Skip to main content
Glama
jahija-okan

pkgproof

by jahija-okan
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Remote

Related Servers

Alternatives to pkgproof

No user-submitted related servers found.

    Related Servers

    • npm-guardian

      Baneado98
      A
      license
      Not graded
      quality
      C
      maintenance
      Audits npm packages for supply-chain attacks (typosquatting, malicious install scripts, credential exfiltration) before installation, returning a SAFE/SUSPICIOUS/DANGEROUS verdict.
      MIT

    • pkgtruth

      hxckya
      A
      license
      A
      quality
      A
      maintenance
      Enables AI coding agents and CI to vet npm dependencies before they reach the lockfile, flagging hallucinated, slopsquatted, or otherwise risky packages with evidence-backed verdicts.
      3
      48 npm
      4
      MIT

    • pkgguard

      kiansaeidnia
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI coding agents to automatically verify npm packages against the live registry before installation, flagging hallucinated, slopsquatted, or otherwise suspicious packages with risk verdicts.
      6 npm
      MIT

    • lockfile-guardian

      Baneado98
      A
      license
      Not graded
      quality
      D
      maintenance
      Audits your package-lock.json for supply-chain attacks before install. Cross-checks every resolved entry against the live npm registry to detect integrity mismatches, new install scripts, and other malicious signals.
      MIT

    • package-verify-mcp

      Anicodeth
      A
      license
      A
      quality
      C
      maintenance
      Verifies npm package names for safety, detecting typosquats and nonexistent packages before your coding agent installs them.
      2
      4 npm
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A4.9/5.0

    Scored across 1 tool

    Disambiguation5/5

    Only one tool exists, so there is no possibility of confusion or overlap.

    Naming Consistency5/5

    The single tool name 'verify_package' follows a clear verb_noun pattern.

    Tool Count3/5

    While the server has a narrow focus, having only one tool feels thin; however, the tool is comprehensive and covers many verification aspects, so it is borderline acceptable.

    Completeness5/5

    The single tool appears to fully cover the intended domain of package verification, including security, provenance, and reputation checks, with no obvious missing functionality.

    Maintenance

    ActivityMaintained
    ResponsivenessNo issues

    Resources