pkg-oracle — Dependency Trust Oracle

io.github.julian-martin89Published by GitHub account julian-martin89v1.0.1Updated Oct 24, 2026

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Remote MCP server that lets an assistant verify an npm or PyPI package exists, has known CVEs, and has an OpenSSF Scorecard before adding it to a manifest.

What you can do
  • Verify a single package name against its registry before it is written into a manifest such as package.json, requirements.txt, pyproject.toml or Cargo.toml.
  • Check whether the package actually exists, to catch typosquatted or hallucinated names.
  • Cross-reference OSV.dev for known CVEs affecting the package.
  • Pull the package's OpenSSF Scorecard through deps.dev as a trust signal.
When to use it
Use it when an assistant is about to add or suggest a dependency and you want a quick existence, vulnerability and trust check first, especially to guard against hallucinated or typosquatted package names.
Requirements
A remote streamable HTTP endpoint; no package, environment variables or authentication are declared. Network access to the endpoint and to the upstream registries, OSV.dev and deps.dev is implied.
Before you install
The tool is advisory: results come from third-party sources (registry, OSV.dev, deps.dev) and a clean check does not guarantee a package is safe. Package names you submit are sent to that remote endpoint and to those services. It only checks; it does not install anything.

Installation

In SourceWeft

  1. Open pkg-oracle — Dependency Trust Oracle in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.julian-martin89%2Fpkg-oracle/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "pkg-oracle-dependency-trust-oracle": {
      "type": "http",
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}

Tools

1

verify_package

Verify Package

Dependency Trust Oracle. Call this BEFORE writing any package into a manifest (package.json, requirements.txt, pyproject.toml, Cargo.toml, ...). It checks whether the package actually exists on its registry, cross-references OSV.dev for known CVEs, pulls the package's OpenSSF Scorecard via deps.dev, and runs a Levenshtein-distance typosquat/slopsquat check against a curated list of popular packages combined with the package's publish age. Returns a synthetic verdict: ALLOW (no issues found), WARN (proceed with caution — read the findings before installing), or BLOCK (do not install — likely a hallucinated package name, an active typosquat, or a known critical/high-severity vulnerability). Always call this before running an install command for a package you have not already verified in this session. First 5 calls per caller are free; after that this tool requires x402 payment (USDC on Base) and will return a payment-required error with the amount and address to pay.

Parametersnamerequiredversionecosystemrequired

Version history

1
  1. v1.0.1LatestSep 16, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.