How do I install package-risk?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is package-risk official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 50 (Fair). The formula is published on the methodology page.

MCPpedia

package-risk MCP Server | MCPpedia

package-risk MCP Server

Name: package-risk MCP Server
Author: makosddavid

Package risk checks: maintenance, licence, advisories. Paid per call in USDC, no signup.

Tools Versions Alternatives

Registrymakosddavid

50Fair

Install

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "makosddavid-package-risk-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@makosdav/package-risk-mcp@1.0.5"
      ],
      "env": {
        "EVM_PRIVATE_KEY": "YOUR_EVM_PRIVATE_KEY"
      }
    }
  }
}

Install guide

Related servers

kordoc

83Excellent

Parse Korean documents (HWP, HWPX, PDF, XLSX, DOCX, PPTX) to Markdown; fill forms, diff, render.

Registrychrisryugj2.5K stars44.2K/wk

pagespeed-insights-mcp

75Good

Google PageSpeed Insights and CrUX: six workflow tools for web performance.

Environment

Name	Required	Notes
EVM_PRIVATE_KEY	Yes	Private key of an EVM wallet holding a small amount of USDC on Base mainnet. Each tool call spends $0.005-$0.01 from it. Use a lightly funded key dedicated to this agent, never a main wallet. Secret.

package-risk MCP Server

Install

Related servers

kordoc

pagespeed-insights-mcp

Environment

Tools

About

FAQ

Reviews

MCP Fiscal Brasil

Hive Intelligence MCP

Screaming Frog SEO Spider MCP Server (headless)

Assay MCP Server