
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
localecheck
Advanced tools
Locale-correctness MCP server for AI agents: verified dates, phone, currency, VAT/sales-tax, holidays and addresses (UK + USA v1).
Locale-correctness tools for AI agents — verified dates, phone numbers, currency formatting, VAT/sales-tax by date, public holidays, and addresses. Coverage: UK + USA (v1). Free, no API key.
This is the TypeScript / npm build for the widest MCP-client reach. The same
tools also exist as a Python package + REST API (see the locale-api project).
Claude Desktop / Cursor / Cline — add to your MCP config:
{
"mcpServers": {
"localecheck": {
"command": "npx",
"args": ["-y", "localecheck"]
}
}
}
Restart the app and the localecheck tools appear. Then just ask naturally —
the agent picks the right tool:
The same package is also a typed library — npm install localecheck then import
the functions directly:
import { vatRate, parseDate, formatMoney, validatePhone } from "localecheck";
vatRate("GB", "2009-06-01").rate; // 15
parseDate("03/04/2025", "en-GB").iso; // "2025-04-03"
formatMoney(1234.5, "GBP", "en-GB").formatted; // "£1,234.50"
validatePhone("020 7946 0958", "GB").e164; // "+442079460958"
Full TypeScript types ship with the package. So one install covers both ways an agent uses it: live in a chat (MCP server) and baked into an app (library).
| Tool | Purpose |
|---|---|
parse_date | Human date → ISO 8601, locale-aware day/month order; flags impossible dates |
validate_phone | → E.164 + line type (libphonenumber-js) |
format_currency | Locale-correct currency string (native Intl/CLDR) |
tax_rate | UK VAT by date (historical/temporary); US state base sales tax |
is_holiday | Public/bank-holiday check (date-holidays); GB defaults to England |
next_holiday | Next public holiday on/after a date |
parse_address | UK/US address → {country, postcode, city} + confidence |
npm install
npm test # 34 parity tests vs the Python implementation — all pass
npm run build # tsc -> dist/
npm start # run the MCP server over stdio
Phone (libphonenumber-js), currency/dates (native Intl), and holidays
(date-holidays) are authoritative libraries — zero data maintenance. The
tax data (data/uk_vat.json, data/us_sales_tax.json) is hand-curated and
is the defensible asset; see the main project's BUSINESS_MODEL.md.
confidence flags low-certainty results.Apache-2.0 (code). UK + USA v1, expanding.
FAQs
Locale-correctness MCP server for AI agents: verified dates, phone, currency, VAT/sales-tax, holidays and addresses (UK + USA v1).
The npm package localecheck receives a total of 16 weekly downloads. As such, localecheck popularity was classified as not popular.
We found that localecheck demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.