Head to head
mcpm vs Pkgtruth
Same numbers we show everywhere else, lined up. Ratings come from users, the grade comes from our scanner, adoption comes from public registries.
mcpm
Bio.github.getmcpm/cliNo reviews yet
MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.
Full listingPkgtruth
Aio.github.hxckya/pkgtruthNo reviews yet
Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.
Full listingThe short version
Neither has been reviewed yet, so the comparison rests on the scan and the public usage numbers. Both score close on the safety scan (83 and 89 out of 100).
| mcpm | Pkgtruth | |
|---|---|---|
| User rating | No reviews yet | No reviews yet |
| Safety grade | B83/100 | A89/100 |
| Adoption | Growing | Growing |
| GitHub stars | 3 | 4 |
| Downloads / week | 349 | 77 |
| Runs where | Your machine (local) | Your machine (local) |
| Gateway-ready | No | No |
| Tools | 10 | 3 |
| Write actions | 1 | — |
| Price per call | Free | Free |
| Licence | MIT | MIT |
| Last release | 2026-09-19 | 2026-09-14 |
| Category | AI and agents | AI and agents |