Skip to main content
Glama
AyoubTadlaoui

npmguard

by AyoubTadlaoui
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Rust
Local

Related Servers

Alternatives to npmguard

Related Servers

  • npm-guardian

    Baneado98
    A
    license
    Not graded
    quality
    C
    maintenance
    Audits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.
    MIT

  • pkgguard

    kiansaeidnia
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI coding agents to automatically verify npm packages against the live registry before installation, flagging hallucinated, slopsquatted, or otherwise suspicious packages with risk verdicts.
    0
    MIT

  • pkgproof

    jahija-okan
    A
    license
    A
    quality
    C
    maintenance
    Verifies npm packages for security risks before installation, checking advisories, install scripts, typosquatting, and other factors, providing safe/block verdicts.
    1
    Apache 2.0

  • pkgtruth

    hxckya
    A
    license
    A
    quality
    A
    maintenance
    Enables AI coding agents and CI to vet npm dependencies before they reach the lockfile, flagging hallucinated, slopsquatted, or otherwise risky packages with evidence-backed verdicts.
    3
    493
    3
    MIT

  • lockfile-guardian

    Baneado98
    A
    license
    Not graded
    quality
    D
    maintenance
    Audits your package-lock.json for supply-chain attacks before install. Cross-checks every resolved entry against the live npm registry to detect integrity mismatches, new install scripts, and other malicious signals.
    MIT

  • import-guardian

    Baneado98
    A
    license
    Not graded
    quality
    C
    maintenance
    Scans generated JavaScript/TypeScript code to detect AI-hallucinated or suspicious npm package imports before installation, providing a verdict of CLEAN, REVIEW, or BLOCK.
    41
    MIT
Deploy Server
RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

TDQS

A4.4/5.0

Scored across 1 tool

Disambiguation5/5

There is only one tool, so there is zero possibility of selecting the wrong tool. Its purpose is clearly defined and distinct from any nonexistent alternatives.

Naming Consistency5/5

The single tool name 'install_package' follows a clean verb_noun pattern. Although the name implies installation rather than evaluation, it is consistent and predictable within this one-tool set.

Tool Count3/5

The server has just one tool, which feels thin for a typical server and borders on the minimum viable scope. While the tool covers a specific need, it does not reach the 3-15 tool range that indicates a well-populated set.

Completeness4/5

For the stated purpose of evaluating npm package risk, the tool fully covers the single required action. Minor gaps include lack of support for batch evaluation or detailed policy management, but the core lifecycle of 'check before install' is complete.

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources