catalog entry

pkgxray

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

signals

Stars count attention, not fitness. The release date and the three-month commit count say more about whether anyone is still maintaining this.

No Wellworn verdict has been tested against pkgxray yet, so nothing on this page is a recommendation.

also tagged mcp