1. Conduid
  2. Social
  3. pkgproof
MCP server · Social

pkgproof

Verify an npm package before you install it: advisories, install scripts, typosquats, provenance.

Unclaimed social
37Low

Scored a month ago · breakdown

About pkgproof

pkgproof is an MCP server published by jahija-okan in the Social category: verify an npm package before you install it: advisories, install scripts, typosquats, provenance.

Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add pkgproof -- npx -y @pkgproof/mcp
npx
npx -y @pkgproof/mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about pkgproof

Powered by Claude · Grounded in docs

I know everything about pkgproof. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Releases

v0.1.11v0.1.11 · 8 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.10...v0.1.11
v0.1.10v0.1.10 · 8 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.9...v0.1.10
v0.1.9v0.1.9 · 8 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.8...v0.1.9
v0.1.8v0.1.8 · 5 Oct 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.7...v0.1.8
v0.1.7v0.1.7 · 14 Sep 2026Full Changelog: https://github.com/jahija-okan/pkgproof-mcp/compare/v0.1.6...v0.1.7
Questions

About pkgproof

How do I install pkgproof?

Run claude mcp add pkgproof -- npx -y @pkgproof/mcp, then add the server to your MCP client's configuration.

Is pkgproof safe to use with an AI agent?

Its trust score is 37 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is pkgproof still maintained?

Yes — the latest release is v0.1.11 (8 Oct 2026), and the last commit was 9 days ago. The repository has 0 stars.