pkgproof is an MCP server published by jahija-okan in the Social category: verify an npm package before you install it: advisories, install scripts, typosquats, provenance.
Recent commit activity is the strongest signal that reported issues will get attention.
Install
Claude Code
claude mcp add pkgproof -- npx -y @pkgproof/mcp
npx
npx -y @pkgproof/mcp
This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about pkgproof
Powered by Claude · Grounded in docs
I know everything about pkgproof. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v0.1.11v0.1.11 · 8 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.10...v0.1.11
v0.1.10v0.1.10 · 8 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.9...v0.1.10
v0.1.9v0.1.9 · 8 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.8...v0.1.9
v0.1.8v0.1.8 · 5 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.7...v0.1.8
Run claude mcp add pkgproof -- npx -y @pkgproof/mcp, then add the server to your MCP client's configuration.
Is pkgproof safe to use with an AI agent?
Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.
Is pkgproof still maintained?
Yes — the latest release is v0.1.11 (8 Oct 2026), and the last commit was 9 days ago. The repository has 0 stars.