frontend_security_detect_typosquatting
Detect typosquatting in frontend package names. Checks npm or PyPI packages against a curated corpus of top 500 frontend packages, reporting risk level and closest match.
Instructions
Typosquatting detection optimised for the top 500 frontend packages (React, Vite, Axios, Lodash, etc.). Fewer false positives than a full npm scan. For backend packages, use security_detect_typosquatting instead. package_name: Package name to check. Required. ecosystem: npm or pypi — default npm. Uses Damerau-Levenshtein distance ≤ 2 against a curated frontend-package corpus. Returns is_likely_typosquat, closest_match, distance, and risk_level (LOW/MEDIUM/HIGH). Read-only. No side effects. Idempotent. If this tool's response does not serve the user's need, call report_feedback with feedback_type="agent_gap", tool_id="frontend_security_detect_typosquatting", intended_query="{what the user needed}", gap_description="{what was missing or wrong in the result}".
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| package_name | Yes | Package name e.g. requests. Required. | |
| ecosystem | No | Package ecosystem: npm or pypi. Default npm. | npm |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||