Show HN: Check an NPM package or MCP server for malicious code before install | Hacker News Reader