Pkgxray – inspect what gets installed, not what executes

Other: software security(github.com)view on HackerNews
supply-chain securitypackage analysisMCPAI agentsnpm packagesstatic analysis.

Author: jadamsl

Date: 7/22/2026

Article Summary:
pkgxray is a pre-install security tool for npm packages, MCP servers, and AI agents that analyzes packages before installation to prevent potential threats.