Skip to main content
Glama
hxckya

pkgtruth

by hxckya
OverviewSchemaRelated ServersScoreDiscussions
JavaScript
Remote

Related Servers

Alternatives to pkgtruth

No user-submitted related servers found.

    Related Servers

    • pkgguard

      kiansaeidnia
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI coding agents to automatically verify npm packages against the live registry before installation, flagging hallucinated, slopsquatted, or otherwise suspicious packages with risk verdicts.
      MIT

    • npm-guardian

      Baneado98
      A
      license
      Not graded
      quality
      C
      maintenance
      Audits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.
      MIT

    • DepShield MCP

      devanshkaria88
      A
      license
      A
      quality
      F
      maintenance
      Acts as a security checkpoint for AI coding agents by intercepting package installations to verify existence, check against CVE databases, and block vulnerable or hallucinated dependencies before they reach your codebase. Provides seven security tools including pre-install gates, full project audits, safe version recommendations, and deep transitive dependency scanning for npm and PyPI packages.
      7
      13
      4
      MIT
    • EVIDIQ Lineage by evidiq

      EVIDIQ Lineageofficial

      evidiq
      A
      license
      Not graded
      quality
      B
      maintenance
      Deterministic supply-chain provenance, SBOM/AI-BOM generation, and dependency risk analysis for npm and PyPI packages, with 14 security rules and verifiable reports.
      1
      MIT

    • lockfile-guardian

      Baneado98
      A
      license
      Not graded
      quality
      D
      maintenance
      Audits your package-lock.json for supply-chain attacks before install. Cross-checks every resolved entry against the live npm registry to detect integrity mismatches, new install scripts, and other malicious signals.
      MIT

    Latest Blog Posts

    MCP directory API

    We provide all the information about MCP servers via our MCP API.

    curl -X GET 'https://glama.ai/api/mcp/v1/servers/hxckya/pkgtruth'

    If you have feedback or need assistance with the MCP directory API, please join our Discord server