sonatype-guide
PluginSonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.
Install
claude plugin install sonatype-guide@claude-plugins-officialWhat is sonatype-guide?
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check component quality metrics.
What's inside
1 bundled component — installing the plugin installs all of them.
What this can do
Capabilities declared by the plugin's own components — read straight from their frontmatter, not inferred.
Inherit all session tools
1 component declare no tool restrictions
~158 tokens of context used while enabled, before you invoke anything
Trust
57/100 · Fair4 factors scored below maximum
Documentation
README · ~2 min readSonatype Guide Plugin for Claude Code
Integrates Sonatype Guide MCP server to provide Claude Code with software supply chain intelligence and dependency security analysis.
Features
With this plugin, Claude Code can:
- Proactively check dependencies - Automatically evaluates packages before installing or upgrading, not just when you ask
- Analyze vulnerabilities - Surface CVEs with severity scores, distinguishing direct vs transitive risks
- Recommend secure versions - Ranked upgrade paths with Developer Trust Scores and breaking change analysis
- Audit your project - Scan dependency manifests for security, license, and policy compliance issues
- Compare alternatives - Side-by-side security comparison when choosing between libraries
Prerequisites
Reviews
Log in to leave a review.
No reviews yet — be the first.
Explore related
Other things in this space — across every part of the ecosystem, not just plugins.
Pluginssimilar to this one
All plugins →claude-security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, tha
32.9K stars
claude-md-management
Tools to maintain and improve CLAUDE.md files - audit quality, capture session learnings, and keep project memory current.
32.9K stars
math-olympiad
Solve competition math (IMO, Putnam, USAMO) with adversarial verification that catches what self-verification misses. Fresh-context verifiers attack proofs with specific failure patterns. Calibrated abstention over bluffing.
32.9K stars
Skills
All skills →ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
235.3K stars
ui-ux-pro-max-skill
An AI SKILL that provide design intelligence for building professional UI/UX multiple platforms
111.3K stars
impeccable
The design language that makes your AI harness better at design.
52.5K stars
MCP Servers
All mcp servers →Figma-Context-MCP
MCP server to provide Figma layout information to AI coding agents like Cursor
15.5K stars
dbhub
Zero-dependency, token-efficient database MCP server for Postgres, MySQL, SQL Server, MariaDB, SQLite.
3.3K stars
Gmail-MCP-Server
Lean Gmail MCP server with auto authentication support
214 stars
Commands
All commands →feature-dev
Guided feature development with codebase understanding and architecture focus
32.8K stars
modernize-harden
Security vulnerability scan with a reviewable remediation patch — OWASP, CWE, CVE, secrets, injection
32.8K stars
modernize-transform
Transform one legacy module to the target stack — idiomatic rewrite with behavior-equivalence tests
32.8K stars
Subagents
All subagents →ECC
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
235.3K stars
architecture-critic
Reviews proposed target architectures and transformed code against modern best practice. Adversarial — looks for over-engineering, missed requirements, and simpler alternatives.
32.8K stars
code-architect
Designs feature architectures by analyzing existing codebase patterns and conventions, then providing comprehensive implementation blueprints with specific files to create/modify, component designs, data flows, and build sequences
32.8K stars