Comparison

slopsec vs io.github.Nekzus/npm-sentinel-mcp

slopsec is no longer listed on any marketplace we read: these are its last known data, as of 2026‑11‑03.

slopsec is a plugin bundle for AI coding tools published by Lachy. No marketplace we read lists it any more. io.github.Nekzus/npm-sentinel-mcp is an MCP server published by Nekzus. Marketplaces we read that list it: 3 (Official MCP Registry, Docker MCP Catalog, npm registry (MCP servers)). As of our marketplace pass on 2026-11-10. A plugin in this pair is no longer listed on any marketplace we read, so search engines are asked not to index the page.

Where each is published

Where each is published
Marketplace	slopsec	io.github.Nekzus/npm-sentinel-mcp
Community marketplace lachydotmcg/slopsec	Removed on 2026-11-03 Version: 1.0.0 Forks (GitHub): 3 Stars (GitHub): 25 Not marked · First seen 2026-10-26	Not listed
Official MCP Registry	Not listed	Listed Version: 1.26.1 Downloads/month (npm): 1 875 Downloads/week (npm): 498 Forks (GitHub): 10 Stars (GitHub): 18 Not marked · First seen 2026-10-11
Docker MCP Catalog	Not listed	Listed Version: sha256:d8e4bbc7dd5c Forks (GitHub): 10 Pulls (Docker Hub): 61 837 Stars (Docker Hub): 1 Stars (GitHub): 18 Not marked · First seen 2026-10-11
npm registry (MCP servers)	Not listed	Listed Version: 1.26.1 Downloads/month (npm): 1 875 Downloads/week (npm): 498 Forks (GitHub): 10 Stars (GitHub): 18 Not marked · First seen 2026-10-12

Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.

The facts side by side

slopsec vs io.github.Nekzus/npm-sentinel-mcp
Fact	slopsecno longer listed · 2026-11-03	io.github.Nekzus/npm-sentinel-mcp
Marketplaces that list it (differs)	0	3
Stars (GitHub) (differs)	25	18
Pulls (Docker Hub) (differs)	No figure on Docker Hub	61 837
Forks (GitHub) (differs)	3	10
Last release	Not published	Not published
Where it runs (differs)	Installs as a plugin bundle	Remote server or your machine
Transport (differs)	Not stated	stdio, Streamable HTTP
Tools it declares (differs)	Not published	19
Environment variables it asks for	Not published	Not published
Licence	MIT	MIT
Repository (differs)	github.com/lachydotmcg/slopsec	github.com/nekzus/npm-sentinel-mcp
Changes in the last 7 days	0	0
First seen (differs)	2026-10-26	2026-10-11
Endpoint at the last check (differs)	no remote endpoint we check	Responded 6 h ago, requires authentication

Lines where the two differ have a tinted background and bold values. No value is marked better or worse: a plugin no marketplace lists any more is shown with its last known data, which we do not rank against current figures.

What to use instead of slopsec

Plugins still listed whose own names, descriptions, tools and skills are closest in meaning to it. Comparable, not endorsed.

vibeguard

Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection…

by geraldang702 · Plugin bundle

Listed on: Claude Code: claude-plugins-community · Describes nearly the same job
VibeDoctor

Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes

by vibedoctor.io · MCP server

Listed on: Official MCP Registry · Describes nearly the same job
security-guidance

Security best practices advisor with vulnerability detection and fixes

by rohitg00 · Plugin bundle

Listed on: Community GitHub marketplaces · Describes nearly the same job
backend-security-skills

Security auditor for Node.js and Python backend APIs. Four skills cover pre-audit reconnaissance (route graph, auth matrix, invariants), static code audit across the OWASP API…

by souzavinny · Plugin bundle

Listed on: Claude Code: claude-plugins-community · Describes nearly the same job
security-guidance

Security best practices and vulnerability detection

by Community · Plugin bundle

Listed on: Community GitHub marketplaces · Describes nearly the same job
ghost

Enterprise grade AI-native application security scanning, validation, and remediation

by Ghost Security · Plugin bundle

Listed on: Community GitHub marketplaces · Describes nearly the same job

Its card, with similar plugins by marketplace

What each says it does

slopsec

In its own words, on Community GitHub marketplaces:

Security audit for vibe-coded SaaS apps: 50 checks, severity scoring, prioritized fix list

io.github.Nekzus/npm-sentinel-mcp

In its own words, on Official MCP Registry:

Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.

How to run each

slopsec

No data for an automatic command: what its marketplaces declare does not say unambiguously how to connect it.

io.github.Nekzus/npm-sentinel-mcp As a local MCP server: npm package

Claude Code

claude mcp add --transport stdio npm-sentinel-mcp -- npx -y @nekzus/mcp-server

Commands built only from what the marketplaces declare; the full set for every client is on each card.

Only io.github.Nekzus/npm-sentinel-mcp has a remote endpoint we check. How we check endpoints

Tools each declares

The marketplaces of slopsec publish no list of tools, so we do not compare tools.

Settings each asks for

Neither one's marketplaces publish the settings it asks for.

What it can do: slopsec · What it can do: io.github.Nekzus/npm-sentinel-mcp · Compare two other plugins

Data comes from public marketplace files in GitHub repositories of their authors. Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Data comes from the Docker MCP Catalog (desktop.docker.com/mcp/catalog) and Docker Hub. Package data comes from the public npm registry (registry.npmjs.org). Figures come from our own regular passes over the marketplaces, last read on 2026-11-10. We publish no contact details for plugin publishers.