A
licenseNot graded
qualityC
maintenanceProvides weekly download counts and trend data for npm packages, enabling comparison of adoption velocity across JavaScript libraries.
MIT
pumpcheck
Server Details
Detect npm download-pumping before adding a dependency: real usage vs inflated counter.
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Uptime
- 24.2% over 38 days
- Last Tested
- Transport
- Streamable HTTP
- URL
- ChatGPT
- –
- Claude
- –
TDQS
A4.5/5.0
Scored across 1 tool
Disambiguation5/5
With only one tool, there is no possibility of confusion or overlapping purpose. The tool's function is explicitly and clearly described, making it trivially distinct.
Naming Consistency5/5
The single tool name follows a clear check_verb_noun convention that is descriptive and readable. While there is only one name to evaluate, it is internally consistent and sets a clear pattern.
Tool Count3/5
One tool is borderline for a server, even for a narrowly focused purpose. The surface feels very thin, though the server's name and description indicate it is intentionally a single-check utility. It does not match the typical 3-15 well-scoped range.
Completeness4/5
The tool provides a thorough single-package check with multiple metrics and a verdict, but it cannot audit a whole package.json or lockfile in one pass, which is a documented gap (available only as a separate paid product). Agents can work around this by calling the tool per package, so the gap is minor.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
check_npm_download_trust
Related MCP Connectors
Check npm packages for typosquats, hallucinated names, install scripts and risky new releases.
Detect malicious or vulnerable npm packages: registry search, OSV.dev and GitHub advisory lookups
Verify npm packages before your AI agent installs them: hallucinations, advisories, API drift.
npm package trends and weekly downloads over time. Free key at trendsmcp.ai
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables developers and AI coding agents to vet npm packages before installation by checking existence, lookalike names, package age, install scripts, maintainers, downloads, and advisories, returning GO, RISKY, FAKE, or MISSING. It also scans a project's package.json for worst-first dependency verdicts and can run as a CLI or stdio MCP server.MIT
- AlicenseAqualityAmaintenanceEnables AI coding agents and CI to vet npm dependencies before they reach the lockfile, flagging hallucinated, slopsquatted, or otherwise risky packages with evidence-backed verdicts.327 npm4MIT
- AlicenseNot gradedqualityCmaintenanceAudits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.MIT
Try in Browser
Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd
Glama MCP Gateway
Add one secure layer between your agents and this server.