@pipeworx/osv

Connect: https://pipeworx.io/mcp — every tool in the catalog, including @pipeworx/osv’s. Install: one-click buttons

No MCP client? Skip the connection: POST https://gateway.pipeworx.io/v1/tools/search_packs {"query":"..."} to find a tool below, GET /v1/tools/<name> for its schema, POST the same URL with arguments for the data — see For AI agents.

Tools: 4

Tools

• query_package_vulns — Find all known vulnerabilities for an open-source package, optionally at a specific version, via the OSV.dev database. Omit version to get every vuln known for the package. Returns a compact summary a
• get_vulnerability — Get full detail for a single vulnerability by its OSV ID — e.g. “GHSA-jf85-cpcp-j695”, “CVE-2021-23337”, “PYSEC-2021-XXX”. Returns summary, details, aliases, severity, affected packages/ranges, and re
• query_by_commit — Find vulnerabilities affecting a specific source-repository git commit via OSV.dev. Useful when you have a pinned commit hash rather than a released version. Returns the same compact vuln summary arra
• query_batch — Batch vulnerability query against OSV.dev (up to 1000 entries per call) — for SBOM-style “scan every dependency in this lockfile” workflows. Pass an array of {package:{name,ecosystem}, version?} or {c