Pumpcheck
Detect npm download-pumping before adding a dependency: real usage vs inflated counter.
- Transport
- Not stated
- Package
- —
- Registry id
- com.edgethirteen.www/pumpcheck
No install snippet on purpose. A working MCP config is a command, its arguments and an environment block — the last two are where API keys live, so this catalogue never stores them and cannot publish them. Follow the link above for the authors' own instructions.
PumpCheck reads the shape of the traffic instead of the total to assess download count validity. It is free for checking one package at a time. It reads the public npm registry and downloads API without requiring an account or token.
It offers a paid audit of the entire dependency tree for a one-time fee of $299. PumpCheck reports a spike-resistant estimate using median-day × 30 and checks for recent version floods. It is available as an MCP server for use by coding agents.
PumpCheck does not read any package code. PumpCheck's analysis is deterministic arithmetic, giving the same answer for the same package.
Summary drafted from the project's own website. Every sentence is backed by text on that page and was reviewed before publishing.