{"name":"com.edgethirteen.www/pumpcheck","slug":"www-pumpcheck","title":null,"description":"Detect npm download-pumping before adding a dependency: real usage vs inflated counter.","url":"https://mcp.market/server/www-pumpcheck","rating":null,"grade":"C","score":69,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":8,"stars":null,"forks":null,"downloads_week":null,"last_push_at":null,"license":null},"uptime":{"percent":100,"checks":2,"ok":2,"last_checked_at":"2026-09-19T21:16:13.924Z","last_ok_at":"2026-09-19T21:16:13.924Z","latency_ms":137},"claimed":false,"transport":"remote","callable_via_gateway":true,"default_price_micros":0,"repository":null,"website":"https://www.edgethirteen.com/tools/pumpcheck","version":"1.0.0","remotes":[{"type":"streamable-http","url":"https://www.edgethirteen.com/api/mcp/pumpcheck"}],"packages":[],"tools":[{"name":"check_npm_download_trust","description":"Check whether an npm package's public download count reflects real adoption. Detects 'download pumping' -- the documented supply-chain technique where a package is published in hundreds of rapid-fire versions so registry mirrors and security scanners inflate its download counter, making an unused or malicious package look popular. Returns npm's headline 30-day count, a spike-resistant estimate of sustained real usage, the share of the month falling on the busiest single day, recent version-flood bursts, and a verdict of clean, unreliable or inflated. Use before adding or recommending a dependency, especially a new or unfamiliar one. This free check does one package per call; auditing a whole package.json or package-lock.json in one pass is a separate $299 product at https://www.edgethirteen.com/tools/pumpcheck.","write_action":false,"price_micros":0,"input_schema":{"type":"object","properties":{"package":{"type":"string","description":"The npm package name, e.g. express or @upstash/context7-mcp."}},"required":["package"]}}],"scan":{"score":69,"grade":"C","scanned_at":"2026-09-19T19:44:54.237Z","report":{"scannerVersion":"0.1.5","scannedAt":"2026-09-19T19:44:54.202Z","components":{"code":{"score":-1,"max":25,"notes":["remote-only server, no package to scan"]},"reliability":{"score":20,"max":20,"notes":["remote reachable in 717ms"]},"poisoning":{"score":15,"max":15,"notes":["1 tool descriptions checked"]},"auth":{"score":10,"max":15,"notes":["open endpoint, read-only tools"]},"maintenance":{"score":3,"max":15,"notes":["no repository listed"]},"identity":{"score":4,"max":10,"notes":["verified namespace with website, no repo"]}},"findings":[{"id":"maint.no-repo","severity":"low","component":"maintenance","title":"No source repository listed"}],"inputs":{"probes":[{"url":"https://www.edgethirteen.com/api/mcp/pumpcheck","reachable":true,"authRequired":false,"latencyMs":717,"serverInfo":{"name":"pumpcheck","version":"1.0.0"}}],"packages":[],"repo":{"found":false},"icon":{"url":"https://www.edgethirteen.com/favicon.ico?favicon.2vob68tjqpejf.ico","source":"registry","width":256,"height":256},"presence":{"stars":null,"forks":null,"downloadsWeek":null,"license":null,"lastPushAt":null,"score":8}}}},"grade_history":[],"reviews":[]}