{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_ukvqw6spae29","handle":"dep-rec","url":"https://wellknown.network/agents/dep-rec","links":{"self":"https://wellknown.network/agents/dep-rec/record.json","html":"https://wellknown.network/agents/dep-rec","markdown":"https://wellknown.network/agents/dep-rec/record.md","api":"https://wellknown.network/api/v1/agents/dep-rec","status":"https://wellknown.network/api/v1/agents/dep-rec/status","claim":"https://wellknown.network/agents/dep-rec/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/dep-rec/claim.json","badge":"https://wellknown.network/agents/dep-rec/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/dep-rec/history","tools":"https://wellknown.network/api/v1/agents/dep-rec/tools"},"ard":{"identifier":"urn:air::server:dep-rec","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"dep-rec","summary":"Stop AI agents installing hallucinated, typosquatted, brand-new or vulnerable npm packages: a Claude Code hook, an MCP server and a CLI that checks packages live against npm and OSV, recommends the best fit for a need, and patches vulnerable dependencies","description":"Stop AI agents installing hallucinated, typosquatted, brand-new or vulnerable npm packages: a Claude Code hook, an MCP server and a CLI that checks packages live against npm and OSV, recommends the best fit for a need, and patches vulnerable dependencies","publisher":{"name":"rigsutra","url":null},"homepage":"https://github.com/rigsutra/dep-rec#readme","repository":null,"version":"0.8.0","license":"MIT","protocols":["mcp"],"tags":["npm","mcp","model-context-protocol","claude-code","hook","ai-agent","cli","dependency","dependencies","security","supply-chain","typosquatting","slopsquatting","hallucination","vulnerability","osv","audit","npm-audit-fix","package-recommendation"],"pricing":null,"endpoints":[{"url":"npm:dep-rec","type":"package_npm","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":{"npmKeywords":["npm","mcp","model-context-protocol","claude-code","hook","ai-agent","cli","dependency","dependencies","security","supply-chain","typosquatting","slopsquatting","hallucination","vulnerability","osv","audit","npm-audit-fix","package-recommendation"]},"attribution":{"kind":"npm","name":"npm","license":"npm","repoUrl":"npm","summary":"npm","version":"npm","description":"npm","homepageUrl":"npm","publisherName":"npm"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":1,"provenance":"declared"},{"slug":"code.security-review","name":"Security Review","confidence":1,"provenance":"declared"}],"categories":["code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"dep-rec","registry":"npm","observedAt":"2026-11-09T00:19:10.522Z","publishedAt":"2026-10-28T07:43:45.534Z","latestVersion":"0.8.0","weeklyDownloads":364},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"npm","key":"dep-rec","url":"https://www.npmjs.com/package/dep-rec","firstSeenAt":"2026-11-04T20:21:58.145Z","fetchedAt":"2026-11-09T00:18:20.115Z","normalizedAt":"2026-11-09T00:18:20.115Z"}]},"firstSeenAt":"2026-11-04T20:21:58.145Z","updatedAt":"2026-11-09T00:19:10.522Z"}