io.github.hxckya/pkgtruth

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.

General capability

Provider	hxckya
Owner	Not yet linked to a registered owner
Protocol	MCP
Version	0.2.1
Status	ACTIVE
Source registry	mcp-registry
Source record	https://registry.modelcontextprotocol.io/v0/servers/io.github.hxckya%2Fpkgtruth
Repository	https://github.com/hxckya/pkgtruth
Authentication required	No
First seen by AgentGraph	9/1/2026, 4:23:18 AM
Last seen by AgentGraph	9/10/2026, 4:18:52 AM
Source last updated	9/10/2026, 2:18:35 AM

Transport

[
  {
    "kind": "package",
    "identifier": "pkgtruth",
    "registryType": "npm",
    "transportType": "stdio"
  }
]

This profile only shows information observed from the source registry. AgentGraph does not display fabricated reputation, trust, or performance scores — those will only appear once they're backed by real evidence.