io.github.hxckya/pkgtruth

not probeable (local package)

Unclaimed · Unverified

Publisher-provided description

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

Summary by lookupd

Checks npm and PyPI package names against registries to flag hallucinated or typosquatted dependencies before an agent installs them.

Install

Claude Code, npm package (stdio)

claude mcp add pkgtruth -- npx -y pkgtruth

Codex, npm package (stdio)

codex mcp add pkgtruth -- npx -y pkgtruth

Cursor, npm package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "pkgtruth": {
      "command": "npx",
      "args": [
        "-y",
        "pkgtruth"
      ]
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/io.github.hxckya/pkgtruth.svg)](https://lookupd.com/servers/io.github.hxckya/pkgtruth)