A
licenseNot graded
qualityC
maintenanceProvides weekly download counts and trend data for npm packages, enabling comparison of adoption velocity across JavaScript libraries.
MIT
pumpcheck
Server Details
Detect npm download-pumping before adding a dependency: real usage vs inflated counter.
Glama couldn't complete the latest health check. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 28.5% over 27 days
- Last Tested
- Transport
- Streamable HTTP
- URL
TDQS
A4.5/5.0
Scored across 1 tool
Disambiguation5/5
With only one tool, there is no possibility of confusion or overlapping purpose. The tool's function is explicitly and clearly described, making it trivially distinct.
Naming Consistency5/5
The single tool name follows a clear check_verb_noun convention that is descriptive and readable. While there is only one name to evaluate, it is internally consistent and sets a clear pattern.
Tool Count3/5
One tool is borderline for a server, even for a narrowly focused purpose. The surface feels very thin, though the server's name and description indicate it is intentionally a single-check utility. It does not match the typical 3-15 well-scoped range.
Completeness4/5
The tool provides a thorough single-package check with multiple metrics and a verdict, but it cannot audit a whole package.json or lockfile in one pass, which is a documented gap (available only as a separate paid product). Agents can work around this by calling the tool per package, so the gap is minor.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
check_npm_download_trust
Related MCP Connectors
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift.
npm package trends and weekly downloads over time. Free key at trendsmcp.ai
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables AI coding agents and CI to vet npm dependencies before they reach the lockfile, flagging hallucinated, slopsquatted, or otherwise risky packages with evidence-backed verdicts.356 npm4MIT
- AlicenseNot gradedqualityCmaintenanceAudits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.MIT
- AlicenseAqualityCmaintenanceSupply chain risk scoring for npm, PyPI, and GitHub repos850 npm8MIT
Try in Browser
Shareable, User-Owned Context BackendPeople, applications, and agents read, write, and coordinate together in one context lake. Reach it over MCP, a CLI, a Python SDK, or REST.fulcradynamics.comAd
Glama MCP Gateway
Add one secure layer between your agents and this server.