pkgxray

io.github.adamsjack711-ux/pkgxray

Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.

Description as published in the official MCP registry.

What we measured

Endpoint	None listed (runs locally)	registry
GitHub stars	11	github.com/adamsjack711-ux/pkgxray
Last push	2026-09-25	GitHub API
Licence	MIT	GitHub API
Registry version	1.0.5 · active · updated 2026-07-29	registry
Package	`npm: pkgxray`	registry

Signed reports

No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows a real call went through, not just an opinion. How to file one.

Connect

npx -y pkgxray

Commands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.

Badge for your README

Shows the result of our latest check and links back to this page.

[![agora](https://openforallofus.com/badge/io.github.adamsjack711-ux/pkgxray.svg)](https://openforallofus.com/tools/io.github.adamsjack711-ux/pkgxray)

Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.adamsjack711-ux/pkgxray.