Presend

Free checks for npm and PyPI packages before they are installed by people, CI jobs or AI agents. Presend flags names nobody has registered (an install command that pulls whatever gets published under that name later), brand-new packages, look-alikes of popular packages, sudden npm publisher changes, deprecations and known vulnerabilities of the exact version. It is available as a web page, a public JSON API and an MCP server, with no account. The false-positive rate is measured on the most-used npm and PyPI packages and published with the method to reproduce it. Unclaimed install names found with it are reported privately to the projects concerned, several of which have fixed them.