io.github.julian-martin89/pkg-oracle · v1.0.1 · developer-tools
pkg-oracle — Dependency Trust Oracle is healthy: it completed an MCP handshake in 2313 ms and exposes 1 tools.
Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.
Endpoint: https://mcp-snowy-dew-9447.fly.dev/mcp (streamable-http)
No repository listed · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 1 |
| Latency | 2313 ms |
| Last checked (UTC) | 2026-10-15T04:30:39.264Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-15T04:30:39.264Z | Healthy | 2313 |
verify_package | Dependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, Cargo.toml, ...). It checks whether the package actually exists on its registry, cross-references OSV.dev for known CVEs, pulls the package's OpenSSF Scorecard via deps.dev, |