Pkgtruth MCP
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
no price published
github.com/hxckya · 1 listed service · provider site
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
Provider identity is derived from the domain or repository in the source record. If two vendors share a host, they appear together here — that is a limitation of the data, not a statement about ownership.