ASSESSMENT #AIM-2026-000000

io.github.mlawsonking/package-guard-mcp

Automated only

Supply-chain guard for AI coding agents: verify packages, check vulns/malware, detect typosquats.

Repository Third-party · npm

Install

npx package-guard-mcp

Running any third-party MCP server executes its code with the permissions you grant it. A grade reflects our findings at the “last verified” date below — verify independently before installing in a sensitive environment.

Should you install this?

Grading in progress — no dimensions have been assessed yet. Check back soon for a full picture.

Last verified 2026-08-14

Dispute this grade

Overall grade pending

Grade history

Historical grade tracking becomes available once this server has been through at least two sync cycles — the longitudinal dataset is what answers “is this server getting worse?”

Maintainer of this server? Dispute a finding or trigger a re-scan after a fix.

How disputes work Claim this listing