io.github.hxckya/pkgtruthdev-tools

pkgtruth

Verified · today

Catches hallucinated and slopsquatted npm packages before an agent installs them.

Install

claude mcp add pkgtruth -- npx -y [email protected]

Requires: PKGTRUTH_REGISTRY, PKGTRUTH_DOWNLOADS_API, PKGTRUTH_CACHE_DIR, PKGTRUTH_TIMEOUT_MS

Our take

This server is designed to detect hallucinated or slop-squatted npm packages before an agent installs them. It is for agentic coding, dependency hygiene, and security-conscious package validation. The use case is timely and concrete, though the project appears young and its reliability will depend on how well it tracks package-registry edge cases.

reviewed by hand · 2026-09-01

Something wrong or dead here? Report it

Verification record

last verified
today
github stars
1
last commit
today
archived
no
license
MIT
npm
pkgtruth
latest version
0.1.2
in registry since
2026-08-31

github.com/hxckya/pkgtruth

More in dev-tools

browse all →
context7dev-tools

Context7

Verified · 20 days ago

Up-to-date code docs for any prompt

hand-reviewed61k starschecked 20 days ago

github-mcp-serverdev-tools

GitHub

Verified · 20 days ago

Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.

hand-reviewed32k starschecked 20 days ago

validatordev-tools

Oh My Posh Validator

Verified · 20 days ago

Validate oh-my-posh configurations and segment snippets against the official schema.

hand-reviewed23k starschecked 20 days ago

compiler-explorerdev-tools

Compiler Explorer

Verified · 13 days ago

Compile code with thousands of compilers, inspect the assembly, and share godbolt.org links

hand-reviewed19k starschecked 13 days ago

registrydev-tools

MCP Registry Server

Verified · 25 days ago

Publish and discover MCP servers via the official MCP Registry. Powered by HAPI MCP server.

hand-reviewed7.1k starschecked 25 days ago