Pkgxray – inspect what gets installed, not what executes

Summary

pkgxray — pre-install security for npm packages, MCP servers, and AI agents pkgxray — pre-install security for npm packages, MCP servers, and AI agents. Use local, zero-dependency package static analysis to inspect npm packages and Model Context Protocol (MCP) servers before installation or connection. pkgxray reports cited SAFE, REVIEW, or BLOCK evidence without executing package code during normal scans. Static analysis · Supply-chain intelligence · Prompt-injection detection · MCP security · SAFE / REVIEW / BLOCK Real runs: guard clears express@4.21.0, then blocks a sample modeled on the 2024 @solana/web3.js compromise. ▶ 60-second walkthrough 1. Scan a known-safe package without installing pkgxray npx --yes pkgxray@1.0.4 guard npm:express@4.21.0 This downloads pkgxray through npm's temporary npx cache, stages the target tarball in quarantine, and performs the static and supply-chain checks. It does not globally install pkgxray, run npm install, execute lifecycle scripts, or execute package code. Decision: **SAFE** Grade: **A+** (99/100) No high- or medium-risk indicators were found in the provided evidence. Notes: - **INFO npm-vs-github-clean** — npm tarball matches the linked GitHub repo at the published version. (15/16 files match GitHub @4.21.0) … Real output, abridged. A BLOCK verdict instead lists every finding with the file and evidence that produced it. Point it at a package, get a verdict with cited evidence — before a single line of that package runs. guard stages the package in a sandboxed quarantine, audits the staged copy, and only promotes it when policy allows. It never runs npm install, lifecycle scripts, build steps, or package code. Verdict Exit Meaning SAFE 0 No high- or medium-risk indicators were found; default policy permits promotion. REVIEW 3 Evidence is incomplete or a privileged capability needs human review. BLOCK 2 High-severity cited evidence requires rejection or deep investigation. SAFE is not a proof that a package is harmless; sta...