Install payload
Install payload is broadly covered in current results.
100% (12/12)
2 trusted · 29 review in this set — compare to see which signals differ.
31 results in this view
3 trust signals differ in this sample: Package trust, Source provenance, Submitter
Signals differ on Package trust, Source provenance, Submitter — add entries to compare before you install.
Rollout signal scan
Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.
Install payload
Install payload is broadly covered in current results.
100% (12/12)
Most at-risk entries in this view
Adoption queue
1/31 visible results are in hold tier and need mitigation before adoption.
1 blockers: Metadata review
70/100
Request metadata review from maintainers or internal owners.
skills/bun-runtime-modern-javascript · trust trusted · confidence 83%
1 blockers: Metadata review
70/100
Request metadata review from maintainers or internal owners.
mcp/socket-mcp-server · trust trusted · confidence 83%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/angular-repository-contributor-agent · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/astro-repository-contributor-agent · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/bright-data-web-mcp-server · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
agents/changesets-release-cutover-agent · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
tools/clawhub · trust review · confidence 67%
1 blockers: Metadata review
50/100
Request metadata review from maintainers or internal owners.
Collect package checksum or signed artifact information.
mcp/ai-cueapi-mcp-mcp-server · trust review · confidence 67%
Decision confidence
1/31 results are low-confidence and need review before adoption.
Confident candidate for staged adoption.
74/100
skills/bun-runtime-modern-javascript · trust trusted
Confident candidate for staged adoption.
74/100
mcp/socket-mcp-server · trust trusted
Address Metadata review, Package integrity before broader rollout.
54/100
agents/angular-repository-contributor-agent · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
agents/astro-repository-contributor-agent · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/bright-data-web-mcp-server · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
agents/changesets-release-cutover-agent · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
tools/clawhub · trust review
Address Metadata review, Package integrity before broader rollout.
54/100
mcp/ai-cueapi-mcp-mcp-server · trust review
Freshness distribution
Median age 54 days; 11 fresh, 1 aging or stale of 12 scanned.
Oldest entries in this view
Theme distribution
105 distinct themes with no dominant one. Most common: npm, security, agents.
105 distinct themes across 24 scanned
Claude Code statusline that checks package publish readiness from package.json, optional npm login visibility, package privacy, and dirty package metadata files.
MCP server that lets Claude install other MCP servers into Claude Desktop by writing MCP config entries for npm packages, uvx packages, or locally cloned Node-based MCP server projects.
MCP server that lets Claude and other MCP clients search and page through the official MCP Registry from a local stdio server.
Source-backed agent for managing Changesets release cutovers, version PRs, changelog evidence, package bump decisions, pre-release mode, publish gates, and npm registry safety.
PostToolUse hook that inspects an edited npm package-lock.json for supply-chain provenance risk rather than known CVEs — dependencies resolved from outside the public npm registry (git, alternate-registry, or insecure transports) and registry tarballs missing an integrity hash.
Build JavaScript and TypeScript apps with Bun, an all-in-one toolchain that replaces Node.js, npm, a bundler, and a test runner with one fast binary that executes TypeScript directly.
MIT-licensed OpenClaw skill and plugin registry with a hosted catalog, `clawhub` CLI, npm package, native OpenClaw install flows, SKILL.md publishing, plugin package publishing, vector search, scan status, moderation controls, install lockfiles, and opt-out install telemetry.
Index any documentation — websites, GitHub repos, npm/PyPI packages, local files — and give Claude always-current, version-specific answers with the open-source Grounded Docs MCP server. An offline-first alternative to Context7, Nia, and Ref.Tools.
Official freee MCP server for connecting Claude to freee accounting, HR, invoices, project time, sales, IT management, and e-signature APIs.
Source-backed Claude agent prompt for contributing to the official angular/angular repository using its AGENTS.md guidance for pnpm, Bazel test targets, coding standards, commit guidelines, zoneless tests, async stability, and PR handling.
Source-backed Claude agent prompt for contributing to the official React Router monorepo using its AGENTS.md guidance for modes, pnpm commands, tests, docs generation, type generation, future flags, and change files.
Source-backed Claude agent prompt for contributing to the official TanStack/router monorepo using its AGENTS.md guidance for pnpm, Nx, targeted package tests, React and Solid router packages, TanStack Start, examples, docs, and sandbox-safe execution.
Install Claude Code correctly in 15-25 minutes. Fix npm permission errors, configure PATH, and resolve 'command not found' issues with proven solutions.
A Stop hook that runs npm audit, pip-audit, safety, or bundler-audit automatically at the end of every Claude Code session, detecting CVEs and outdated packages across Node.js, Python, and Ruby projects.
Security analysis and vulnerability scanning for dependencies
Scans for security vulnerabilities when package.json or requirements.txt files are modified.
Automatically checks for outdated dependencies and suggests updates with security analysis. This PostToolUse hook triggers when dependency manifest files (package.json, requirements.txt, Gemfile, go.mod, Cargo.toml, pyproject.toml) are modified, providing real-time dependency health monitoring.
Official TypeScript SDK for Model Context Protocol clients and servers, with the production v1 `@modelcontextprotocol/sdk` package, active v2 server and client package work, Node.js, Bun, and Deno support, transports, OAuth helpers, tools, resources, prompts, examples, and API documentation.
Official CueAPI stdio MCP server for scheduling agent work, claiming executions, and reporting evidence-backed outcomes with verified handoffs across time and environments.
Webiny's MCP server for exposing Webiny-specific skills and development instructions to Claude, Cursor, Copilot, Windsurf, opencode, and other AI coding agents over stdio.
MCP server that connects Claude to Bright Data web search, scraping, browser automation, public web datasets, and package metadata tools.
Visual low-code builder for AI agents, RAG apps, chatbots, agentic workflows, multi-agent systems, LangChain-based components, API-serving flows, and self-hosted deployments through npm, Docker, and cloud platforms.
Apache-2.0 `gws` command-line tool for Google Workspace APIs with structured JSON output, dynamic Discovery API commands, npm and release installers, Gemini CLI extension metadata, and 100+ bundled Agent Skills.
A Claude Code SessionEnd hook that scans a project for dead code and writes a report to .claude/reports. It runs available tools per language: ESLint and Knip for JS/TS, autoflake or pylint for Python, Knip for unused npm dependencies, ripgrep for unreferenced src files, and jq to flag zero-coverage files.
PostToolUse hook that flags risky package-lock.json, yarn.lock, and pnpm-lock.yaml edits: missing lockfile updates, unexpected registry hosts, and dependency count spikes before merge.
Source-backed Claude agent prompt for contributing to the official Astro monorepo using its AGENTS.md guidance, pnpm workspace commands, package-local testing, bgproc dev server management, agent-browser UI checks, and Astro docs sources.
Source-backed Claude agent prompt for contributing to the official mui/material-ui monorepo using its AGENTS.md guidance, pnpm workspace filters, package build and test commands, component conventions, public error-message rules, API docs generation, visual regression and accessibility checks, and pre-PR checklist.
Source-backed Claude agent prompt for contributing to the official vercel/next.js monorepo using its AGENTS.md guidance, pnpm workspace commands, package-filtered builds, Turbopack and Rust boundaries, mode-specific tests, PR triage rules, and secrets-safety notes.
Source-backed Claude agent prompt for contributing to the official prisma/prisma monorepo using its AGENTS.md guidance, pnpm workspace commands, package-filtered tests, database fixture expectations, Prisma 7 architecture notes, and contributor safety rules.
Source-backed Claude agent prompt for contributing to the official Vercel AI SDK monorepo using its AGENTS.md guidance, pnpm workspace commands, package build and test boundaries, provider architecture, Zod compatibility rules, JSON parsing safety, ADR review, and documentation sources.