @ecosyste-ms/mcp

Or run directly with npx:

npx @ecosyste-ms/mcp

The database is bundled via @ecosyste-ms/critical. No additional setup required.

To use a custom database, set ECOSYSTEMS_DB_PATH or place critical-packages.db in your working directory.

Usage with LLM Tools

Claude Code

Open a terminal and run:

claude mcp add ecosystems -- npx @ecosyste-ms/mcp

With a custom database path:

claude mcp add ecosystems -- env ECOSYSTEMS_DB_PATH=/path/to/db.sqlite npx @ecosyste-ms/mcp

From within Claude Code, use the /mcp command to verify the server is running.

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "ecosystems": {
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"]
    }
  }
}

With custom database path:

{
  "mcpServers": {
    "ecosystems": {
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"],
      "env": {
        "ECOSYSTEMS_DB_PATH": "/path/to/critical-packages.db"
      }
    }
  }
}
Cursor

Add to .cursor/mcp.json in your project or ~/.cursor/mcp.json globally:

{
  "mcpServers": {
    "ecosystems": {
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"]
    }
  }
}
VS Code

Open a terminal and run:

code --add-mcp '{"type":"stdio","name":"ecosystems","command":"npx","args":["@ecosyste-ms/mcp"]}'

Or manually add to .vscode/mcp.json:

{
  "servers": {
    "ecosystems": {
      "type": "stdio",
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"]
    }
  }
}

Then open the .vscode/mcp.json file in VS Code and click "Start server".

Windsurf

Add to ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "ecosystems": {
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"]
    }
  }
}
Zed

Add to Zed settings (cmd+,):

{
  "context_servers": {
    "ecosystems": {
      "command": {
        "path": "npx",
        "args": ["@ecosyste-ms/mcp"]
      }
    }
  }
}
ChatGPT

Note: ChatGPT requires remote MCP servers. Run the server with a tunnel or deploy it.

For local development with a tunnel:

npx @anthropic-ai/mcp-proxy --port 8080 -- npx @ecosyste-ms/mcp

Then in ChatGPT:

  • Navigate to Settings > Connectors
  • Add a custom connector with your tunnel URL
  • The server will be available in Composer > Deep Research
Codex

Add to ~/.codex/config.toml:

[mcp_servers.ecosystems]
command = "npx"
args = ["@ecosyste-ms/mcp"]
Gemini CLI

Add to ~/.gemini/settings.json:

{
  "mcpServers": {
    "ecosystems": {
      "command": "npx",
      "args": ["@ecosyste-ms/mcp"]
    }
  }
}

Available Tools

Package Tools

  • get_package - Get full package data by ecosystem and name
  • lookup_package - Find package by PURL, ecosystem+name, or repository URL
  • get_package_versions - Get all versions with publish dates
  • get_package_advisories - Get security advisories (CVEs)
  • get_package_repository - Get repository metadata (stars, forks, language)
  • get_package_dependents - Get packages that depend on this package
  • search_packages - Full-text search (requires local database)

Registry Tools

  • list_registries - List all available package registries
  • get_database_info - Get local database stats
  • health_check - Check server health (database connectivity, API availability)

Examples

Ask your LLM:

  • "What license does lodash use?"
  • "Show me the CVEs for express"
  • "How many stars does the react repository have?"
  • "What packages depend on typescript?"
  • "Search for packages related to authentication"
  • "What's the latest version of axios?"

Supported Ecosystems

npm, pypi, rubygems, cargo, go, maven, nuget, packagist, hex, pub, hackage, cocoapods, conda, clojars, puppet, homebrew, docker, bower, cpan, cran, julia, swiftpm, elm, deno, alpine, actions, openvsx, spack, adelie, vcpkg, racket, bioconductor, carthage, postmarketos, elpa

Development

git clone https://github.com/ecosyste-ms/mcp
cd mcp
npm install
npm test

Run locally:

node index.js

License

MIT

Alternatives

Related Skills

Browse all skills
tooluniverse

Use this skill when working with scientific research tools and workflows across bioinformatics, cheminformatics, genomics, structural biology, proteomics, and drug discovery. This skill provides access to 600+ scientific tools including machine learning models, datasets, APIs, and analysis packages. Use when searching for scientific tools, executing computational biology workflows, composing multi-step research pipelines, accessing databases like OpenTargets/PubChem/UniProt/PDB/ChEMBL, performing tool discovery for research tasks, or integrating scientific computational resources into LLM workflows.

1
mcp-developer

Use when building MCP servers or clients that connect AI systems with external tools and data sources. Invoke for MCP protocol compliance, TypeScript/Python SDKs, resource providers, tool functions.

1
ccxt-typescript

CCXT cryptocurrency exchange library for TypeScript and JavaScript developers (Node.js and browser). Covers both REST API (standard) and WebSocket API (real-time). Helps install CCXT, connect to exchanges, fetch market data, place orders, stream live tickers/orderbooks, handle authentication, and manage errors. Use when working with crypto exchanges in TypeScript/JavaScript projects, trading bots, arbitrage systems, or portfolio management tools. Includes both REST and WebSocket examples.

1
dotnet-backend

.NET/C# backend developer for ASP.NET Core APIs with Entity Framework Core. Builds REST APIs, minimal APIs, gRPC services, authentication with Identity/JWT, authorization, database operations, background services, SignalR real-time features. Activates for: .NET, C#, ASP.NET Core, Entity Framework Core, EF Core, .NET Core, minimal API, Web API, gRPC, authentication .NET, Identity, JWT .NET, authorization, LINQ, async/await C#, background service, IHostedService, SignalR, SQL Server, PostgreSQL .NET, dependency injection, middleware .NET.

109
supabase-developer

Build full-stack applications with Supabase (PostgreSQL, Auth, Storage, Real-time, Edge Functions). Use when implementing authentication, database design with RLS, file storage, real-time features, or serverless functions.

87
python-expert

Senior Python developer expertise for writing clean, efficient, and well-documented code. Use when: writing Python code, optimizing Python scripts, reviewing Python code for best practices, debugging Python issues, implementing type hints, or when user mentions Python, PEP 8, or needs help with Python data structures and algorithms.

40