Provides real-time Python package and vulnerability data to AI coding agents for informed dependency decisions.
Sponsored
Fetter offers a remote Model Context Protocol (MCP) server that empowers AI coding agents with real-time access to critical Python package vulnerability information. Built on the `fetter-rs` framework, it meticulously queries PyPI and OSV databases to surface known CVEs, CVSS scores, and identify safe versions. This invaluable data allows AI agents to proactively make secure and informed dependency choices as they write and manage code.
Key Features
01Finds the most recent non-vulnerable version of a package (`most_recent_not_vulnerable`)
02Surfaces CVEs, CVSS scores, and safe version recommendations
03Provides real-time vulnerability data from PyPI and OSV
04Looks up package versions, availability, and associated vulnerabilities (`lookup`)
05Checks if a specific package version has known vulnerabilities (`is_vulnerable`)
061 GitHub stars
Use Cases
01Identifying the latest safe version when adding new Python package dependencies
02Validating specific pinned package versions for known vulnerabilities before deployment
03Auditing existing project dependencies for security risks and recommended upgrades
