Pkgxray – inspect what gets installed, not what executes

Supply-chain security for AI agents, npm packages, and MCP servers. Analyze packages before you install them — zero-dep Node, runs locally, never executes untrusted code. - adamsjack711-ux/pkgxray