GhostFree

GhostFree is a local MCP server designed for software teams and developers to automate the discovery and triage of security vulnerabilities in project dependencies. It scans repositories for known CVEs using OSV.dev, enriches findings using NVD and CISA KEV databases, and streamlines risk acceptance workflows—all accessible through AI coding assistants or IDE extensions (like VS Code Copilot). GhostFree supports multiple programming ecosystems and manifest formats, and writes accepted risk decisions directly to the repo for teamwide visibility.