
package-meta
io.github.weiseerPublished by GitHub account weiseerv0.1.1Updated Oct 24, 2026
npm/PyPI/Cargo package metadata + downloads + maintainer health.
Overview
An MCP server that gives an assistant package metadata, download counts, and maintainer health for npm, PyPI, and Cargo packages.
- What you can do
- This local stdio server exposes package registry information to an assistant: metadata, download statistics, and maintainer health signals for npm, PyPI, and Cargo packages. It is described as a cached oracle, so results may come from a remote snapshot rather than a live registry query. The README does not list individual tool names.
- When to use it
- Useful when an assistant needs to look up or compare package details, popularity, or maintainer signals while working on dependency choices, upgrades, or supply-chain questions. It is a convenience layer over registry lookups rather than a general web tool.
- Requirements
- Node.js and npm to run the package locally via npx or a global install. No authentication is declared. Optional environment variables: PKG_META_URL to override the remote snapshot URL, and PKG_META_LOCAL_ONLY to skip remote fetching. Network access is needed unless local-only mode is set.
Installation
In SourceWeft
- Open package-meta in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
@weiseer/package-meta-mcp
npm/PyPI/Cargo package metadata + downloads + maintainer health. stdio MCP server.
Part of weiseer — AI-agent-native cached oracles.
Install
Use with Claude Desktop / Cursor / Cline / Continue / Windsurf
Why use this instead of your agent doing it itself
The DIY cost in token-spend, latency, and rate-limit risk is 100-1500x our cost. See the weiseer organization README for the economic argument.
Environment
PKG_META_URL— override remote snapshot URLPKG_META_LOCAL_ONLY=1— skip remote fetch
License
Apache-2.0
Source: README.md at commit 5d640e2
Tools
0Version history
1- v0.1.1LatestSep 16, 2026
Score
40% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Declare a license in the repository or the registry entry.