MCP server for PyPI: search packages and audit dependency trees against OSV vulnerability data before an agent suggests them.