Show HN: Check an NPM package or MCP server for malicious code before install
A new security tool lets developers paste an npm package or MCP server install command and receive an automated risk assessment of the published files before running them, without executing any code. …