MCP server that verifies an npm package name is real before a coding agent installs it — catching hallucinated ('slopsquat') package names
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
MCP server that verifies an npm package name is real before a coding agent installs it — catching hallucinated ('slopsquat') package names