@phantomdep/core

The detection engine behind PhantomDep — a privacy-first, zero-infra guard against slopsquatting (AI-hallucinated dependency) attacks. It verifies package names against the public npm / PyPI registries plus local heuristics, and returns a small, structured verdict per package.

Surface-agnostic and dependency-light: the MCP server and CLI are thin adapters over this package.

Install

npm install @phantomdep/core

Usage

import { assess, assessMany, assessTree } from "@phantomdep/core";

await assess("express", "npm");
// { name: "express", ecosystem: "npm", verdict: "ok", reasons: ["verified on npm"] }

await assess("flask-gpt-helper", "pypi");
// { ..., verdict: "phantom", reasons: ["not found on PyPI"] }

await assessMany(["express", "reqeusts"], "npm"); // batched
await assessTree("package-lock.json");            // full dependency tree, incl. nested deps

Verdicts

• phantom — does not exist on the registry. Block it.
• suspicious — exists but risky (blocklisted, brand-new + low adoption, or an AI-style name close to a popular package). Warn only.
• ok — verified on the registry.

Privacy

Fully local. The only network calls are anonymous lookups of package names to the public npm / PyPI registries. No account, no telemetry, no backend.

License

MIT © Farhan Raditya Aji