Audits package lockfiles for vulnerabilities, supporting npm, yarn, and pnpm. Runs via CLI or as an MCP server over stdio.
{
"mcpServers": {
"locklens": {
"command": "npx",
"args": [
"-y",
"locklens"
]
}
}
}