
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
accuracite-mcp
Advanced tools
MCP server exposing AccuraCite's citation verification and finding API as tools
An MCP server for AccuraCite — verify citations and find real, published sources to support a claim, directly from Claude, Cursor, or any other MCP client.
verify_citation — Verify a single citation string against real bibliographic databases (Crossref, OpenAlex, Semantic Scholar, PubMed, DBLP, arXiv). Returns whether it's verified, mismatched, or looks hallucinated/fabricated, along with the real record's metadata when one is found.find_citations — Find real, published literature that supports a given claim.Both tools call AccuraCite's public REST API and draw from your account's regular credit pool (same pool the web app uses).
Get an API key at accuracite.com/api_management (available on every plan, including Free).
Add this to your MCP client's config (e.g. claude_desktop_config.json):
{
"mcpServers": {
"accuracite": {
"command": "npx",
"args": ["-y", "accuracite-mcp"],
"env": {
"ACCURACITE_API_KEY": "your-api-key-here"
}
}
}
}
ACCURACITE_API_KEY (required) — your AccuraCite API key.ACCURACITE_BASE_URL (optional) — defaults to https://accuracite.com.FAQs
MCP server exposing AccuraCite's citation verification and finding API as tools
We found that accuracite-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.