← MCPLookup
Packageactivev0.8.0

io.github.Dave-London/npm

io.github.Dave-London/npm

Structured npm/pnpm operations (install, audit, outdated, list) as typed JSON.

No blockers found

assessed on 1 of 4 dimensions

  • ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of Feb 14, 2026
    Pass
  • MaintenanceRepository maintenance signals not yet ingested.
    Pending
  • Manifest integrityLive manifest not yet captured — the rug-pull baseline begins at first probe.
    Pending
  • Supply chainPackage vulnerability scan not yet run.
    Pending
  • Behavioral trustNo live endpoint to observe.
    Not applicable

Connect

npm package
npx -y @paretools/npm

Provenance

  • Official MCP Registry · as of Feb 14, 2026 · registry-tos

Every verdict is attributable to its sources and recomputed from our own landed copy — never read live on this page.