io.github.hxckya/pkgtruthdev-tools

pkgtruth

Verified · 8 days ago

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

Install

claude mcp add pkgtruth -- npx -y [email protected]

Requires: PKGTRUTH_REGISTRY, PKGTRUTH_DOWNLOADS_API, PKGTRUTH_CACHE_DIR, PKGTRUTH_TIMEOUT_MS

Our take

This server is designed to detect hallucinated or slop-squatted npm packages before an agent installs them. It is for agentic coding, dependency hygiene, and security-conscious package validation. The use case is timely and concrete, though the project appears young and its reliability will depend on how well it tracks package-registry edge cases.

reviewed by hand · 2026-09-01

Something wrong or dead here? Report it

Verification record

last verified
8 days ago
github stars
4
last commit
11 days ago
archived
no
license
MIT
npm
pkgtruth
latest version
0.2.2
in registry since
2026-08-31

github.com/hxckya/pkgtruth

More in dev-tools

browse all →
context7dev-tools

Context7

Verified · 40 days ago

Up-to-date code docs for any prompt

hand-reviewed62k starschecked 40 days ago

github-mcp-serverdev-tools

GitHub

Verified · 40 days ago

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

hand-reviewed33k starschecked 40 days ago

validatordev-tools

Oh My Posh Validator

Verified · 40 days ago

Validate oh-my-posh configurations and segment snippets against the official schema.

hand-reviewed23k starschecked 40 days ago

compiler-explorerdev-tools

Compiler Explorer

Verified · 28 days ago

Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links

hand-reviewed19k starschecked 28 days ago

gitdiagramdev-tools

GitDiagram

Verified · 16 days ago

Architecture diagrams, explanations and Mermaid source for public GitHub repositories.

hand-reviewed18k starschecked 16 days ago