starlog

io.github.starloghq/starlog · v0.9.0

Vet a package (CVEs, license, maintenance) before your AI agent uses it, plus capability discovery.

Install

npx -y starloghq

Typical command from the package name. Check the README for required configuration and credentials before connecting it to real data.

Signals captured from GitHub, npm and the official MCP Registry on October 15, 2026. See the scoring method.

Authorize consequential AI agent actions before execution

Input firewall for AI agents: scan text and files before an agent reads them. Local, no network.

Catches hallucinated and slopsquatted npm and PyPI packages before an agent installs them.