{"name":"io.github.hxckya/pkgtruth","slug":"hxckya-pkgtruth","title":null,"description":"Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.","url":"https://mcp.market/server/hxckya-pkgtruth","rating":null,"grade":"A","score":89,"certified":false,"status":"active","category":"ai","tags":["ai"],"presence":{"score":31,"stars":4,"forks":0,"downloads_week":77,"last_push_at":"2026-09-14T03:25:52.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/hxckya/pkgtruth","website":null,"version":"0.2.2","remotes":[],"packages":[{"registryType":"npm","identifier":"pkgtruth","version":"0.2.2","transport":{"type":"stdio"},"environmentVariables":[{"description":"Alternate npm registry to verify against. Defaults to https://registry.npmjs.org.","format":"string","name":"PKGTRUTH_REGISTRY"},{"description":"Alternate downloads API used for adoption figures. Defaults to https://api.npmjs.org.","format":"string","name":"PKGTRUTH_DOWNLOADS_API"},{"description":"Where adoption figures are cached between runs. Defaults to ~/.cache/pkgtruth.","format":"string","name":"PKGTRUTH_CACHE_DIR"},{"description":"Per-request timeout in milliseconds. Defaults to 8000.","format":"number","name":"PKGTRUTH_TIMEOUT_MS"}]}],"tools":[{"name":"check_dependencies","description":"Verify many npm or PyPI packages at once — use this before writing a package.json or requirements.txt,","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_install_command","description":"Verify the packages a shell command would install or execute, before running it:","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_package","description":"Verify a single npm or PyPI package before installing, importing, or recommending it.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":89,"grade":"A","scanned_at":"2026-09-19T19:11:53.697Z","report":{"scannerVersion":"0.1.5","scannedAt":"2026-09-19T19:11:53.720Z","components":{"code":{"score":25,"max":25,"notes":["13 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 6 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"pkgtruth","version":"0.2.2","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-09-10T06:24:22.324Z","repositoryUrl":"git+https://github.com/hxckya/pkgtruth.git","weeklyDownloads":77}],"repo":{"found":true,"owner":"hxckya","repo":"pkgtruth","archived":false,"pushedAt":"2026-09-14T03:25:52Z","stars":4,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/323152230?v=4","ownerCreatedAt":"2026-08-31T12:06:50Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":4,"forks":0,"downloadsWeek":77,"license":"MIT","lastPushAt":"2026-09-14T03:25:52.000Z","score":31}}}},"grade_history":[],"reviews":[]}