Head to head
mcptoon vs pkg-oracle — Dependency Trust Oracle
Same numbers we show everywhere else, lined up. Ratings come from users, the grade comes from our scanner, adoption comes from public registries.
No reviews yet
MCP tools + agent skills in one zero-dependency CLI: 71,929 -> 581 tokens (-99.2%, measured).
Full listingpkg-oracle — Dependency Trust Oracle
Cio.github.julian-martin89/pkg-oracleNo reviews yet
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
Full listingThe short version
Neither has been reviewed yet, so the comparison rests on the scan and the public usage numbers. The safety scan favours mcptoon (89/100 against 67). pkg-oracle — Dependency Trust Oracle is hosted and callable through the gateway; mcptoon runs on your own machine. mcptoon has noticeably more public adoption.
| mcptoon | pkg-oracle — Dependency Trust Oracle | |
|---|---|---|
| User rating | No reviews yet | No reviews yet |
| Safety grade | A89/100 | C67/100 |
| Adoption | Established | New |
| GitHub stars | 202 | – |
| Downloads / week | 1.2k | – |
| Runs where | Your machine (local) | Hosted (remote) |
| Gateway-ready | No | Yes |
| Tools | — | 1 |
| Write actions | — | — |
| Price per call | Free | Free |
| Licence | Apache-2.0 | — |
| Last release | 2026-09-19 | — |
| Category | AI and agents | AI and agents |