Faceabot

Catalog › io.github.julian-martin89/pkg-oracle

Is pkg-oracle — Dependency Trust Oracle reliable?

Not measured yet Not measured yet. Faceabot will test it automatically; you can speed this up with the MCP tool check_reliability.

En français : Pas encore mesuré. Faceabot teste cet outil lui-même, en continu, sans dépendre de ce que son auteur affirme.

What it does

Blocks typosquatted or hallucinated npm/PyPI packages before an AI agent installs them.

Source: official MCP registry (registry.modelcontextprotocol.io) · version 1.0.1
Connect your agent
{
  "mcpServers": {
    "pkg-oracle": {
      "url": "https://mcp-snowy-dew-9447.fly.dev/mcp"
    }
  }
}
Or ask Faceabot first: MCP tool check_reliability {"id":"io.github.julian-martin89/pkg-oracle"} on https://faceabot.com/api/mcp.
Does it actually do the job?

Not tested with a real task yet. Faceabot only runs real tasks on tools that declare themselves read-only (readOnlyHint), with a neutral sample input.

Faceabot measurements

No measurement yet.

Method: MCP initialize then tools/list from Faceabot (FaceabotProbe/1.0), plus one read-only tool call with a neutral input when the server declares one, repeated over time. This checks that the server is up and speaks MCP correctly; it does not certify the quality or safety of each tool. How measurement works.

Similar tools

pkg:pypi package-url shape, value discarded Not measured yet

pkg:pypi package-url shape, value discarded

MCP endpoint : https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/purl-pypi/mcp · website · measurements and details
pkg:npm package-url shape, value discarded Not measured yet

pkg:npm package-url shape, value discarded

MCP endpoint : https://agent-observatory-sensor.nolimit-observatory.workers.dev/s/purl-npm/mcp · website · measurements and details
url-oracle — URL Trust Oracle Not measured yet

Flags phantom-squatted/typosquatted domains and known-malicious URLs before an agent follows them.

MCP endpoint : https://url-oracle.fly.dev/mcp · measurements and details
Attester Oracle Not measured yet

Verify PyPI and npm packages, symbols, and version diffs against real artifacts. Free, no account.

MCP endpoint : https://attester.dev/mcp/ · website · measurements and details
PyPI Release Tracker — new Python packages & dependency updates (pypiwatch) Not measured yet

PyPI releases: Python package versions, daily. Register in-session — free testnet funds.

MCP endpoint : https://a2awire.com/mcp/data/pypiwatch-new-pypi-package-releases-python-dependency-updates-dffb95/http · website · measurements and details
Publisher of pkg-oracle — Dependency Trust Oracle?

Show your measured reliability on your README or website:

Faceabot reliability badge for pkg-oracle — Dependency Trust Oracle

[![Measured by Faceabot](https://faceabot.com/badge/io.github.julian-martin89/pkg-oracle.svg)](https://faceabot.com/tools/io.github.julian-martin89/pkg-oracle)
Data in JSON: /api/catalog?id=io.github.julian-martin89/pkg-oracle · Stop probes: POST /api/reliability/opt-out

AI agents: all of this is available without keys over MCP https://faceabot.com/api/mcp · HTTP https://faceabot.com/api/catalog?q=… · Guide : llms.txt

Pulse: what is changing in agent commerce · Is your store ready for AI shopping agents? · State of MCP (weekly) · MCP server doctor · Open reliability data