{"name":"io.github.4hmetuyar/slopsquat-scanner","slug":"4hmetuyar-slopsquat-scanner","title":null,"description":"Checks declared npm/PyPI dependencies against real registries to catch slopsquatting","url":"https://mcp.market/server/4hmetuyar-slopsquat-scanner","rating":null,"grade":"A","score":86,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":30,"stars":1,"forks":0,"downloads_week":307,"last_push_at":"2026-10-01T07:02:43.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/GuardBee/guardbee-mcp","website":null,"version":"0.1.1","remotes":[],"packages":[{"registryType":"npm","identifier":"@guardbee/mcp-slopsquat-scanner","version":"0.1.1","transport":{"type":"stdio"}}],"tools":[{"name":"check_package","description":"Check a single package name against the real npm or PyPI registry","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_directory","description":"Auto-detect and check both npm and pip manifests (package.json, requirements.txt, pyproject.toml) in a directory against their real registries","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_npm","description":"Check every dependency declared in a package.json (dependencies, devDependencies, peerDependencies, optionalDependencies) against the real npm registry -- flags any package name that doesn't exist at all (a likely LLM-hallucinated dependency an attacker may have pre-registered, i.e. 'slopsquatting'), and separately notes any that exist but were only first published very recently.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_pip","description":"Check every dependency declared in requirements.txt or pyproject.toml against the real PyPI registry -- flags any package name that doesn't exist at all (a likely LLM-hallucinated dependency an attacker may have pre-registered), and separately notes any that exist but were only first published very recently.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":86,"grade":"A","scanned_at":"2026-10-01T13:50:21.817Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-01T13:50:21.795Z","components":{"code":{"score":25,"max":25,"notes":["19 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":4,"max":10,"notes":["namespace and repository owner differ"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@guardbee/mcp-slopsquat-scanner","version":"0.1.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-09-28T19:10:34.191Z","repositoryUrl":"git+https://github.com/GuardBee/guardbee-mcp.git","weeklyDownloads":307}],"repo":{"found":true,"owner":"GuardBee","repo":"guardbee-mcp","archived":false,"pushedAt":"2026-10-01T07:02:43Z","stars":1,"forks":0,"openIssues":0,"ownerType":"Organization","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/296794741?v=4","ownerCreatedAt":"2026-06-25T07:13:41Z"},"icon":{"url":"https://avatars.githubusercontent.com/u/296794741?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":0,"downloadsWeek":307,"license":"MIT","lastPushAt":"2026-10-01T07:02:43.000Z","score":30}}}},"grade_history":[],"reviews":[]}