pkgproof for VS Code
net.pkgproof/pkgproof
Verify an npm package before you install it: advisories, install scripts, typosquats, provenance.
client:VS Code
transport:stdio
runtime:npm
Install pkgproof in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "pkgproof-algorand-private-key",
"description": "PKGPROOF_ALGORAND_PRIVATE_KEY",
"password": true
},
{
"type": "promptString",
"id": "pkgproof-base-private-key",
"description": "PKGPROOF_BASE_PRIVATE_KEY",
"password": true
}
],
"servers": {
"pkgproof": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@pkgproof/mcp"
],
"env": {
"PKGPROOF_ALGORAND_PRIVATE_KEY": "${input:pkgproof-algorand-private-key}",
"PKGPROOF_BASE_PRIVATE_KEY": "${input:pkgproof-base-private-key}"
}
}
}
}VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs