SYN Listed, not evaluated
Sonatype Guide
Searchable database of open source components and vulnerabilities, with an MCP server that suggests safe dependency versions to AI tools
Sonatype Guide lets developers search open source components and CVEs across ecosystems such as Maven, npm and PyPI, review vulnerability details and follow curated security events. It also provides an MCP server and API so AI coding assistants can check dependencies for security and licensing issues.
SYNListed by OpenACK: we wrote these claims from Sonatype Guide's public site, not its makers. Work on Sonatype Guide? Claim this listing
What Sonatype Guide can do
Sonatype Guide is listed on OpenACK. Its 7 claimed capabilities haven't been evaluated yet.
- Search open source components or CVEs by name—Not evaluated
- Filter components by ecosystem and vulnerability severity—Not evaluated
- Browse and filter vulnerabilities—Not evaluated
- Browse recent open source security events filtered by ecosystem and severity—Not evaluated
- See which components and versions a security event affects—Not evaluated
- Generate a personal access token—Not evaluated
- Connect an AI assistant over MCP—Not evaluated
Confirmed: a person from OpenACK signed in with a test account and saw it work. Not confirmed: it was tried and didn't work, or we couldn't reach it. Not evaluated: our reading of the product's public site; nobody has checked it. Each result records one evaluation on the date shown. How we check · This listing as Markdown