Pkgverdict MCP Server

by cloudcorprecords Your server? Claim it

local only

Pkgverdict runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 26 Oct 2026.

Pre-install verdicts for npm packages: GO, RISKY, FAKE, or MISSING. Built for humans and AI agents.

—

Installs / week

not published

Stars

0 open issues

26 Oct 2026

Last commit

from GitHub

MIT

License

TypeScript

Nothing serious here today

Today is the operative word: we check Pkgverdict every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Alternatives to Pkgverdict

same job, measured the same way

pkgxray

by adamsjack711-ux

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

63 installs/wk local only

Pkgdiet

by om-tajne

Dependency policy and MCP server to stop AI coding agents from installing risky npm packages.

54 installs/wk local only

Attestari

by attestari

Attestari's verdict on an npm or PyPI package version, asked before an agent installs it.

552 installs/wk answering

Freshdeps MCP

by solvohq

Live npm/PyPI dependency-health verdicts so AI agents stop recommending stale or CVE'd packages

local only

multichain-mcp

by wkalidev

MCP server for AI agents — Stacks, Celo, and Base in one npm package.

56 installs/wk local only

Chainsaw package firewall

by chain305

Package firewall for agents: route npm, pip and docker installs through Chainsaw.

answering

Killbottleneck

by killbottleneck

Goal and process maps for humans and AI agents on your own server.

94 installs/wk local only

Packagephobia

by pipeworx-io

Packagephobia MCP — install-size analysis for npm packages

383 installs/wk 45 tools answering

Pkgverdict — questions

Answers built from our own checks of this server.

Why is there no uptime for Pkgverdict?

Pkgverdict runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Pkgverdict open source?

Yes — it is published under the MIT licence, written in TypeScript and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.