87
/100
A
◎ Verified 5⁄5
proof-of-commitment
Supply chain risk scoring for npm, PyPI, Cargo, and Go packages. 9 tools for behavioral trust signals — publisher depth, release consistency, maintenance patterns. Both axios and node-ipc scored CRITICAL before they got attacked. Free CLI, CI gate, REST API. No API key required.
npm
MCP Surface
Tools: 9
Verified visibility
— 5/5 applicable dimensions scored
✓ Schema Quality
✓ Protocol
✓ Reliability
✓ Docs & Maintenance
✓ Security Hygiene
— Schema Interpretability
Schema Quality
90
25% weight
Protocol Compliance
92
20% weight
Reliability
99
20% weight
Docs & Maintenance
69
15% weight
Security Hygiene
81
20% weight
Score History
Category Trends
30-Day Uptime
30 days ago
Today
Latency Trend
Latest Health Check
Checked 1 month ago
Static Analysis
| Metric | Score | Rating |
|---|---|---|
| Schema Completeness | 60 | Fair |
| Description Quality | 75 | Good |
| Documentation Coverage | 57 | Fair |
| Maintenance Pulse | 70 | Good |
| Dependency Health | 50 | Fair |
| License Clarity | 100 | Good |
| Version Hygiene | 90 | Good |
Analyzed 1 month, 3 weeks ago
Protocol Compliance
Probed 1 month, 3 weeks ago