MCP Observatory
1m ago Tracked 59,450 Last 1m ago 24h 2,448

Supply chain

registry metadata reported

Supply chain: npm packages that run install-lifecycle scripts (code on install) or have been deprecated upstream, alongside ecosystem provenance coverage — review signals inferred from registry metadata, not verdicts.

provenance coverage 1580/4348 npm+pypi
  • with provenance 1580

36% of 4348 npm + PyPI servers carry a build-provenance attestation (recorded as present; signature not re-verified).

flagged servers 25 shown
  1. @hasna/todos install hooks
    npm
  2. @henkey/postgres-mcp-server install hooks no provenance
    npm
  3. @holdyourvoice/hyv install hooks no provenance
    npm
  4. @ironbee-ai/devtools install hooks no provenance
    npm
  5. @joecwales/cartographer-mcp install hooks no provenance
    npm
  6. @mapbox/mcp-server install hooks no provenance
    npm
  7. @myelixlabs/synapse-mcp install hooks no provenance
    npm
  8. @nano-step/nano-brain install hooks no provenance
    npm
  9. @orionops/cli install hooks no provenance
    npm
  10. @oxis-dev/tessra install hooks no provenance
    npm
  11. @proggarapsody/bitbottle install hooks
    npm
  12. @qingflow-tech/qingflow-app-builder-mcp install hooks no provenance
    npm
  13. @qingflow-tech/qingflow-cli install hooks no provenance
    npm
  14. @scp3500/openvl install hooks no provenance
    npm
  15. @tacticlaunch/mcp-linear install hooks
    npm
  16. @tickory/mcp install hooks
    npm
  17. @vpxa/aikit install hooks no provenance
    npm
  18. @waniwani/sdk install hooks
    npm
  19. AceDataCloud/Skills install hooks no provenance
    npm
  20. Bike4Mind/bike4mind install hooks
    github-only
  21. DeusData/codebase-memory-mcp install hooks
    npm
  22. EtienneBBeaulac/workrail install hooks
    npm
  23. Ghosts-Protocol-Pvt-Ltd/wyrm-mcp install hooks no provenance
    npm
  24. Regsorm/code-index-mcp install hooks
    github-only
  25. agent-afk install hooks
    npm