{"name":"io.github.adam121393/package-intel","slug":"adam121393-package-intel","title":"Package Intel","description":"npm, PyPI & crates.io health, vulns and dependency graphs. Runs locally, no API key.","url":"https://mcp.market/server/adam121393-package-intel","rating":null,"grade":"C","score":68,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":21,"stars":0,"forks":0,"downloads_week":35,"last_push_at":"2026-08-14T23:56:19.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/adam121393/package-intel","website":"https://github.com/adam121393/package-intel","version":"1.1.1","remotes":[],"packages":[{"registryType":"npm","identifier":"package-intel-mcp","version":"1.1.1","transport":{"type":"stdio"},"environmentVariables":[{"description":"Base URL of the backing API.","default":"https://marketagent.adam121393.workers.dev","name":"API_URL"},{"description":"CAIP-2 network id for payments. eip155:8453 is Base mainnet.","default":"eip155:8453","name":"NETWORK"},{"description":"Optional. Leave unset to use the free tools. Setting it to the private key of a wallet funded with USDC on NETWORK additionally unlocks package_health and package_batch_health, paid per call. Use a dedicated low-balance wallet: this is a hot key that spends automatically.","isSecret":true,"name":"X402_PRIVATE_KEY"},{"description":"Optional. Set to \"true\" to expose the paid tools without a wallet, paying instead by passing the tx_hash of a USDC transfer you settled yourself. For agents that manage their own on-chain payments.","default":"false","name":"X402_TX_HASH"}]}],"tools":[{"name":"package_batch_health","description":"Score up to 50 packages in one call \\u2014 use this to audit an entire package.json, requirements.txt or Cargo.toml at once instead of calling package_health repeatedly. Costs $0.02 in USDC per call.","write_action":false,"price_micros":0,"input_schema":null},{"name":"package_deps","description":"Get the dependency graph for an npm, PyPI or crates.io (Rust) package: direct and transitive dependencies with versions and counts, with deprecated direct dependencies flagged. Free, no payment required.","write_action":false,"price_micros":0,"input_schema":null},{"name":"package_downloads","description":"Get download counts for an npm, PyPI or crates.io (Rust) package over a time range. Free, no payment required.","write_action":false,"price_micros":0,"input_schema":null},{"name":"package_health","description":"Get a 0-100 health/risk score for an npm, PyPI or crates.io (Rust) package, with maintenance, popularity, security, and freshness sub-scores plus a rationale. Use this to decide whether a dependency is safe to adopt. Costs $0.01 in USDC per call.","write_action":false,"price_micros":0,"input_schema":null},{"name":"package_snapshot","description":"Get a consolidated snapshot of an npm, PyPI or crates.io (Rust) package: latest version, license, description, repository, weekly downloads, maintainers, last publish date, and deprecation status. Free, no payment required.","write_action":false,"price_micros":0,"input_schema":null},{"name":"package_vulns","description":"List known vulnerabilities (OSV.dev) for an npm, PyPI or crates.io (Rust) package. Pass a version to scope results to that version; omit it to see every advisory ever filed against the package. Free, no payment required.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":68,"grade":"C","scanned_at":"2026-09-23T21:40:30.986Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-23T21:40:30.983Z","components":{"code":{"score":20,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 40 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/server.js: …ode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"package-intel-mcp","version":"1.1.1","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":0,"publishedAt":"2026-08-09T20:50:36.438Z","repositoryUrl":"git+https://github.com/adam121393/package-intel.git","weeklyDownloads":35}],"repo":{"found":true,"owner":"adam121393","repo":"package-intel","archived":false,"pushedAt":"2026-08-14T23:56:19Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/314718469?v=4","ownerCreatedAt":"2026-08-08T17:10:15Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":0,"forks":0,"downloadsWeek":35,"license":"MIT","lastPushAt":"2026-08-14T23:56:19.000Z","score":21}}}},"grade_history":[],"reviews":[]}