Npm

Local MCP server that lets an assistant search the npm registry, inspect packages, audit dependencies and compare bundle sizes.

What you can do

• Search the npm registry by keyword and get name, description, version, weekly downloads and last publish date
• Look up a package's versions, dependencies, maintainers, repository, license, size and quality/popularity/maintenance scores
• Audit a package.json for outdated or deprecated dependencies and known vulnerabilities via the npm bulk advisory API
• Estimate minified and gzipped bundle size, dependency count and tree-shaking support through the Bundlephobia API
• Compare several packages side by side on downloads, bundle size, runtime dependencies, last publish, GitHub stars and license

When to use it

Useful when choosing between npm packages, checking whether a dependency is maintained or vulnerable, or judging the size cost of adding a library to a Node.js project.

Requirements

Runs as a local stdio process installed from the npm package @rog0x/mcp-npm-tools; needs Node.js and a build step (npm install, npm run build), then a command entry pointing at the built index.js. Network access to the npm registry, the npm bulk advisory API and the Bundlephobia API is required. No accounts, API keys or environment variables are declared.