NPMScan: tool descriptions scored io.github.salemalem/npmscan

tools/list taken: 2026-11-02 (UTC)
From: Official MCP Registry
Connected to: https://npmscan.com/api/mcp
Homepage: npmscan.com
Repository: github.com/salemalem/npmscan-mcp-plugin
Scoring rules: v2
Removal: support@forecall.dev

Scores, issues and names only

This page shows how NPMScan (io.github.salemalem/npmscan)'s tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

servers/io.github.salemalem/npmscan

Average score: 84.0 / 100Clear
Tools: 23
Near-identical descriptions: 1

Across the server

Tools whose descriptions are nearly the same

1 of 1 pairs shown, highest description similarity first.
Tool	Tool	Description similarity	Name similarity
get_package	get_package_version	0.38	0.67

Tools

generate_sbom

71 / 100Clear

Purpose: 17 / 20
When to use: 10 / 20
Arguments: 19 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

Minor
Arguments without a description: packages[].name, packages[].version, componentVersion.param_no_description
Minor
No `required` list, so every argument is optional.no_required

check_maintainer_blast_radius

74 / 100Clear

Purpose: 17 / 20
When to use: 0 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

get_remediation_playbook

74 / 100Clear

Purpose: 17 / 20
When to use: 0 / 20
Arguments: 22 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context
Minor
No `required` list, so every argument is optional.no_required

check_license_compliance

77 / 100Clear

Purpose: 17 / 20
When to use: 15 / 20
Arguments: 20 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

Minor
Arguments without a description: packages[].name, packages[].version.param_no_description

batch_query_vulnerabilities

79 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 19 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
Arguments without a description: packages[].name.param_no_description
Minor
No `required` list, so every argument is optional.no_required
Minor
The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.deprecated

query_vulnerabilities

79 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 22 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

Minor
No `required` list, so every argument is optional.no_required

get_latest_advisories

80 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 20 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
No `required` list, so every argument is optional.no_required

check_maintainer_changes

82 / 100Clear

Purpose: 17 / 20
When to use: 15 / 20
Arguments: 25 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

search_packages

82 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

audit_github_repository

83 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 25 / 25
Return value: 8 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.deprecated

get_package_version

83 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 25 / 25
Return value: 8 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
Its description is nearly the same as get_package's (similarity 0.38); only the names and schemas tell them apart. Say in this description when to use get_package instead.confusable_pair

analyze_install_script

84 / 100Clear

Purpose: 17 / 20
When to use: 10 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

compare_packages

85 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.deprecated

diff_dependencies

85 / 100Clear

Purpose: 20 / 20
When to use: 15 / 20
Arguments: 25 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

prioritize_remediation

85 / 100Clear

Purpose: 20 / 20
When to use: 15 / 20
Arguments: 25 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

check_package_provenance

87 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 25 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

simulate_dependency_upgrade

89 / 100Clear

Purpose: 17 / 20
When to use: 15 / 20
Arguments: 22 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
No `required` list, so every argument is optional.no_required
Minor
The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.deprecated

analyze_transitive_dependencies

90 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
Arguments without a description: packages[].name, packages[].version.param_no_description

get_package

90 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
Its description is nearly the same as get_package_version's (similarity 0.38); only the names and schemas tell them apart. Say in this description when to use get_package_version instead.confusable_pair
Minor
The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.deprecated

get_maintainer_profile

92 / 100Clear

Purpose: 17 / 20
When to use: 15 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

No issues.

suggest_alternative

92 / 100Clear

Purpose: 17 / 20
When to use: 15 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
The description mentions none of its 3 or more arguments.params_not_in_description
Minor
The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.deprecated

enrich_npm_audit

94 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 25 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

get_cve

94 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 22 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
No `required` list, so every argument is optional.no_required

What static scoring cannot tell

This score reads only the text of each description and schema: it says what is written, not what a model will do. Short tools whose names already say what they do, such as browser_close, score low here even when models use them well, and in our measurements current models chose the right tool in one step even from one-line descriptions, as long as the names and schemas differed. What the text cannot show, such as what happens over several steps and whether an added sentence helps or misleads, is what an evaluation measures, on the Pro and Team plans.

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

All scored servers