# NPMScan (io.github.salemalem/npmscan): tool descriptions scored

- tools/list taken: 2026-11-02 (UTC)
- From: [Official MCP Registry](https://registry.modelcontextprotocol.io/v0/servers/io.github.salemalem%2Fnpmscan/versions/latest)
- Connected to: https://npmscan.com/api/mcp
- Homepage: https://npmscan.com/
- Repository: https://github.com/salemalem/npmscan-mcp-plugin
- Scoring rules: v2
- Tools: 23
- Average: 84.0 / 100 (Clear)
- Near-identical pairs: 1

This page shows how NPMScan (io.github.salemalem/npmscan)'s tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

## Across the server

No server-wide issues.

## Tools

- `generate_sbom`: 71 / 100
  - Minor: Arguments without a description: packages[].name, packages[].version, componentVersion.
  - Minor: No `required` list, so every argument is optional.
- `check_maintainer_blast_radius`: 74 / 100
  - Major: Says nothing about when to use it, or when not to.
- `get_remediation_playbook`: 74 / 100
  - Major: Says nothing about when to use it, or when not to.
  - Minor: No `required` list, so every argument is optional.
- `check_license_compliance`: 77 / 100
  - Minor: Arguments without a description: packages[].name, packages[].version.
- `batch_query_vulnerabilities`: 79 / 100
  - Minor: Arguments without a description: packages[].name.
  - Minor: No `required` list, so every argument is optional.
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `query_vulnerabilities`: 79 / 100
  - Minor: No `required` list, so every argument is optional.
- `get_latest_advisories`: 80 / 100
  - Minor: No `required` list, so every argument is optional.
- `check_maintainer_changes`: 82 / 100
- `search_packages`: 82 / 100
- `audit_github_repository`: 83 / 100
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `get_package_version`: 83 / 100
- `analyze_install_script`: 84 / 100
- `compare_packages`: 85 / 100
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `diff_dependencies`: 85 / 100
- `prioritize_remediation`: 85 / 100
- `check_package_provenance`: 87 / 100
- `simulate_dependency_upgrade`: 89 / 100
  - Minor: No `required` list, so every argument is optional.
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `analyze_transitive_dependencies`: 90 / 100
  - Minor: Arguments without a description: packages[].name, packages[].version.
- `get_package`: 90 / 100
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `get_maintainer_profile`: 92 / 100
- `suggest_alternative`: 92 / 100
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: The description says the tool is deprecated. Name the replacement, and consider taking the tool out of tools/list: models avoid it when asked for what it does.
- `enrich_npm_audit`: 94 / 100
- `get_cve`: 94 / 100
  - Minor: No `required` list, so every argument is optional.

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

[All scored servers](https://forecall.dev/en/servers)