Read-only Shipcheck launch-risk scans for authorized JS, TS, and MCP repos.
Free
The rest either hold an API key issued by the publisher or ask for nothing.
Listed without a verification tick. Read the listing before installing.