Independent · not affiliated with OpenAIHand-sorted, not ranked by an algorithm
PickAPlugin

A catalog of ChatGPT & Codex plugins, sorted by people.

Issue No. 1Updated Sunday, November 15, 2026550 plugins catalogued
Classifieds (paid, labelled):12 of 12 lines open · $19/mo
Alternatives · Security & Governance · data checked 2026-11-15

NPMScan alternatives

NPMScan by salemalem: Check npm packages for malware, known vulnerabilities, typosquats and maintainer takeovers before installing, via npmscan.com's free, read-only MCP server (23 tools, no API key). Here are 4 plugins in our catalog that describe a similar job, with the numbers you'd check before switching.

NPMScan at a glance: ★ 504 · MIT · pushed 2026-11-15 (this week) · MCP server, plugin · works with Claude Code · full listing →

Why you might look elsewhere

4 alternatives, side by side

PluginStarsLicenseLast pushPackaged as
AISLE MCP
Read-only MCP server that pulls AISLE security findings and suggested patches into Claude Code, Codex or Cursor so the agent can fix vulnerabilities in the editor.
★ n/aNo license filen/aMCP server
Known Agents MCP Server
Ask ChatGPT or Claude about the AI agents, crawlers and scrapers visiting your website, using Known Agents' bot-traffic analytics.
★ n/aNo license file2026-11-10MCP server
Fixlane
Known security issues in developer software with reviewed fix procedures: checks your installed tools and versions read-only. Remote MCP server plus plugin for Claude and Codex.
★ 0MIT2026-11-11MCP server, plugin
Fundry CFO
Claude and Codex plugin for Fundry's read-only CFO tools over MCP.
★ 0MIT2026-11-11plugin

Picked by overlap between each project's own description and NPMScan's, same category first. Ordered by that overlap, not by stars or payment.

Head-to-head

NPMScan vs Fixlane

More: Security & Governance plugins · best Security & Governance plugins, ranked · all comparisons

Data from GitHub and each project's README, checked 2026-11-15. We haven't installed or audited these, and stars measure attention, not quality. Paid placements never change this page. Spot a mistake? hello@pickaplugin.com

New MCP servers & plugins, once a week

One short email a week: the MCP servers and plugins that joined the catalog, and the ones gaining stars fastest. Free. Confirm by email, unsubscribe in one click. Past issues.

Featured onFeatured on neeed.directoryFeatured on LaunchstagSubmitPR.org press release