Head to head
pkg-oracle — Dependency Trust Oracle vs SkillTotal
Same numbers we show everywhere else, lined up. Ratings come from users, the grade comes from our scanner, adoption comes from public registries.
pkg-oracle — Dependency Trust Oracle
Cio.github.julian-martin89/pkg-oracleNo reviews yet
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
Full listingNo reviews yet
Deterministic security scan of MCP servers, agent skills and npm/PyPI packages. Runs locally.
Full listingThe short version
Neither has been reviewed yet, so the comparison rests on the scan and the public usage numbers. The safety scan favours SkillTotal (75/100 against 67). pkg-oracle — Dependency Trust Oracle is hosted and callable through the gateway; SkillTotal runs on your own machine. SkillTotal has noticeably more public adoption.
| pkg-oracle — Dependency Trust Oracle | SkillTotal | |
|---|---|---|
| User rating | No reviews yet | No reviews yet |
| Safety grade | C67/100 | B75/100 |
| Adoption | New | Growing |
| GitHub stars | – | 3 |
| Downloads / week | – | 1.4k |
| Runs where | Hosted (remote) | Your machine (local) |
| Gateway-ready | Yes | No |
| Tools | 1 | — |
| Write actions | — | — |
| Price per call | Free | Free |
| Licence | — | Apache-2.0 |
| Last release | — | 2026-09-19 |
| Category | AI and agents | AI and agents |