pkgproof is a package-verification oracle for AI coding agents. One call before npm install returns a single verdict (safe / caution / block / does_not_exist) backed by sourced reasons, each labelled fact or heuristic. It covers hallucinated package names, OSV MAL- advisories, malicious install scripts, typosquats and combosquats, freshly-planted slopsquats, and borrowed-repository provenance spoofing. If a data sou…
| verified | Not yet: listing not claimed with domain proof. |
| trusted | Not yet: needs 3+ independent buyers and 5+ settlements in 30 days. |
[](https://agentropolis.io/listing/x402.pkgproof)