Mmcp.market

Head to head

mcpm vs pkg-oracle — Dependency Trust Oracle

Same numbers we show everywhere else, lined up. Ratings come from users, the grade comes from our scanner, adoption comes from public registries.

mcpmio.github.getmcpm/cli
B
No reviews yet

MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

Full listing
pkg-oracle — Dependency Trust Oracleio.github.julian-martin89/pkg-oracle
C
No reviews yet

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Full listing

The short version

Neither has been reviewed yet, so the comparison rests on the scan and the public usage numbers. The safety scan favours mcpm (83/100 against 67). pkg-oracle — Dependency Trust Oracle is hosted and callable through the gateway; mcpm runs on your own machine. mcpm has noticeably more public adoption.

 mcpmpkg-oracle — Dependency Trust Oracle
User ratingNo reviews yetNo reviews yet
Safety gradeB83/100C67/100
AdoptionGrowingNew
GitHub stars3
Downloads / week349
Runs whereYour machine (local)Hosted (remote)
Gateway-readyNoYes
Tools101
Write actions1
Price per callFreeFree
LicenceMIT
Last release2026-09-19
CategoryAI and agentsAI and agents

Other comparisons