NPM Plus

NPM Plus

Production-ready MCP server enabling AI-powered JavaScript package management with security scanning, bundle analysis, a

6
Stars
0
Forks
0
Releases

Overview

NPM Plus MCP server provides 16 fully functional tools for discovering, analyzing, and managing JavaScript packages within MCP-enabled editors. It enables Smart Package Discovery (search the npm registry with intelligent scoring and metadata), Intelligent Package Management (install, update, and remove packages across npm, Yarn, and pnpm with dev/global options and automatic tool detection), and Security & Compliance (real-time vulnerability scanning with license analysis and fix suggestions). Advanced Analytics cover bundle size analysis, dependency-tree visualization with circular dependency detection, download statistics, and orphaned file detection. The platform emphasizes reliability through automatic retries for transient npm errors, robust error handling, and compatibility with both relative and absolute paths. It is built with TypeScript, MCP SDK, Zod, Execa, Pacote, and Node-cache, and uses intelligent caching, rate limiting, and parallel processing to optimize AI context windows. Deployment options include hosted usage via api.npmplus.dev and self-hosted setups (builds, npx, or node-based). It documents editor integrations (Claude, Windsurf, Cursor, VS Code) to enable natural-language driven package operations.

Details

Owner
shacharsol
Language
TypeScript
License
MIT License
Updated
2025-12-07

Features

Smart Package Discovery

Search npm registry with intelligent relevance scoring, view detailed package metadata, keywords, and maintainers; supports pagination.

Intelligent Package Management

Install, update, and remove packages across npm, Yarn, and pnpm with dev/global options and automatic tool detection with retry logic.

Security & Compliance

Real-time vulnerability scanning with fallback mechanisms and license compliance tracking including fix suggestions.

Advanced Analytics

Bundle size analysis, dependency-tree visualization with circular dependency detection, download statistics, and orphaned file detection.

Dependency Tree Visualization

Visualize dependency relationships to assess architecture and identify circular dependencies.

License Compliance Tracking

Analyze licenses across dependencies to ensure legal compliance.

Robust Installation & Retry Logic

Intelligent retry logic for npm errors and automatic recovery from transient failures.

Editor Integrations & Cross-Editor Support

Supports MCP-enabled editors (Claude, Windsurf, Cursor, VS Code) with natural-language driven package operations.

Audience

JavaScript DevelopersLeverage MCP for AI-assisted dependency management, security scanning, and analytics.
AI EditorsIntegrate MCP-enabled tools into editors for natural-language package operations.
DevOps TeamsSelf-host in enterprise environments for scalable, compliant package management.

Tags

MCPJavaScriptpackage managementsecurity scanningbundle analysisdependency managementAI editorsNPMYarnpnpmanalytics