Dep Oracle

Dep Oracle is a predictive dependency security engine designed for software developers and security teams to proactively manage and assess the risks in their project's dependency tree. It calculates a weighted Trust Score (0-100) for every package, detects unmaintained (zombie) dependencies, estimates blast radius, catches typosquatting, predicts future risks, and integrates tightly with the Model Context Protocol (MCP) for natural language queries about dependency safety. Dep Oracle supports multiple output formats, offline operation, and automated integration with CI/CD pipelines and GitHub Actions.