Endor Labs Package Score

Evaluate open source package health before adoption.

Input Parsing

Extract from user input:

1. Package name (required)
2. Version (optional)
3. Compare with (optional) - another package for comparison

Workflow

Step 1: Check Vulnerabilities and Risks

Use check_dependency_for_risks MCP tool (preferred — checks vulnerabilities AND malware):

• ecosystem: npm, python, go, java, maven, rust, dotnet, ruby, php
• dependency_name: package name
• version: version to evaluate