{ "updated": "2026-10-12 16:07 UTC", "methodology_version": "v4.4", "total": 1742, "agents": [ { "name": "Haystack", "repo": "deepset-ai/haystack", "display_repo": "", "url": "https://github.com/deepset-ai/haystack", "listing_class": "agent", "rank": 1, "previous_rank": 1, "rank_delta": 0, "stars": 26727, "stars_fmt": "26.7k", "forks": 3275, "forks_fmt": "3.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 276, "commits_low_confidence": false, "score": 92.9, "description": "Open-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search…", "language": "Python", "open_issues": 100, "category": "Agent Frameworks", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "haystack-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 131293, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 9.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:12:28Z", "slug": "haystack", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "https://haystack.deepset.ai", "homepage_icon": "/site-icons/d599897a7b15769a.png", "homepage_icon_for": "https://haystack.deepset.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: docs-website/versioned_docs/version-2.29/overview/docs-mcp-server.mdx", "Found MCP-related server path: docs-website/versioned_docs/version-2.30/overview/docs-mcp-server.mdx", "Found MCP-related server docs path: docs-website/docs/overview/docs-mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: docs-website/plugins/txtLoaderPlugin.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'haystack-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "haystack-ai", "version": "3.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:27Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 96.6, "trust_score_v2": 96.6, "rank_v2": 1, "rank_v2_delta": 0, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 24.2, "identity": 18.0, "transparency": 16.5, "maintenance": 20.0, "adoption": 17.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP TypeScript SDK", "repo": "modelcontextprotocol/typescript-sdk", "display_repo": "", "url": "https://github.com/modelcontextprotocol/typescript-sdk", "listing_class": "agent", "rank": 2, "previous_rank": 2, "rank_delta": 0, "stars": 13557, "stars_fmt": "13.6k", "forks": 2278, "forks_fmt": "2.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 50, "commits_low_confidence": false, "score": 86.7, "description": "The official TypeScript SDK for Model Context Protocol servers and clients", "language": "TypeScript", "open_issues": 246, "category": "Protocols & Tool Integration", "category_rank": 1, "npm_package": "@modelcontextprotocol/sdk", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 65834092, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:59:56Z", "slug": "mcp-typescript-sdk", "full_fetched_at": "2026-10-12T08:02:13Z", "source_note": "", "github_homepage": "https://ts.sdk.modelcontextprotocol.io/v2", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency 'modelcontextprotocol' in examples/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@modelcontextprotocol/sdk' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@modelcontextprotocol/sdk", "version": "1.32.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:13Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 94.6, "trust_score_v2": 94.6, "rank_v2": 2, "rank_v2_delta": 6, "trust_v2_adjustment": 2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.1, "identity": 18.0, "transparency": 14.4, "maintenance": 18.8, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LangGraph", "repo": "langchain-ai/langgraph", "display_repo": "", "url": "https://github.com/langchain-ai/langgraph", "listing_class": "agent", "rank": 3, "previous_rank": 3, "rank_delta": 0, "stars": 43139, "stars_fmt": "43.1k", "forks": 7334, "forks_fmt": "7.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 83, "commits_low_confidence": false, "score": 94.8, "description": "Build resilient agents.", "language": "Python", "open_issues": 578, "category": "Agent Frameworks", "category_rank": 2, "npm_package": "@langchain/langgraph", "crate_package": "", "pypi_package": "langgraph", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12201110, "dl_source": "pypi", "hn_mentions_30d": 7, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:33:52Z", "slug": "langgraph", "full_fetched_at": "2026-10-12T04:02:53Z", "source_note": "", "github_homepage": "https://docs.langchain.com/oss/python/langgraph/", "homepage_icon": "/site-icons/443e5689cc74d832.png", "homepage_icon_for": "https://docs.langchain.com/oss/python/langgraph/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package '@langchain/langgraph' points to langchain-ai/langgraphjs (same owner as langchain-ai/langgraph, not treated as drift)", "pypi package 'langgraph' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@langchain/langgraph", "version": "1.4.21" }, { "ecosystem": "PyPI", "name": "langgraph", "version": "1.2.14" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:53Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 94.2, "trust_score_v2": 94.2, "rank_v2": 3, "rank_v2_delta": 1, "trust_v2_adjustment": 0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.4, "identity": 18.0, "transparency": 14.5, "maintenance": 19.7, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "OpenAI Agents SDK (JS)", "repo": "openai/openai-agents-js", "display_repo": "", "url": "https://github.com/openai/openai-agents-js", "listing_class": "agent", "rank": 4, "previous_rank": 4, "rank_delta": 0, "stars": 3908, "stars_fmt": "3.9k", "forks": 986, "forks_fmt": "986", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 129, "commits_low_confidence": false, "score": 85.2, "description": "A lightweight, powerful framework for multi-agent workflows and voice agents", "language": "TypeScript", "open_issues": 9, "category": "Agent Frameworks", "category_rank": 3, "npm_package": "@openai/agents", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2300224, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 8.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:46:27Z", "slug": "openai-agents-sdk-js", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "https://openai.github.io/openai-agents-js/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/mcp/mcp-servers-example.ts", "Found MCP-related server path: packages/agents-core/src/shims/mcp-server/browser.ts", "Found MCP-related server docs path: examples/docs/mcp/mcpServers.ts", "Found MCP-related server docs path: examples/docs/mcp/serverPrefixedToolNames.ts" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in docs/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: docs/src/content/docs/extensions/ai-sdk.mdx" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@openai/agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@openai/agents", "version": "0.20.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:19Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 94.1, "trust_score_v2": 94.1, "rank_v2": 4, "rank_v2_delta": -1, "trust_v2_adjustment": 0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 23.1, "identity": 18.0, "transparency": 15.7, "maintenance": 19.9, "adoption": 17.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Python SDK", "repo": "modelcontextprotocol/python-sdk", "display_repo": "", "url": "https://github.com/modelcontextprotocol/python-sdk", "listing_class": "agent", "rank": 5, "previous_rank": 5, "rank_delta": 0, "stars": 24548, "stars_fmt": "24.5k", "forks": 4030, "forks_fmt": "4.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 38, "commits_low_confidence": false, "score": 87.9, "description": "The official Python SDK for Model Context Protocol servers and clients", "language": "Python", "open_issues": 249, "category": "Protocols & Tool Integration", "category_rank": 2, "npm_package": "", "crate_package": "", "pypi_package": "mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 61275340, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 2, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T17:01:16Z", "slug": "mcp-python-sdk", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "https://py.sdk.modelcontextprotocol.io/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server/fastmcp.py", "Found MCP-related server path: src/mcp/server/lowlevel/server.py", "Found MCP-related server test path: tests/server/test_fastmcp.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: docs_src/extensions/__init__.py" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp", "version": "2.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:11Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 94.0, "trust_score_v2": 94.0, "rank_v2": 5, "rank_v2_delta": 2, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.4, "identity": 18.0, "transparency": 14.5, "maintenance": 18.4, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Vercel AI SDK", "repo": "vercel/ai", "display_repo": "", "url": "https://github.com/vercel/ai", "listing_class": "agent", "rank": 6, "previous_rank": 6, "rank_delta": 0, "stars": 27275, "stars_fmt": "27.3k", "forks": 5306, "forks_fmt": "5.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 594, "commits_low_confidence": false, "score": 93.9, "description": "The AI Toolkit for TypeScript. From the creators of Next.js, the AI SDK is a free open-source library for building AI-powered applications and agents ", "language": "TypeScript", "open_issues": 651, "category": "Agent Frameworks", "category_rank": 4, "npm_package": "ai", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 30798367, "dl_source": "npm", "hn_mentions_30d": 5, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:37:01Z", "slug": "vercel-ai-sdk", "full_fetched_at": "2026-10-12T12:02:30Z", "source_note": "", "github_homepage": "https://ai-sdk.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/ai-e2e-next/agent/xai/mcp-server-agent.ts", "Found MCP-related server path: examples/ai-e2e-next/app/api/chat/xai-mcp-server/route.ts", "Found MCP-related server test path: packages/harness-acp/src/v1/bridge/host-tool-mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in examples/mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in examples/mcp/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ai", "version": "7.0.137" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:30Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 92.9, "trust_score_v2": 92.9, "rank_v2": 6, "rank_v2_delta": 12, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.0, "identity": 18.0, "transparency": 12.9, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mobile MCP", "repo": "mobile-next/mobile-mcp", "display_repo": "", "url": "https://github.com/mobile-next/mobile-mcp", "listing_class": "agent", "rank": 7, "previous_rank": 9, "rank_delta": 2, "stars": 9049, "stars_fmt": "9.0k", "forks": 814, "forks_fmt": "814", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 59, "commits_low_confidence": false, "score": 84.4, "description": "Model Context Protocol Server for Mobile Automation and Scraping (iOS, Android, Emulators, Simulators and Real Devices)", "language": "TypeScript", "open_issues": 37, "category": "MCP Servers", "category_rank": 1, "npm_package": "@mobilenext/mobile-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 47515, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-09T08:00:22Z", "slug": "mobile-mcp", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "https://mobilenext.ai", "homepage_icon": "/site-icons/4b6980a30a7f44d7.png", "homepage_icon_for": "https://mobilenext.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mobilenext/mobile-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mobilenext/mobile-mcp", "version": "1.0.9" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:01Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 92.6, "trust_score_v2": 92.6, "rank_v2": 7, "rank_v2_delta": 14, "trust_v2_adjustment": 2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.0, "identity": 18.0, "transparency": 15.0, "maintenance": 19.1, "adoption": 15.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LiveKit Agents", "repo": "livekit/agents", "display_repo": "", "url": "https://github.com/livekit/agents", "listing_class": "agent", "rank": 8, "previous_rank": 8, "rank_delta": 0, "stars": 14709, "stars_fmt": "14.7k", "forks": 3916, "forks_fmt": "3.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 186, "commits_low_confidence": false, "score": 91.7, "description": "A framework for building realtime voice AI agents 🤖🎙️📹 ", "language": "Python", "open_issues": 219, "category": "Voice & Conversational", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "livekit-agents", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1073130, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 4, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T10:40:51Z", "slug": "livekit-agents", "full_fetched_at": "2026-10-12T04:02:53Z", "source_note": "", "github_homepage": "https://docs.livekit.io/agents", "homepage_icon": "/site-icons/ac3701075688c6a2.png", "homepage_icon_for": "https://docs.livekit.io/agents", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/voice_agents/mcp/server.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in livekit-agents/pyproject.toml", "README/docs also mention OpenAI", "Found credential/config marker 'LIVEKIT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: livekit-plugins/livekit-blockguard/.gitignore", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'livekit-agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "livekit-agents", "version": "1.8.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:53Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 92.6, "trust_score_v2": 92.6, "rank_v2": 8, "rank_v2_delta": 2, "trust_v2_adjustment": 1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.0, "identity": 18.0, "transparency": 14.3, "maintenance": 20.0, "adoption": 18.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OmniRoute", "repo": "diegosouzapw/OmniRoute", "display_repo": "", "url": "https://github.com/diegosouzapw/OmniRoute", "listing_class": "skill", "rank": 1, "previous_rank": 1, "rank_delta": 0, "stars": 75591, "stars_fmt": "75.6k", "forks": 10912, "forks_fmt": "10.9k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 1809, "commits_low_confidence": false, "score": 98.0, "description": "Never stop coding. Free MIT AI gateway: one endpoint, 359 providers (150+ free), 1200+ models Kimi, Claude, GPT, Gemini, GLM, DeepSeek, MiniMax. Works with Claude Code, Codex, Cursor, OpenCode, Cline & Copilot. Quota-aware auto-fallback, RTK+Caveman compression saves 15-95% tokens, MCP/A2A…", "language": "TypeScript", "open_issues": 63, "category": "Agent Skills", "category_rank": 1, "npm_package": "omniroute", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 58588, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.3, "scorecard_checks": { "Maintained": 10, "Code-Review": 5, "Security-Policy": 10, "Dependency-Update-Tool": 10, "Dangerous-Workflow": 10, "Token-Permissions": 0, "CII-Best-Practices": 0, "Binary-Artifacts": 10, "Packaging": 10, "License": 10, "Vulnerabilities": 1, "Signed-Releases": 0, "Branch-Protection": 3, "Fuzzing": 10, "Pinned-Dependencies": 2, "SAST": 7, "CI-Tests": 8, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T16:04:08Z", "slug": "omniroute", "full_fetched_at": "2026-10-12T16:01:59Z", "source_note": "", "github_homepage": "https://omniroute.online", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: bin/mcp-server.mjs", "Found MCP-related server path: changelog.d/maintenance/0000-mcp-server-handler-extraction.md", "Found MCP-related server docs path: docs/frameworks/MCP-SERVER.md" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "code" ], "confidence": "high", "evidence": [ "Found declared path: @omniroute/opencode-plugin/.gitignore", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities", "Found code dependency 'simple-git' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'omniroute' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "omniroute", "version": "3.8.51" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:59Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 92.3, "trust_score_v2": 92.3, "rank_v2": 1, "rank_v2_delta": 13, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.4, "identity": 18.0, "transparency": 13.9, "maintenance": 19.9, "adoption": 18.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Promptfoo", "repo": "promptfoo/promptfoo", "display_repo": "", "url": "https://github.com/promptfoo/promptfoo", "listing_class": "agent", "rank": 9, "previous_rank": 7, "rank_delta": -2, "stars": 25935, "stars_fmt": "25.9k", "forks": 2467, "forks_fmt": "2.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 645, "commits_low_confidence": false, "score": 92.3, "description": "Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.", "language": "TypeScript", "open_issues": 130, "category": "Observability & Evaluation", "category_rank": 1, "npm_package": "promptfoo", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 943564, "dl_source": "npm", "hn_mentions_30d": 5, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:10:11Z", "slug": "promptfoo", "full_fetched_at": "2026-10-12T08:02:22Z", "source_note": "", "github_homepage": "https://promptfoo.dev", "homepage_icon": "/site-icons/368e4c7277ba2c2c.png", "homepage_icon_for": "https://promptfoo.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: examples/redteam-mcp-agent/src/mcp_server/data/mockData.js", "Found MCP-related server docs path: site/docs/integrations/mcp-server.md", "Found MCP-related server test path: test/commands/mcp/server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Amazon Bedrock dependency 'bedrock' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "code" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json", "Found code dependency 'simple-git' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'promptfoo' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "promptfoo", "version": "0.124.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:22Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 92.1, "trust_score_v2": 92.1, "rank_v2": 9, "rank_v2_delta": -3, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.6, "identity": 18.0, "transparency": 14.7, "maintenance": 20.0, "adoption": 18.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "HOL Guard", "repo": "hashgraph-online/hol-guard", "display_repo": "", "url": "https://github.com/hashgraph-online/hol-guard", "listing_class": "agent", "rank": 10, "previous_rank": 10, "rank_delta": 0, "stars": 857, "stars_fmt": "857", "forks": 150, "forks_fmt": "150", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1357, "commits_low_confidence": false, "score": 77.7, "description": "Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, MCP servers, plugins, and skills at runtime.", "language": "Python", "open_issues": 30, "category": "Security & Guardrails", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "hol-guard", "docker_image": "", "vscode_extension": "", "weekly_downloads": 13882, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 9, "scorecard_checks": { "Dependency-Update-Tool": 10, "Maintained": 10, "Code-Review": 10, "Security-Policy": 10, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "Token-Permissions": 10, "CII-Best-Practices": 5, "Packaging": 10, "Pinned-Dependencies": 9, "License": 10, "Fuzzing": 10, "Vulnerabilities": 4, "SAST": 10, "Signed-Releases": 9, "Branch-Protection": 5, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-11T20:03:59Z", "slug": "hol-guard", "full_fetched_at": "2026-10-11T20:02:00Z", "source_note": "", "github_homepage": "https://hol.org/guard", "homepage_icon": "/site-icons/7bbcc5f6692782d7.png", "homepage_icon_for": "https://hol.org/guard", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: contracts/mcp-servers/contribution.v1.schema.json", "Found MCP-related server path: contributions/mcp-servers/mcp.agenthub.json", "Found MCP-related server test path: dashboard/src/protection-center/mcp-server-defaults.test.tsx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Ships a Claude Code plugin manifest (integrations/claude-code-plugin/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (tests/fixtures/gemini-extension-good/gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: contracts/extensions/authoring-discovery.v1.schema.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'hol-guard' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "hol-guard", "version": "3.42.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:00Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 91.7, "trust_score_v2": 91.7, "rank_v2": 10, "rank_v2_delta": 3, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 23.8, "identity": 18.0, "transparency": 16.1, "maintenance": 20.0, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Inspector", "repo": "modelcontextprotocol/inspector", "display_repo": "", "url": "https://github.com/modelcontextprotocol/inspector", "listing_class": "agent", "rank": 11, "previous_rank": 13, "rank_delta": 2, "stars": 11057, "stars_fmt": "11.1k", "forks": 1542, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 720, "commits_low_confidence": false, "score": 89.1, "description": "Visual testing tool for MCP servers", "language": "TypeScript", "open_issues": 47, "category": "Protocols & Tool Integration", "category_rank": 3, "npm_package": "@modelcontextprotocol/inspector", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 381386, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 2, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:00:17Z", "slug": "mcp-inspector", "full_fetched_at": "2026-10-12T08:02:06Z", "source_note": "", "github_homepage": "https://modelcontextprotocol.io/docs/2026-07-28/tools/inspector", "homepage_icon": "/site-icons/4167a655a0a7f1dc.png", "homepage_icon_for": "https://modelcontextprotocol.io/docs/2026-07-28/tools/inspector", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: core/mcp/import/serverJson.ts", "Found MCP-related server path: core/mcp/node/server-secrets.ts", "Found MCP-related server test path: clients/web/src/test/core/mcp/node/servers.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@modelcontextprotocol/inspector' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@modelcontextprotocol/inspector", "version": "2.10.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:06Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 91.6, "trust_score_v2": 91.6, "rank_v2": 11, "rank_v2_delta": 23, "trust_v2_adjustment": 3.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.2, "identity": 18.0, "transparency": 14.7, "maintenance": 20.0, "adoption": 17.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "n8n", "repo": "n8n-io/n8n", "display_repo": "", "url": "https://github.com/n8n-io/n8n", "listing_class": "agent", "rank": 12, "previous_rank": 14, "rank_delta": 2, "stars": 207105, "stars_fmt": "207.1k", "forks": 61093, "forks_fmt": "61.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1401, "commits_low_confidence": false, "score": 100.0, "description": "Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.", "language": "TypeScript", "open_issues": 361, "category": "Workflow Platforms", "category_rank": 1, "npm_package": "n8n", "crate_package": "", "pypi_package": "", "docker_image": "n8nio/n8n", "vscode_extension": "", "weekly_downloads": 270753506, "dl_source": "npm+docker", "hn_mentions_30d": 257, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.7, "scorecard_checks": { "Code-Review": 10, "Maintained": 10, "CII-Best-Practices": 0, "Security-Policy": 10, "License": 9, "Dangerous-Workflow": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Packaging": 10, "Binary-Artifacts": 10, "Branch-Protection": 4, "Pinned-Dependencies": 7, "SAST": 1, "Fuzzing": 10 }, "scorecard_scanned_at": "2026-10-12T08:06:08Z", "slug": "n8n", "full_fetched_at": "2026-10-12T08:02:17Z", "source_note": "", "github_homepage": "https://n8n.io", "homepage_icon": "/site-icons/70c2d7e363c35a8e.png", "homepage_icon_for": "https://n8n.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/@n8n/config/src/configs/mcp-server.config.ts", "Found MCP-related server path: packages/@n8n/instance-ai/src/tools/filesystem/create-tools-from-mcp-server.ts", "Found MCP-related server test path: packages/@n8n/agents/src/__tests__/integration/cassettes/mcp-client-boundary/rejects-when-mcp-server-is-unreachable.json", "Found MCP-related server test path: packages/@n8n/agents/src/__tests__/integration/cassettes/mcp-runtime/rejects-when-mcp-server-is-unreachable.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/cli/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/cli/package.json", "README/docs also mention Anthropic", "Found Pinecone dependency 'pinecone' in packages/cli/package.json", "Found Qdrant dependency 'qdrant' in packages/cli/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code", "database", "shell" ], "confidence": "high", "evidence": [ "Found declared path: .claude/plugins/n8n/.claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found shell dependency 'shelljs' in packages/cli/package.json", "Found database dependency 'pg' in packages/cli/package.json", "Found code dependency 'simple-git' in packages/cli/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'n8n' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "n8n", "version": "2.42.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:17Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "source-available", "trust_score": 91.5, "trust_score_v2": 91.5, "rank_v2": 12, "rank_v2_delta": -7, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.9, "identity": 18.0, "transparency": 14.2, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -1.2, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cline", "repo": "cline/cline", "display_repo": "", "url": "https://github.com/cline/cline", "listing_class": "agent", "rank": 13, "previous_rank": 15, "rank_delta": 2, "stars": 70215, "stars_fmt": "70.2k", "forks": 7642, "forks_fmt": "7.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 300, "commits_low_confidence": false, "score": 97.2, "description": "Autonomous coding agent as an SDK, IDE extension, or CLI assistant.", "language": "TypeScript", "open_issues": 926, "category": "Coding Agents", "category_rank": 1, "npm_package": "cline", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "saoudrizwan.claude-dev", "weekly_downloads": 5659098, "dl_source": "npm+vscode", "hn_mentions_30d": 4, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.75, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 4, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:54:43Z", "slug": "cline", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://cline.bot", "homepage_icon": "/site-icons/76373ed8e6553d5a.png", "homepage_icon_for": "https://cline.bot", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: apps/vscode/src/core/controller/mcp/addRemoteMcpServer.ts", "Found MCP-related server path: apps/vscode/src/core/controller/mcp/authenticateMcpServer.ts", "Found MCP-related server test path: apps/vscode/src/services/mcp/__tests__/McpHub.addRemoteServer.test.ts", "Found MCP-related server test path: apps/vscode/src/services/mcp/__tests__/McpHub.deleteServerRPC.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BOT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/cline-sdk/references/plugins/REFERENCE.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'cline' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "cline", "version": "3.0.70" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:24Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 91.5, "trust_score_v2": 91.5, "rank_v2": 13, "rank_v2_delta": -2, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Playwright MCP", "repo": "microsoft/playwright-mcp", "display_repo": "", "url": "https://github.com/microsoft/playwright-mcp", "listing_class": "agent", "rank": 14, "previous_rank": 11, "rank_delta": -3, "stars": 38058, "stars_fmt": "38.1k", "forks": 3238, "forks_fmt": "3.2k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 19, "commits_low_confidence": false, "score": 84.6, "description": "Playwright MCP server", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 2, "npm_package": "@playwright/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6555401, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:04:20Z", "slug": "playwright-mcp", "full_fetched_at": "2026-10-12T08:01:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@playwright/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@playwright/mcp", "version": "0.0.83" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:01:57Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 91.5, "trust_score_v2": 91.5, "rank_v2": 14, "rank_v2_delta": 14, "trust_v2_adjustment": 3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.9, "identity": 18.0, "transparency": 13.5, "maintenance": 16.9, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenAI Agents SDK", "repo": "openai/openai-agents-python", "display_repo": "", "url": "https://github.com/openai/openai-agents-python", "listing_class": "agent", "rank": 15, "previous_rank": 16, "rank_delta": 1, "stars": 29988, "stars_fmt": "30.0k", "forks": 4871, "forks_fmt": "4.9k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 232, "commits_low_confidence": false, "score": 93.6, "description": "A lightweight, powerful framework for multi-agent workflows", "language": "Python", "open_issues": 19, "category": "Agent Frameworks", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "openai-agents", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3031573, "dl_source": "pypi", "hn_mentions_30d": 112, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:31:31Z", "slug": "openai-agents-sdk", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "https://openai.github.io/openai-agents-python/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .agents/references/local-mcp-server-lifecycle.md", "Found MCP-related server path: examples/mcp/manager_example/mcp_server.py", "Found MCP-related server docs path: docs/ref/mcp/server.md", "Found MCP-related server test path: tests/mcp/servers/legacy.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "E2B", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: docs/ref/extensions/experimental/codex/codex.md", "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'openai-agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openai-agents", "version": "0.23.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:16Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 91.4, "trust_score_v2": 91.4, "rank_v2": 15, "rank_v2_delta": -13, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.4, "identity": 18.0, "transparency": 15.2, "maintenance": 19.7, "adoption": 19.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "agent-device", "repo": "callstack/agent-device", "display_repo": "", "url": "https://github.com/callstack/agent-device", "listing_class": "agent", "rank": 16, "previous_rank": 17, "rank_delta": 1, "stars": 4986, "stars_fmt": "5.0k", "forks": 333, "forks_fmt": "333", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 606, "commits_low_confidence": false, "score": 83.9, "description": "Mobile app automation and verification for AI coding agents. CLI, MCP server, and typed Node.js API for iOS, Android, HarmonyOS, TV, web, macOS, and Linux.", "language": "TypeScript", "open_issues": 86, "category": "Browser & Computer Use", "category_rank": 1, "npm_package": "agent-device", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 283825, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.96, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 6, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:02:26Z", "slug": "agent-device", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "https://agent-device.dev", "homepage_icon": "/site-icons/73a42d97bba0ed90.png", "homepage_icon_for": "https://agent-device.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server-guide.ts", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: src/mcp/__tests__/server-validation.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/plugins/connection.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'agent-device' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "agent-device", "version": "0.21.26" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:50Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 91.1, "trust_score_v2": 91.1, "rank_v2": 16, "rank_v2_delta": 20, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.9, "identity": 18.0, "transparency": 13.7, "maintenance": 20.0, "adoption": 16.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Strands Agents", "repo": "strands-agents/harness-sdk", "display_repo": "", "url": "https://github.com/strands-agents/harness-sdk", "listing_class": "agent", "rank": 17, "previous_rank": 19, "rank_delta": 2, "stars": 8781, "stars_fmt": "8.8k", "forks": 1359, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 257, "commits_low_confidence": false, "score": 88.3, "description": "Build an agent harness and control it end-to-end. Open-source SDK for production AI agents in Python & TypeScript - any model, any cloud.", "language": "Python", "open_issues": 585, "category": "Agent Frameworks", "category_rank": 6, "npm_package": "@strands-agents/sdk", "crate_package": "", "pypi_package": "strands-agents", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9306776, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 1, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T17:16:19Z", "slug": "strands-agents", "full_fetched_at": "2026-10-12T12:02:23Z", "source_note": "", "github_homepage": "http://strandsagents.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .agents/skills/strands/references/add-mcp-server.md", "Found MCP-related server path: .agents/skills/strands/skills/add-mcp-server/SKILL.md", "Found MCP-related server test path: harness-py/tests/tools/echo_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in harness-ts/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in harness-ts/package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in harness-ts/package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/strands/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@strands-agents/sdk' points to the tracked repo", "pypi package 'strands-agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@strands-agents/sdk", "version": "1.20.0" }, { "ecosystem": "PyPI", "name": "strands-agents", "version": "1.59.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:23Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 90.6, "trust_score_v2": 90.6, "rank_v2": 17, "rank_v2_delta": 7, "trust_v2_adjustment": 1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.2, "identity": 18.0, "transparency": 13.1, "maintenance": 20.0, "adoption": 18.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ECC", "repo": "affaan-m/ECC", "display_repo": "", "url": "https://github.com/affaan-m/ECC", "listing_class": "agent", "rank": 18, "previous_rank": 22, "rank_delta": 4, "stars": 277677, "stars_fmt": "277.7k", "forks": 41408, "forks_fmt": "41.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1065, "commits_low_confidence": false, "score": 100.0, "description": "The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.", "language": "JavaScript", "open_issues": 79, "category": "Coding Agents", "category_rank": 2, "npm_package": "ecc-universal", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 11905, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.86, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 9, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-10T23:27:26Z", "slug": "ecc", "full_fetched_at": "2026-10-12T04:02:16Z", "source_note": "", "github_homepage": "https://ecc.tools", "homepage_icon": "/site-icons/1d0950a10a0d18ae.png", "homepage_icon_for": "https://ecc.tools", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .agents/skills/mcp-server-patterns/SKILL.md", "Found MCP-related server path: .agents/skills/mcp-server-patterns/agents/openai.yaml", "Found MCP-related server docs path: docs/ja-JP/skills/mcp-server-patterns/SKILL.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found credential/config marker 'ITO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'ecc-universal' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ecc-universal", "version": "2.2.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:16Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 90.5, "trust_score_v2": 90.5, "rank_v2": 18, "rank_v2_delta": 7, "trust_v2_adjustment": 1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 13.4, "maintenance": 20.0, "adoption": 18.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenClaw", "repo": "openclaw/openclaw", "display_repo": "", "url": "https://github.com/openclaw/openclaw", "listing_class": "agent", "rank": 19, "previous_rank": 18, "rank_delta": -1, "stars": 391771, "stars_fmt": "391.8k", "forks": 82374, "forks_fmt": "82.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 15866, "commits_low_confidence": false, "score": 100.0, "description": "The AI that really does things. Any OS. Any Platform. The lobster way. 🦞 ", "language": "TypeScript", "open_issues": 6221, "category": "Browser & Computer Use", "category_rank": 2, "npm_package": "openclaw", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4122275, "dl_source": "npm", "hn_mentions_30d": 42, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-09T16:54:46Z", "slug": "openclaw", "full_fetched_at": "2026-10-12T12:02:33Z", "source_note": "", "github_homepage": "https://openclaw.ai", "homepage_icon": "/site-icons/103097b92de572d3.png", "homepage_icon_for": "https://openclaw.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: extensions/codex/src/app-server/thread-lifecycle.user-mcp-servers.test-support.ts", "Found MCP-related server path: src/commands/doctor/shared/reserved-mcp-server-name-migrate.ts", "Found MCP-related server test path: extensions/codex/src/app-server/thread-lifecycle.user-mcp-servers.test.ts", "Found MCP-related server test path: src/mcp/channel-server.shutdown-unhandled-rejection.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Mistral AI", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Google Gemini dependency '@google/genai' in package.json", "Found Mistral AI dependency 'mistralai' in package.json", "Found Postgres dependency 'pg' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "database", "shell" ], "confidence": "high", "evidence": [ "Found extension-based path: .github/codeql/openclaw-boundary/tests/network-runtime/extensions/qa-lab/src/gateway-child-setup.ts", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json", "Found shell dependency 'execa' in package.json", "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'openclaw' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "openclaw", "version": "2026.10.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:33Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 90.4, "trust_score_v2": 90.4, "rank_v2": 19, "rank_v2_delta": -10, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.8, "identity": 18.0, "transparency": 13.5, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -1.5, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Browser Harness", "repo": "browser-use/browser-harness", "display_repo": "", "url": "https://github.com/browser-use/browser-harness", "listing_class": "agent", "rank": 20, "previous_rank": 20, "rank_delta": 0, "stars": 18401, "stars_fmt": "18.4k", "forks": 1804, "forks_fmt": "1.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 100, "commits_low_confidence": false, "score": 90.7, "description": "Browser Harness | Self-healing harness that enables LLMs to complete any task.", "language": "Python", "open_issues": 54, "category": "Browser & Computer Use", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "browser-harness", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1543743, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.31, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:55:33Z", "slug": "browser-harness", "full_fetched_at": "2026-10-12T04:02:18Z", "source_note": "", "github_homepage": "https://browser-harness.com", "homepage_icon": "/site-icons/4cdb554f56eadea9.png", "homepage_icon_for": "https://browser-harness.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_server.py", "Found MCP-related server test path: tests/unit/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'browser-harness' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "browser-harness", "version": "0.1.13" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:18Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 90.2, "trust_score_v2": 90.2, "rank_v2": 20, "rank_v2_delta": 27, "trust_v2_adjustment": 3.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.4, "identity": 18.0, "transparency": 13.5, "maintenance": 20.0, "adoption": 18.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Codebase Memory MCP", "repo": "DeusData/codebase-memory-mcp", "display_repo": "", "url": "https://github.com/DeusData/codebase-memory-mcp", "listing_class": "agent", "rank": 21, "previous_rank": 12, "rank_delta": -9, "stars": 46423, "stars_fmt": "46.4k", "forks": 3815, "forks_fmt": "3.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 858, "commits_low_confidence": false, "score": 94.7, "description": "High-performance code intelligence MCP server. Indexes codebases into a persistent knowledge graph — average repo in milliseconds. 158 languages, sub-ms queries, 99% fewer tokens. Single static binary, zero dependencies.", "language": "C", "open_issues": 473, "category": "MCP Servers", "category_rank": 3, "npm_package": "codebase-memory-mcp", "crate_package": "", "pypi_package": "codebase-memory-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1450, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 0.17, "scorecard_score": 7.4, "scorecard_checks": { "Code-Review": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Security-Policy": 10, "Maintained": 10, "Token-Permissions": 10, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "SAST": 10, "License": 10, "Packaging": 10, "Pinned-Dependencies": 9, "Signed-Releases": 0, "Branch-Protection": -1, "Fuzzing": 10, "Vulnerabilities": 0, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:30Z", "slug": "codebase-memory-mcp", "full_fetched_at": "2026-10-12T04:02:40Z", "source_note": "", "github_homepage": "https://deusdata.github.io/codebase-memory-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'codebase-memory-mcp' points to the tracked repo", "pypi package 'codebase-memory-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "codebase-memory-mcp", "version": "0.11.0" }, { "ecosystem": "PyPI", "name": "codebase-memory-mcp", "version": "0.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:40Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 90.1, "trust_score_v2": 90.1, "rank_v2": 21, "rank_v2_delta": 34, "trust_v2_adjustment": 4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.6, "identity": 18.0, "transparency": 14.8, "maintenance": 20.0, "adoption": 15.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Peekaboo", "repo": "openclaw/Peekaboo", "display_repo": "", "url": "https://github.com/openclaw/Peekaboo", "listing_class": "agent", "rank": 22, "previous_rank": 21, "rank_delta": -1, "stars": 5294, "stars_fmt": "5.3k", "forks": 411, "forks_fmt": "411", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 306, "commits_low_confidence": false, "score": 84.5, "description": "Peekaboo is a macOS CLI & optional MCP server that enables AI agents to capture screenshots of applications, or the entire system, with optional visual question answering through local or remote AI models.", "language": "Swift", "open_issues": 4, "category": "Browser & Computer Use", "category_rank": 4, "npm_package": "@steipete/peekaboo", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1490, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:29:51Z", "slug": "peekaboo", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "http://www.peekaboo.boo", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: Core/PeekabooCore/Sources/PeekabooAgentRuntime/MCP/Server/PeekabooMCPServer.swift", "Found MCP-related server test path: Core/PeekabooCore/Tests/PeekabooTests/MCP/PeekabooMCPServerTests.swift" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: Apps/Mac/Peekaboo/Extensions/View+Environment.swift" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@steipete/peekaboo' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@steipete/peekaboo", "version": "4.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 90.0, "trust_score_v2": 90.0, "rank_v2": 22, "rank_v2_delta": 23, "trust_v2_adjustment": 3.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.0, "identity": 18.0, "transparency": 14.3, "maintenance": 20.0, "adoption": 13.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Vercel Skills", "repo": "vercel-labs/skills", "display_repo": "", "url": "https://github.com/vercel-labs/skills", "listing_class": "skill", "rank": 2, "previous_rank": 2, "rank_delta": 0, "stars": 33973, "stars_fmt": "34.0k", "forks": 2909, "forks_fmt": "2.9k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 59, "commits_low_confidence": false, "score": 90.2, "description": "The open agent skills tool - npx skills", "language": "TypeScript", "open_issues": 740, "category": "Agent Skills", "category_rank": 2, "npm_package": "skills", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4467519, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:17:00Z", "slug": "vercel-skills", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "https://skills.sh", "homepage_icon": "/site-icons/1a8907399fff4089.png", "homepage_icon_for": "https://skills.sh", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'skills' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "skills", "version": "1.7.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:32Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 90.0, "trust_score_v2": 90.0, "rank_v2": 2, "rank_v2_delta": 35, "trust_v2_adjustment": 2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.4, "identity": 18.0, "transparency": 12.5, "maintenance": 18.9, "adoption": 19.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LeRobot", "repo": "huggingface/lerobot", "display_repo": "", "url": "https://github.com/huggingface/lerobot", "listing_class": "agent", "rank": 23, "previous_rank": 24, "rank_delta": 1, "stars": 28108, "stars_fmt": "28.1k", "forks": 5873, "forks_fmt": "5.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 70, "commits_low_confidence": false, "score": 92.3, "description": "🤗 LeRobot: Making AI for Robotics more accessible with end-to-end learning", "language": "Python", "open_issues": 370, "category": "Robotics & Embodied", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "lerobot", "docker_image": "", "vscode_extension": "", "weekly_downloads": 57161, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-02T00:45:33Z", "slug": "lerobot", "full_fetched_at": "2026-10-12T04:02:45Z", "source_note": "", "github_homepage": "https://huggingface.co/docs/lerobot", "homepage_icon": "/site-icons/71612e4c2c8d1e76.png", "homepage_icon_for": "https://huggingface.co/docs/lerobot", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'lerobot' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "lerobot", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:45Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 89.9, "trust_score_v2": 89.9, "rank_v2": 23, "rank_v2_delta": -4, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.1, "identity": 18.0, "transparency": 14.4, "maintenance": 19.4, "adoption": 17.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Codex", "repo": "openai/codex", "display_repo": "", "url": "https://github.com/openai/codex", "listing_class": "agent", "rank": 24, "previous_rank": 23, "rank_delta": -1, "stars": 128805, "stars_fmt": "128.8k", "forks": 20229, "forks_fmt": "20.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1456, "commits_low_confidence": false, "score": 100.0, "description": "Lightweight coding agent that runs in your terminal", "language": "Rust", "open_issues": 22033, "category": "Coding Agents", "category_rank": 3, "npm_package": "@openai/codex", "crate_package": "", "pypi_package": "openai-codex", "docker_image": "", "vscode_extension": "", "weekly_downloads": 23706057, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 5.9, "scorecard_checks": { "Maintained": 10, "Security-Policy": 10, "Code-Review": 0, "CII-Best-Practices": 0, "Dangerous-Workflow": 10, "License": 10, "Token-Permissions": 0, "Binary-Artifacts": 10, "Packaging": 10, "Fuzzing": 0, "Pinned-Dependencies": 8, "Branch-Protection": 4, "Signed-Releases": 8, "SAST": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:14Z", "slug": "codex", "full_fetched_at": "2026-10-12T08:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: codex-rs/tui/src/bottom_pane/mcp_server_elicitation.rs", "Found MCP-related server path: codex-rs/tui/src/bottom_pane/snapshots/codex_tui__bottom_pane__mcp_server_elicitation__tests__mcp_form_wrapped_url.snap", "Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_elicitation.rs", "Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_status.rs" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in sdk/python/pyproject.toml", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: bazel/extensions/BUILD.bazel" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@openai/codex' points to the tracked repo", "pypi package 'openai-codex' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@openai/codex", "version": "0.162.1" }, { "ecosystem": "PyPI", "name": "openai-codex", "version": "0.162.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:26Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 89.9, "trust_score_v2": 89.9, "rank_v2": 24, "rank_v2_delta": 22, "trust_v2_adjustment": 3.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.9, "identity": 18.0, "transparency": 13.5, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bifrost", "repo": "maximhq/bifrost", "display_repo": "", "url": "https://github.com/maximhq/bifrost", "listing_class": "agent", "rank": 25, "previous_rank": 27, "rank_delta": 2, "stars": 8724, "stars_fmt": "8.7k", "forks": 1375, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1027, "commits_low_confidence": false, "score": 88.2, "description": "Fastest enterprise AI gateway (50x faster than LiteLLM) with adaptive load balancer, cluster mode, guardrails, 1000+ models support & <100 µs overhead at 5k RPS.", "language": "Go", "open_issues": 537, "category": "LLM Gateways & Infra", "category_rank": 1, "npm_package": "@maximhq/bifrost", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1105, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": -1, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-12T08:06:02Z", "slug": "bifrost", "full_fetched_at": "2026-10-12T08:02:01Z", "source_note": "", "github_homepage": "https://www.getmaxim.ai/bifrost", "homepage_icon": "/site-icons/d9128da04b239557.png", "homepage_icon_for": "https://www.getmaxim.ai/bifrost", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: ui/public/images/mcp-servers/adobe.svg", "Found MCP-related server path: ui/public/images/mcp-servers/ahrefs.svg", "Found MCP-related server docs path: docs/mcp/connecting-to-servers.mdx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .github/workflows/configs/withdynamicplugin/config.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@maximhq/bifrost' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@maximhq/bifrost", "version": "1.6.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:01Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 89.6, "trust_score_v2": 89.6, "rank_v2": 25, "rank_v2_delta": 13, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.4, "identity": 18.0, "transparency": 14.5, "maintenance": 20.0, "adoption": 13.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MLflow", "repo": "mlflow/mlflow", "display_repo": "", "url": "https://github.com/mlflow/mlflow", "listing_class": "agent", "rank": 26, "previous_rank": 25, "rank_delta": -1, "stars": 28349, "stars_fmt": "28.3k", "forks": 6441, "forks_fmt": "6.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 461, "commits_low_confidence": false, "score": 94.4, "description": "The open source AI engineering platform for agents, LLMs, and ML models. MLflow enables teams of all sizes to debug, evaluate, monitor, and optimize production-quality AI applications while controlling costs and managing access to models and data.", "language": "Python", "open_issues": 1501, "category": "Observability & Evaluation", "category_rank": 2, "npm_package": "", "crate_package": "", "pypi_package": "mlflow", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4581828, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "CII-Best-Practices": 0, "Code-Review": 9, "Maintained": 10, "Security-Policy": 10, "License": 10, "Dangerous-Workflow": 0, "Pinned-Dependencies": -1, "Signed-Releases": 0, "Token-Permissions": 10, "Branch-Protection": 3, "Binary-Artifacts": 10, "Packaging": 10, "SAST": 0, "Fuzzing": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:08Z", "slug": "mlflow", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "https://mlflow.org", "homepage_icon": "/site-icons/6066eb669375c680.png", "homepage_icon_for": "https://mlflow.org", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: mlflow/entities/mcp_server.py", "Found MCP-related server path: mlflow/entities/mcp_server_version.py", "Found MCP-related server docs path: docs/api_reference/mcp_server_registry_api_docs.py", "Found MCP-related server docs path: docs/docs/genai/mcp-registry/register-mcp-servers.mdx" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "README/docs also mention Amazon Bedrock", "Found Postgres dependency 'psycopg' in pyproject.toml", "Ships Claude Code wiring ('.claude/skills') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mlflow' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mlflow", "version": "3.17.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:16Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 89.6, "trust_score_v2": 89.6, "rank_v2": 26, "rank_v2_delta": -11, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.2, "maintenance": 20.0, "adoption": 19.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Docling", "repo": "docling-project/docling", "display_repo": "", "url": "https://github.com/docling-project/docling", "listing_class": "agent", "rank": 27, "previous_rank": 26, "rank_delta": -1, "stars": 68752, "stars_fmt": "68.8k", "forks": 5055, "forks_fmt": "5.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 231, "commits_low_confidence": false, "score": 96.2, "description": "Get your documents ready for gen AI", "language": "Python", "open_issues": 854, "category": "Research & Data", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "docling", "docker_image": "", "vscode_extension": "", "weekly_downloads": 829818, "dl_source": "pypi", "hn_mentions_30d": 67, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.94, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 10, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-11T03:50:53Z", "slug": "docling", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "https://docling-project.github.io/docling", "homepage_icon": "/site-icons/e07548be5ea96604.png", "homepage_icon_for": "https://docling-project.github.io/docling", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: docling/models/plugins/__init__.py", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'docling' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "docling", "version": "2.137.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:29Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 89.6, "trust_score_v2": 89.6, "rank_v2": 27, "rank_v2_delta": -4, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.7, "identity": 18.0, "transparency": 12.9, "maintenance": 20.0, "adoption": 19.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cloudflare Agents", "repo": "cloudflare/agents", "display_repo": "", "url": "https://github.com/cloudflare/agents", "listing_class": "agent", "rank": 28, "previous_rank": 29, "rank_delta": 1, "stars": 5813, "stars_fmt": "5.8k", "forks": 771, "forks_fmt": "771", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 167, "commits_low_confidence": false, "score": 86.0, "description": "Build and deploy AI Agents on Cloudflare ", "language": "TypeScript", "open_issues": 113, "category": "Agent Frameworks", "category_rank": 7, "npm_package": "agents", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1970469, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:14:28Z", "slug": "cloudflare-agents", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "https://developers.cloudflare.com/agents/", "homepage_icon": "/site-icons/6d392cb06461e3dd.png", "homepage_icon_for": "https://developers.cloudflare.com/agents/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/mcp-server/README.md", "Found MCP-related server path: examples/mcp-server/env.d.ts", "Found MCP-related server docs path: docs/agents/mcp-servers.md", "Found MCP-related server docs path: docs/agents/securing-mcp-servers.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in agent-think/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in agent-think/package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: packages/think/src/extensions/bridge-provider.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "agents", "version": "0.28.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:27Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 89.6, "trust_score_v2": 89.6, "rank_v2": 28, "rank_v2_delta": 14, "trust_v2_adjustment": 2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.5, "identity": 18.0, "transparency": 12.8, "maintenance": 20.0, "adoption": 17.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "A2A / Agent2Agent Protocol", "repo": "a2aproject/A2A", "display_repo": "a2aproject/A2A", "url": "https://github.com/a2aproject/A2A", "listing_class": "agent", "rank": 29, "previous_rank": 28, "rank_delta": -1, "stars": 26118, "stars_fmt": "26.1k", "forks": 2662, "forks_fmt": "2.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 20, "commits_low_confidence": false, "score": 83.9, "description": "Agent2Agent (A2A) is an open protocol enabling communication and interoperability between opaque agentic applications.", "language": "Shell", "open_issues": 212, "category": "Protocols & Tool Integration", "category_rank": 4, "npm_package": "", "crate_package": "", "pypi_package": "a2a-sdk", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2726724, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:52:54Z", "slug": "a2a-agent2agent-protocol", "full_fetched_at": "2026-10-12T04:02:28Z", "source_note": "", "github_homepage": "https://a2a-protocol.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: docs/root-redirects/extensions/index.html", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'a2a-sdk' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 89.5, "trust_score_v2": 89.5, "rank_v2": 29, "rank_v2_delta": -12, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.2, "identity": 18.0, "transparency": 14.4, "maintenance": 17.3, "adoption": 19.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SearXNG Search", "repo": "ihor-sokoliuk/mcp-searxng", "display_repo": "", "url": "https://github.com/ihor-sokoliuk/mcp-searxng", "listing_class": "agent", "rank": 30, "previous_rank": 30, "rank_delta": 0, "stars": 1296, "stars_fmt": "1.3k", "forks": 163, "forks_fmt": "163", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 67, "commits_low_confidence": false, "score": 76.8, "description": "Private web search for AI assistants via SearXNG — supports Claude, Cursor, and any MCP client", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 4, "npm_package": "mcp-searxng", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 10578, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 8.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:42:08Z", "slug": "searxng-search", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-searxng' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-searxng", "version": "2.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:24Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 89.3, "trust_score_v2": 89.3, "rank_v2": 30, "rank_v2_delta": 37, "trust_v2_adjustment": 4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.6, "identity": 18.0, "transparency": 16.1, "maintenance": 19.2, "adoption": 12.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Notebooklm Py", "repo": "teng-lin/notebooklm-py", "display_repo": "", "url": "https://github.com/teng-lin/notebooklm-py", "listing_class": "skill", "rank": 3, "previous_rank": 3, "rank_delta": 0, "stars": 19706, "stars_fmt": "19.7k", "forks": 2621, "forks_fmt": "2.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 43, "commits_low_confidence": false, "score": 87.2, "description": "Unofficial Python API and agentic skill for Google Gemini Notebook. Full programmatic access to NotebookLM's features—including capabilities the web UI doesn't expose—via Python, CLI, and AI agents like Claude Code, Codex, and OpenClaw.", "language": "Python", "open_issues": 21, "category": "Agent Skills", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "notebooklm-py", "docker_image": "", "vscode_extension": "", "weekly_downloads": 36784, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.58, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T22:46:48Z", "slug": "notebooklm-py", "full_fetched_at": "2026-10-12T00:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/notebooklm/mcp/server.py", "Found MCP-related server test path: tests/unit/mcp/test_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'notebooklm-py' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "notebooklm-py", "version": "0.8.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:23Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 89.3, "trust_score_v2": 89.3, "rank_v2": 3, "rank_v2_delta": 57, "trust_v2_adjustment": 4.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.3, "identity": 18.0, "transparency": 13.9, "maintenance": 18.6, "adoption": 16.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Apify MCP Server", "repo": "apify/apify-mcp-server", "display_repo": "", "url": "https://github.com/apify/apify-mcp-server", "listing_class": "agent", "rank": 31, "previous_rank": 33, "rank_delta": 2, "stars": 10763, "stars_fmt": "10.8k", "forks": 322, "forks_fmt": "322", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 97, "commits_low_confidence": false, "score": 85.7, "description": "The Apify MCP server enables your AI agents to extract data from social media, search engines, maps, e-commerce sites, or any other website using thousands of ready-made scrapers, crawlers, and automation tools available on the Apify Store.", "language": "TypeScript", "open_issues": 170, "category": "MCP Servers", "category_rank": 5, "npm_package": "@apify/actors-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 31361, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T09:53:56Z", "slug": "apify-mcp-server", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "https://mcp.apify.com", "homepage_icon": "/site-icons/78b71c74c1ac8aa9.png", "homepage_icon_for": "https://mcp.apify.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/legacy_server.ts", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server docs path: docs/apify-mcp-server.png" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'APIFY_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@apify/actors-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@apify/actors-mcp-server", "version": "0.17.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:19Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 89.3, "trust_score_v2": 89.3, "rank_v2": 31, "rank_v2_delta": 19, "trust_v2_adjustment": 3.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.2, "maintenance": 19.9, "adoption": 15.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bernstein", "repo": "sipyourdrink-ltd/bernstein", "display_repo": "", "url": "https://github.com/sipyourdrink-ltd/bernstein", "listing_class": "agent", "rank": 32, "previous_rank": 31, "rank_delta": -1, "stars": 1222, "stars_fmt": "1.2k", "forks": 180, "forks_fmt": "180", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 400, "commits_low_confidence": false, "score": 79.0, "description": "The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run", "language": "Python", "open_issues": 184, "category": "Coding Agents", "category_rank": 4, "npm_package": "", "crate_package": "", "pypi_package": "bernstein", "docker_image": "", "vscode_extension": "", "weekly_downloads": 22762, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 2, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-10T15:06:03Z", "slug": "bernstein", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://bernstein.run", "homepage_icon": "/site-icons/98ef738df8c824e9.png", "homepage_icon_for": "https://bernstein.run", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server path: src/bernstein/core/cost/mcp_server_cost.py", "Found MCP-related server docs path: docs/integrations/mcp-server-injection.md" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "E2B", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found E2B dependency 'e2b' in pyproject.toml", "Found credential/config marker 'BERNSTEIN_SLACK_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .plugin/plugin.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'bernstein' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "bernstein", "version": "3.21.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:30Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 89.1, "trust_score_v2": 89.1, "rank_v2": 32, "rank_v2_delta": -2, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.0, "identity": 18.0, "transparency": 15.0, "maintenance": 20.0, "adoption": 13.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LinkedIn MCP Server", "repo": "stickerdaniel/linkedin-mcp-server", "display_repo": "", "url": "https://github.com/stickerdaniel/linkedin-mcp-server", "listing_class": "agent", "rank": 33, "previous_rank": 32, "rank_delta": -1, "stars": 3833, "stars_fmt": "3.8k", "forks": 668, "forks_fmt": "668", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 281, "commits_low_confidence": false, "score": 84.6, "description": "Open-source MCP server for LinkedIn. Give Claude and any MCP-compatible AI agent access to profiles, companies, jobs, and messages.", "language": "Python", "open_issues": 71, "category": "MCP Servers", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-linkedin", "docker_image": "", "vscode_extension": "", "weekly_downloads": 13809, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.98, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-26T10:56:03Z", "slug": "linkedin-mcp-server", "full_fetched_at": "2026-10-12T00:02:18Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/mcp/server.json", "Found MCP-related server path: linkedin_mcp_server/__init__.py", "Found MCP-related server test path: tests/test_fastmcp_compatibility.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-server-linkedin' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-linkedin", "version": "4.27.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:18Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 89.1, "trust_score_v2": 89.1, "rank_v2": 33, "rank_v2_delta": 31, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.5, "identity": 18.0, "transparency": 13.3, "maintenance": 20.0, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "KiCad MCP Pro", "repo": "oaslananka/kicad-mcp-pro", "display_repo": "", "url": "https://github.com/oaslananka/kicad-mcp-pro", "listing_class": "agent", "rank": 34, "previous_rank": 34, "rank_delta": 0, "stars": 124, "stars_fmt": "124", "forks": 22, "forks_fmt": "22", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 412, "commits_low_confidence": false, "score": 68.9, "description": "MCP server for KiCad, connecting AI agents to schematic and PCB workflows, ERC/DRC validation, DFM checks, BOM analysis, and manufacturing preparation—with controlled edits and human-gated release workflows.", "language": "Python", "open_issues": 15, "category": "MCP Servers", "category_rank": 7, "npm_package": "kicad-mcp-pro", "crate_package": "", "pypi_package": "kicad-mcp-pro", "docker_image": "ghcr.io/oaslananka/kicad-mcp-pro:3.30.1", "vscode_extension": "", "weekly_downloads": 5816, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 8.5, "scorecard_checks": { "Dependency-Update-Tool": 10, "Security-Policy": 10, "Maintained": 10, "Code-Review": 10, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "Token-Permissions": 10, "CII-Best-Practices": 5, "Pinned-Dependencies": 10, "Packaging": 10, "License": 10, "Vulnerabilities": 8, "Fuzzing": 10, "Signed-Releases": 0, "Branch-Protection": 4, "SAST": 9, "Contributors": 10, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-11T20:04:02Z", "slug": "kicad-mcp-pro", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "https://oaslananka.github.io/kicad-mcp-pro/", "homepage_icon": "/site-icons/67decab4860aee1a.png", "homepage_icon_for": "https://oaslananka.github.io/kicad-mcp-pro/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/protocol-schemas/schemas/kicad-mcp-server-info.schema.json", "Found MCP-related server path: packages/protocol-schemas/schemas/mcp-server-health.schema.json", "Found MCP-related server test path: tests/contracts/mcp/2026-07-28/server-discover.request.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/kicad_mcp/setup.py", "Found Anthropic dependency 'claude-code' in src/kicad_mcp/setup.py", "Found Google Gemini dependency 'gemini-cli' in src/kicad_mcp/setup.py" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code", "shell" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface", "Found shell dependency 'subprocess' in src/kicad_mcp/setup.py", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'kicad-mcp-pro' points to the tracked repo", "pypi package 'kicad-mcp-pro' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "kicad-mcp-pro", "version": "4.1.0" }, { "ecosystem": "PyPI", "name": "kicad-mcp-pro", "version": "4.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:08Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 88.9, "trust_score_v2": 88.9, "rank_v2": 34, "rank_v2_delta": 6, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 23.1, "identity": 18.0, "transparency": 15.7, "maintenance": 20.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Larksuite Cli", "repo": "larksuite/cli", "display_repo": "", "url": "https://github.com/larksuite/cli", "listing_class": "skill", "rank": 4, "previous_rank": 5, "rank_delta": 1, "stars": 17642, "stars_fmt": "17.6k", "forks": 1390, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 27, "commits_low_confidence": false, "score": 83.2, "description": "The official Lark/飞书 CLI tool, maintained by the larksuite team — built for humans and AI Agents. Covers core business domains including Messenger, Docs, Base, Sheets, Calendar, Mail, Tasks, Meetings, and more, with 200+ commands and 20+ AI Agent Skills.", "language": "Go", "open_issues": 249, "category": "Agent Skills", "category_rank": 4, "npm_package": "@larksuite/cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 77240, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:01:50Z", "slug": "larksuite-cli", "full_fetched_at": "2026-10-11T16:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@larksuite/cli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@larksuite/cli", "version": "1.0.97" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:22Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 88.9, "trust_score_v2": 88.9, "rank_v2": 4, "rank_v2_delta": 47, "trust_v2_adjustment": 2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.0, "identity": 18.0, "transparency": 13.6, "maintenance": 17.8, "adoption": 16.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Argent", "repo": "software-mansion/argent", "display_repo": "", "url": "https://github.com/software-mansion/argent", "listing_class": "agent", "rank": 35, "previous_rank": 36, "rank_delta": 1, "stars": 3019, "stars_fmt": "3.0k", "forks": 133, "forks_fmt": "133", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 82, "commits_low_confidence": false, "score": 79.7, "description": "An agentic toolkit to control, debug, and profile iOS and Android apps. Made by Software Mansion.", "language": "TypeScript", "open_issues": 273, "category": "Browser & Computer Use", "category_rank": 5, "npm_package": "@swmansion/argent", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 140838, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:42:17Z", "slug": "argent", "full_fetched_at": "2026-10-12T00:02:22Z", "source_note": "", "github_homepage": "https://argent.swmansion.com", "homepage_icon": "/site-icons/702d0cacc967d9fb.png", "homepage_icon_for": "https://argent.swmansion.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/argent-mcp/src/mcp-server.ts", "Found MCP-related server test path: packages/argent-mcp/test/mcp-server-calls.test.ts", "Found MCP-related server test path: packages/argent-mcp/test/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/argent/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: packages/docs/plugins/og-image/index.js" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@swmansion/argent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@swmansion/argent", "version": "0.28.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:22Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 88.9, "trust_score_v2": 88.9, "rank_v2": 35, "rank_v2_delta": 33, "trust_v2_adjustment": 4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 12.8, "maintenance": 19.7, "adoption": 15.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Stagehand", "repo": "browserbase/stagehand", "display_repo": "", "url": "https://github.com/browserbase/stagehand", "listing_class": "agent", "rank": 36, "previous_rank": 35, "rank_delta": -1, "stars": 25638, "stars_fmt": "25.6k", "forks": 1754, "forks_fmt": "1.8k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 92, "commits_low_confidence": false, "score": 91.1, "description": "The SDK to extract data and interact with any site on the web. Get started with Claude Code, Codex, Eve, Mastra, and more.", "language": "TypeScript", "open_issues": 103, "category": "Browser & Computer Use", "category_rank": 6, "npm_package": "@browserbasehq/stagehand", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1697276, "dl_source": "npm", "hn_mentions_30d": 1, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T19:47:19Z", "slug": "stagehand", "full_fetched_at": "2026-10-12T04:02:22Z", "source_note": "", "github_homepage": "https://stagehand.dev", "homepage_icon": "/site-icons/8216f6a04d6bd8a6.png", "homepage_icon_for": "https://stagehand.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/integrations/cursor/.cursor/mcp.json", "Found MCP-related server path: packages/integrations/fx/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/evals/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Browserbase", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/evals/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/evals/package.json", "Found Browserbase dependency 'browserbase' in packages/cli/package.json", "Found Browserbase credential/config marker 'BROWSERBASE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found extension-based path: packages/cli/src/commands/cloud/extensions/delete.ts", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in packages/evals/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@browserbasehq/stagehand' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@browserbasehq/stagehand", "version": "4.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:22Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 88.8, "trust_score_v2": 88.8, "rank_v2": 36, "rank_v2_delta": -7, "trust_v2_adjustment": 0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.8, "identity": 18.0, "transparency": 12.8, "maintenance": 19.7, "adoption": 18.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ReMe", "repo": "agentscope-ai/ReMe", "display_repo": "", "url": "https://github.com/agentscope-ai/ReMe", "listing_class": "agent", "rank": 37, "previous_rank": 37, "rank_delta": 0, "stars": 3583, "stars_fmt": "3.6k", "forks": 307, "forks_fmt": "307", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 48, "commits_low_confidence": false, "score": 79.0, "description": "ReMe: Memory Management Kit for Agents - Remember Me, Refine Me.", "language": "Python", "open_issues": 26, "category": "Memory & Knowledge", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "reme-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 8974, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:49:25Z", "slug": "reme", "full_fetched_at": "2026-10-12T04:02:16Z", "source_note": "", "github_homepage": "https://reme.agentscope.io/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: reme/components/agent_wrapper/codex_mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'claude-agent-sdk' in pyproject.toml", "Found credential/config marker 'EMBEDDING_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: integrations/claude_code/.claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'reme-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "reme-ai", "version": "0.4.1.13" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:16Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 88.7, "trust_score_v2": 88.7, "rank_v2": 37, "rank_v2_delta": 11, "trust_v2_adjustment": 2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.4, "identity": 18.0, "transparency": 14.5, "maintenance": 18.7, "adoption": 13.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Avoid Ai Writing", "repo": "conorbronsdon/avoid-ai-writing", "display_repo": "", "url": "https://github.com/conorbronsdon/avoid-ai-writing", "listing_class": "skill", "rank": 5, "previous_rank": 4, "rank_delta": -1, "stars": 4976, "stars_fmt": "5.0k", "forks": 443, "forks_fmt": "443", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 274, "commits_low_confidence": false, "score": 84.1, "description": "Skill that audits and rewrites content to remove AI writing patterns. Use it with your favorite agents including Claude Code, OpenClaw, Codex, and Hermes.", "language": "JavaScript", "open_issues": 21, "category": "Agent Skills", "category_rank": 5, "npm_package": "avoid-ai-writing-detector", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2312, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T17:26:35Z", "slug": "avoid-ai-writing", "full_fetched_at": "2026-10-12T12:02:55Z", "source_note": "", "github_homepage": "https://chainofthought.show/go/avoid-ai-writing/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/avoid-ai-writing/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'avoid-ai-writing-detector' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "avoid-ai-writing-detector", "version": "3.37.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:55Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 88.6, "trust_score_v2": 88.6, "rank_v2": 5, "rank_v2_delta": 69, "trust_v2_adjustment": 4.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.4, "identity": 18.0, "transparency": 14.7, "maintenance": 19.7, "adoption": 13.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "REA", "repo": "morluto/rea", "display_repo": "", "url": "https://github.com/morluto/rea", "listing_class": "agent", "rank": 38, "previous_rank": 41, "rank_delta": 3, "stars": 141539, "stars_fmt": "141.5k", "forks": 32504, "forks_fmt": "32.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1796, "commits_low_confidence": false, "score": 100.0, "description": "Reverse engineer anything with agents, from app behavior down to native binaries.", "language": "TypeScript", "open_issues": 152, "category": "Security & Guardrails", "category_rank": 2, "npm_package": "rea-agents", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 10330, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:23:40Z", "slug": "rea", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://rea.tools", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/boundary/mcp/serverIdentity.test.ts", "Found MCP-related server test path: tests/boundary/mcp/serverLifecycleMcp.test.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found extension-based path: bridge/ghidra/extensions/nativeaot/NativeAotDirectory.java", "Found browser dependency 'playwright' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'rea-agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "rea-agents", "version": "6.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 88.5, "trust_score_v2": 88.5, "rank_v2": 38, "rank_v2_delta": 27, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.0, "identity": 18.0, "transparency": 13.1, "maintenance": 20.0, "adoption": 17.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Firecrawl", "repo": "firecrawl/firecrawl", "display_repo": "", "url": "https://github.com/firecrawl/firecrawl", "listing_class": "agent", "rank": 39, "previous_rank": 40, "rank_delta": 1, "stars": 190737, "stars_fmt": "190.7k", "forks": 10127, "forks_fmt": "10.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 256, "commits_low_confidence": false, "score": 98.6, "description": "Supercharge your AI agents with data from the web and beyond. Building the library for superintelligence. 🔥", "language": "TypeScript", "open_issues": 96, "category": "Research & Data", "category_rank": 2, "npm_package": "@mendable/firecrawl-js", "crate_package": "", "pypi_package": "firecrawl-py", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1295032, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 0.9, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:53:05Z", "slug": "firecrawl", "full_fetched_at": "2026-10-12T04:02:43Z", "source_note": "", "github_homepage": "https://firecrawl.dev", "homepage_icon": "/site-icons/e74ccd189416d335.png", "homepage_icon_for": "https://firecrawl.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Firecrawl", "Groq", "OpenAI", "OpenRouter", "Postgres", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/api/package.json", "Found Anthropic dependency 'anthropic' in apps/api/package.json", "Found Groq dependency 'groq' in apps/api/package.json", "Found xAI Grok dependency '@ai-sdk/xai' in apps/api/package.json", "Found OpenRouter dependency 'openrouter' in apps/api/package.json", "Found Firecrawl dependency 'firecrawl' in apps/api/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in apps/api/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mendable/firecrawl-js' points to the tracked repo", "pypi package 'firecrawl-py' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mendable/firecrawl-js", "version": "4.46.0" }, { "ecosystem": "PyPI", "name": "firecrawl-py", "version": "4.50.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:43Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 88.4, "trust_score_v2": 88.4, "rank_v2": 39, "rank_v2_delta": -27, "trust_v2_adjustment": -2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.5, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenViking", "repo": "volcengine/OpenViking", "display_repo": "", "url": "https://github.com/volcengine/OpenViking", "listing_class": "agent", "rank": 40, "previous_rank": 38, "rank_delta": -2, "stars": 39750, "stars_fmt": "39.8k", "forks": 3145, "forks_fmt": "3.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 417, "commits_low_confidence": false, "score": 93.9, "description": "Self-evolving Context Database for AI Agents. Unify Agent Memory, Knowledge RAG and Skills.", "language": "Python", "open_issues": 287, "category": "Memory & Knowledge", "category_rank": 2, "npm_package": "", "crate_package": "", "pypi_package": "openviking", "docker_image": "", "vscode_extension": "", "weekly_downloads": 113300, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:31:34Z", "slug": "openviking", "full_fetched_at": "2026-10-12T12:02:29Z", "source_note": "", "github_homepage": "https://openviking.ai", "homepage_icon": "/site-icons/3c1884953b256103.png", "homepage_icon_for": "https://openviking.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: agent-plugins/mcp.json", "Found MCP-related server docs path: docs/images/agents/image/trae/04-add-mcp-server.jpg" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Firecrawl", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Tavily" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in bot/package.json", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "search", "shell" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a extension-based plugin/integration surface", "Found shell dependency 'subprocess' in setup.py", "README/docs also mention shell capabilities", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'openviking' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openviking", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:29Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 88.3, "trust_score_v2": 88.3, "rank_v2": 40, "rank_v2_delta": -24, "trust_v2_adjustment": -1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.5, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 17.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PydanticAI", "repo": "pydantic/pydantic-ai", "display_repo": "", "url": "https://github.com/pydantic/pydantic-ai", "listing_class": "agent", "rank": 41, "previous_rank": 39, "rank_delta": -2, "stars": 20577, "stars_fmt": "20.6k", "forks": 2906, "forks_fmt": "2.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 847, "commits_low_confidence": false, "score": 92.0, "description": "How Python does AI. Agents, realtime voice, image generation, embeddings. Every model, every interface, typed end to end.", "language": "Python", "open_issues": 1002, "category": "Agent Frameworks", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "pydantic-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1390168, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:43:24Z", "slug": "pydanticai", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "https://pydantic.dev/pydantic-ai", "homepage_icon": "/site-icons/e9b31b2b0d9e8398.png", "homepage_icon_for": "https://pydantic.dev/pydantic-ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: docs/mcp/server.md", "Found MCP-related server test path: tests/example_modules/mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in examples/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Groq", "OpenAI", "OpenRouter", "Postgres", "Tavily" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Cohere dependency 'cohere' in pyproject.toml", "Found Groq dependency 'groq' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found declared path: src/pydantic_clai2/pydantic_clai2/builtin_plugins/__init__.py", "README/docs also mention a declared plugin/integration surface", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'pydantic-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pydantic-ai", "version": "2.55.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:19Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 88.3, "trust_score_v2": 88.3, "rank_v2": 41, "rank_v2_delta": -21, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.9, "identity": 18.0, "transparency": 13.5, "maintenance": 20.0, "adoption": 18.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Supabase MCP Server", "repo": "supabase/mcp", "display_repo": "", "url": "https://github.com/supabase/mcp", "listing_class": "agent", "rank": 42, "previous_rank": 42, "rank_delta": 0, "stars": 2947, "stars_fmt": "2.9k", "forks": 415, "forks_fmt": "415", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 15, "commits_low_confidence": false, "score": 73.0, "description": "Connect Supabase to your AI assistants", "language": "TypeScript", "open_issues": 75, "category": "MCP Servers", "category_rank": 8, "npm_package": "@supabase/mcp-server-supabase", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 67579, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.88, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:19:23Z", "slug": "supabase-mcp-server", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "https://supabase.com/mcp", "homepage_icon": "/site-icons/e2c4439da4a07d4e.png", "homepage_icon_for": "https://supabase.com/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mcp-server-postgrest/CHANGELOG.md", "Found MCP-related server path: packages/mcp-server-postgrest/README.md", "Found MCP-related server test path: packages/mcp-server-postgrest/src/server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in packages/mcp-server-supabase/package.json", "README/docs also mention Supabase" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: packages/mcp-server-supabase/test/plugins/text-loader.ts" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@supabase/mcp-server-supabase' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@supabase/mcp-server-supabase", "version": "0.13.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:35Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 88.2, "trust_score_v2": 88.2, "rank_v2": 42, "rank_v2_delta": 40, "trust_v2_adjustment": 4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.0, "identity": 18.0, "transparency": 14.0, "maintenance": 16.8, "adoption": 14.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cap Js MCP Server", "repo": "cap-js/mcp-server", "display_repo": "", "url": "https://github.com/cap-js/mcp-server", "listing_class": "agent", "rank": 43, "previous_rank": 43, "rank_delta": 0, "stars": 113, "stars_fmt": "113", "forks": 19, "forks_fmt": "19", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 25, "commits_low_confidence": false, "score": 60.9, "description": "MCP server for AI-assisted development of CAP applications", "language": "JavaScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 9, "npm_package": "@cap-js/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 64310, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.78, "scorecard_score": 7.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:30:10Z", "slug": "cap-js-mcp-server", "full_fetched_at": "2026-10-12T12:03:01Z", "source_note": "", "github_homepage": "https://cap.cloud.sap/docs", "homepage_icon": "/site-icons/b2ffc0efce70701a.png", "homepage_icon_for": "https://cap.cloud.sap/docs", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@cap-js/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@cap-js/mcp-server", "version": "0.0.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:01Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 88.1, "trust_score_v2": 88.1, "rank_v2": 43, "rank_v2_delta": 42, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.3, "identity": 18.0, "transparency": 15.2, "maintenance": 17.6, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mongodb MCP Server", "repo": "mongodb-js/mongodb-mcp-server", "display_repo": "", "url": "https://github.com/mongodb-js/mongodb-mcp-server", "listing_class": "agent", "rank": 44, "previous_rank": 44, "rank_delta": 0, "stars": 1142, "stars_fmt": "1.1k", "forks": 295, "forks_fmt": "295", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 60, "commits_low_confidence": false, "score": 77.1, "description": "A Model Context Protocol server to connect to MongoDB databases and MongoDB Atlas Clusters.", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 10, "npm_package": "mongodb-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/mongodb/mongodb-mcp-server:1.14.0", "vscode_extension": "", "weekly_downloads": 831107, "dl_source": "npm+docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.96, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 8, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:20:16Z", "slug": "mongodb-mcp-server", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: MCP_SERVER_LIBRARY.md", "Found MCP-related server path: api-extractor/reports/mongodb-mcp-server.public.api.md", "Found MCP-related server test path: packages/mongodb-mcp-server/e2e-tests/cli.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MDB_MCP_VOYAGE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mongodb-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mongodb-mcp-server", "version": "3.0.5" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 87.9, "trust_score_v2": 87.9, "rank_v2": 44, "rank_v2_delta": 31, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 13.0, "maintenance": 19.1, "adoption": 15.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qwen Code", "repo": "QwenLM/qwen-code", "display_repo": "", "url": "https://github.com/QwenLM/qwen-code", "listing_class": "agent", "rank": 45, "previous_rank": 46, "rank_delta": 1, "stars": 28447, "stars_fmt": "28.4k", "forks": 3191, "forks_fmt": "3.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1053, "commits_low_confidence": false, "score": 93.0, "description": "An open-source AI coding agent that lives in your terminal.", "language": "TypeScript", "open_issues": 1471, "category": "Coding Agents", "category_rank": 5, "npm_package": "@qwen-code/qwen-code", "crate_package": "", "pypi_package": "qwen-code-sdk", "docker_image": "", "vscode_extension": "", "weekly_downloads": 74944, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:16:14Z", "slug": "qwen-code", "full_fetched_at": "2026-10-12T08:02:34Z", "source_note": "", "github_homepage": "https://qwenlm.github.io/qwen-code-docs/en/users/overview", "homepage_icon": "/site-icons/382088cc4a986e4c.png", "homepage_icon_for": "https://qwenlm.github.io/qwen-code-docs/en/users/overview", "public_actions": { "actions_30d": 416, "actions_30d_merged": 359, "actions_30d_by_repo": [ { "repo": "kaspernj/worker_plugins", "count": 2 }, { "repo": "ariffazil/arifFLOW", "count": 1 }, { "repo": "Mirapakaya/crow", "count": 1 }, { "repo": "juhaku/utoipa", "count": 1 } ] }, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: integration-tests/test-mcp-server.ts", "Found MCP-related server path: packages/cli/src/commands/agents/session-send-mcp-server.ts", "Found MCP-related server docs path: docs/developers/tools/mcp-server.md", "Found MCP-related server test path: integration-tests/cli/mcp_server_cyclic_schema.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/core/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/core/package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in packages/cli/package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found extension-based path: packages/cli/src/commands/extensions/consent.test.ts", "README/docs also mention a extension-based plugin/integration surface", "Found code dependency 'simple-git' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@qwen-code/qwen-code' points to the tracked repo", "pypi package 'qwen-code-sdk' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@qwen-code/qwen-code", "version": "0.25.1" }, { "ecosystem": "PyPI", "name": "qwen-code-sdk", "version": "0.1.0rc0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:34Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 87.9, "trust_score_v2": 87.9, "rank_v2": 45, "rank_v2_delta": 14, "trust_v2_adjustment": 2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.0, "identity": 18.0, "transparency": 12.2, "maintenance": 20.0, "adoption": 17.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ha MCP", "repo": "homeassistant-ai/ha-mcp", "display_repo": "", "url": "https://github.com/homeassistant-ai/ha-mcp", "listing_class": "agent", "rank": 46, "previous_rank": 47, "rank_delta": 1, "stars": 5040, "stars_fmt": "5.0k", "forks": 233, "forks_fmt": "233", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 393, "commits_low_confidence": false, "score": 83.2, "description": "The Unofficial and Awesome Home Assistant MCP Server", "language": "Python", "open_issues": 7, "category": "MCP Servers", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "ha-mcp", "docker_image": "ghcr.io/homeassistant-ai/ha-mcp:8.1.1", "vscode_extension": "", "weekly_downloads": 52249, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.44, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-08T23:01:54Z", "slug": "ha-mcp", "full_fetched_at": "2026-10-12T16:02:27Z", "source_note": "", "github_homepage": "https://homeassistant-ai.github.io/ha-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: scripts/vendor_fastmcp.py", "Found MCP-related server path: src/ha_mcp/_vendor/fastmcp/LICENSE", "Found MCP-related server test path: tests/src/unit/test_ha_mcp_server_entry.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'HOMEASSISTANT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: src/ha_mcp/_vendor/mcp/client/auth/extensions/__init__.py", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ha-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ha-mcp", "version": "8.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:27Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.8, "trust_score_v2": 87.8, "rank_v2": 46, "rank_v2_delta": 20, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.7, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 15.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Windows MCP", "repo": "CursorTouch/Windows-MCP", "display_repo": "", "url": "https://github.com/CursorTouch/Windows-MCP", "listing_class": "agent", "rank": 47, "previous_rank": 49, "rank_delta": 2, "stars": 8789, "stars_fmt": "8.8k", "forks": 950, "forks_fmt": "950", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 31, "commits_low_confidence": false, "score": 81.0, "description": "MCP Server for Computer Use in Windows", "language": "Python", "open_issues": 21, "category": "MCP Servers", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "windows-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 18776, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.66, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:35:48Z", "slug": "windows-mcp", "full_fetched_at": "2026-10-12T04:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'POSTHOG_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'windows-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "windows-mcp", "version": "0.8.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:25Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.7, "trust_score_v2": 87.7, "rank_v2": 47, "rank_v2_delta": 32, "trust_v2_adjustment": 3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.8, "identity": 18.0, "transparency": 13.9, "maintenance": 17.9, "adoption": 15.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Neo", "repo": "neomjs/neo", "display_repo": "", "url": "https://github.com/neomjs/neo", "listing_class": "agent", "rank": 48, "previous_rank": 45, "rank_delta": -3, "stars": 3291, "stars_fmt": "3.3k", "forks": 248, "forks_fmt": "248", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 510, "commits_low_confidence": false, "score": 82.2, "description": "Neo.mjs is a self-evolving software organism: a professional end-to-end AI engineering team whose cross-model swarm inhabits live apps via Neural Link, Active Hybrid GraphRAG, DreamService, and self-healing loops.", "language": "JavaScript", "open_issues": 257, "category": "UI & App Builders", "category_rank": 1, "npm_package": "neo.mjs", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6428, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 5, "scorecard_checks": { "Code-Review": 4, "Maintained": 10, "CII-Best-Practices": 0, "Dangerous-Workflow": 10, "Token-Permissions": 0, "Security-Policy": 0, "License": 10, "Fuzzing": 0, "Branch-Protection": 3, "Signed-Releases": 0, "Binary-Artifacts": 10, "SAST": 9, "Packaging": 10, "Pinned-Dependencies": 1 }, "scorecard_scanned_at": "2026-10-12T08:06:14Z", "slug": "neo", "full_fetched_at": "2026-10-12T08:02:27Z", "source_note": "", "github_homepage": "https://neomjs.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: resources/scss/src/grid/plugin/AnimateRows.scss" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'neo.mjs' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "neo.mjs", "version": "13.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:27Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.7, "trust_score_v2": 87.7, "rank_v2": 48, "rank_v2_delta": 40, "trust_v2_adjustment": 4.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.6, "identity": 18.0, "transparency": 12.8, "maintenance": 20.0, "adoption": 13.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Reversecore MCP", "repo": "sjkim1127/Reversecore_MCP", "display_repo": "", "url": "https://github.com/sjkim1127/Reversecore_MCP", "listing_class": "agent", "rank": 49, "previous_rank": 52, "rank_delta": 3, "stars": 208, "stars_fmt": "208", "forks": 22, "forks_fmt": "22", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 202, "commits_low_confidence": false, "score": 70.2, "description": "A security-first MCP server that empowers AI agents to perform automated reverse engineering, malware analysis, forensics, vulnerability research, and SAST — powered by Radare2, YARA, LIEF, Capstone, and more.", "language": "Python", "open_issues": 20, "category": "MCP Servers", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "reversecore-mcp", "docker_image": "ghcr.io/sjkim1127/reversecore_mcp:3.0.2", "vscode_extension": "", "weekly_downloads": 216, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 8.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 2, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-10T08:22:36Z", "slug": "reversecore-mcp", "full_fetched_at": "2026-10-12T00:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: scripts/test-mcp-server.py", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "Found Redis credential/config marker 'REDIS_URL'", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'reversecore-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "reversecore-mcp", "version": "3.0.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:11Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.6, "trust_score_v2": 87.6, "rank_v2": 49, "rank_v2_delta": 22, "trust_v2_adjustment": 3.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.5, "identity": 18.0, "transparency": 15.3, "maintenance": 20.0, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenUI", "repo": "thesysdev/openui", "display_repo": "", "url": "https://github.com/thesysdev/openui", "listing_class": "agent", "rank": 50, "previous_rank": 50, "rank_delta": 0, "stars": 10787, "stars_fmt": "10.8k", "forks": 724, "forks_fmt": "724", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 104, "commits_low_confidence": false, "score": 87.5, "description": "The Open Standard for Generative UI", "language": "TypeScript", "open_issues": 60, "category": "UI & App Builders", "category_rank": 2, "npm_package": "@openuidev/react-ui", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 46853, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:14:07Z", "slug": "openui", "full_fetched_at": "2026-10-12T12:02:28Z", "source_note": "", "github_homepage": "https://www.openui.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in docs/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@openuidev/react-ui' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@openuidev/react-ui", "version": "0.17.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:28Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.6, "trust_score_v2": 87.6, "rank_v2": 50, "rank_v2_delta": 6, "trust_v2_adjustment": 1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.0, "identity": 18.0, "transparency": 12.9, "maintenance": 20.0, "adoption": 15.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ARC-1", "repo": "arc-mcp/arc-1", "display_repo": "", "url": "https://github.com/arc-mcp/arc-1", "listing_class": "agent", "rank": 51, "previous_rank": 53, "rank_delta": 2, "stars": 218, "stars_fmt": "218", "forks": 65, "forks_fmt": "65", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 157, "commits_low_confidence": false, "score": 72.5, "description": "", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 14, "npm_package": "arc-1", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/arc-mcp/arc-1:1.0.2", "vscode_extension": "", "weekly_downloads": 2380, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T19:07:11Z", "slug": "arc-1", "full_fetched_at": "2026-10-12T12:02:25Z", "source_note": "", "github_homepage": "https://docs.arc-1-mcp.com/", "homepage_icon": "/site-icons/d14def710e131585.png", "homepage_icon_for": "https://docs.arc-1-mcp.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor-plugin/mcp.json", "Found MCP-related server path: docs_page/arc-1-vs-sap-abap-mcp-server.md", "Found MCP-related server docs path: docs/compare/J4D/02-sap-abap-mcp-server-vscode.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'arc-1' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "arc-1", "version": "1.5.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:25Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.5, "trust_score_v2": 87.5, "rank_v2": 51, "rank_v2_delta": 40, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.5, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Safari MCP", "repo": "achiya-automation/safari-mcp", "display_repo": "", "url": "https://github.com/achiya-automation/safari-mcp", "listing_class": "agent", "rank": 52, "previous_rank": 51, "rank_delta": -1, "stars": 214, "stars_fmt": "214", "forks": 29, "forks_fmt": "29", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 150, "commits_low_confidence": false, "score": 70.8, "description": "Native Safari browser automation for AI agents. 98 tools via AppleScript — zero overhead, keeps logins, runs silently in background. Drop-in alternative to Chrome DevTools MCP with 40-60% less CPU/heat on Apple Silicon.", "language": "JavaScript", "open_issues": 9, "category": "MCP Servers", "category_rank": 15, "npm_package": "safari-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3062, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T04:05:32Z", "slug": "safari-mcp", "full_fetched_at": "2026-10-12T08:02:29Z", "source_note": "", "github_homepage": "https://achiya-automation.com", "homepage_icon": "/site-icons/bf911ad013617270.png", "homepage_icon_for": "https://achiya-automation.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'safari-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "safari-mcp", "version": "2.22.15" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:29Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.5, "trust_score_v2": 87.5, "rank_v2": 52, "rank_v2_delta": 42, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.2, "identity": 18.0, "transparency": 13.8, "maintenance": 19.9, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PDF Reader MCP", "repo": "SylphxAI/anymd", "display_repo": "", "url": "https://github.com/SylphxAI/anymd", "listing_class": "agent", "rank": 53, "previous_rank": 63, "rank_delta": 10, "stars": 1037, "stars_fmt": "1.0k", "forks": 91, "forks_fmt": "91", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 186, "commits_low_confidence": false, "score": 77.2, "description": "Any file → clean Markdown for AI agents: PDF, Word, PowerPoint, Excel, EPUB, HTML and web pages, images (OCR), audio and video (metadata, subtitles, transcripts). A fast Rust MCP server and CLI that runs on your machine. No API key.", "language": "Rust", "open_issues": 0, "category": "MCP Servers", "category_rank": 16, "npm_package": "@sylphx/pdf-reader-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 10165, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 6, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:05:20Z", "slug": "pdf-reader-mcp", "full_fetched_at": "2026-10-12T00:02:27Z", "source_note": "", "github_homepage": "https://sylphxai.github.io/anymd/", "homepage_icon": "/site-icons/91e0a21e89dc003a.png", "homepage_icon_for": "https://sylphxai.github.io/anymd/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server test path: test/integration/mcp-server.test.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@sylphx/pdf-reader-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@sylphx/pdf-reader-mcp", "version": "8.5.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:27Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.5, "trust_score_v2": 87.5, "rank_v2": 53, "rank_v2_delta": 36, "trust_v2_adjustment": 4.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 13.0, "maintenance": 19.9, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent Browser", "repo": "vercel-labs/agent-browser", "display_repo": "", "url": "https://github.com/vercel-labs/agent-browser", "listing_class": "agent", "rank": 54, "previous_rank": 48, "rank_delta": -6, "stars": 43856, "stars_fmt": "43.9k", "forks": 2975, "forks_fmt": "3.0k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 32, "commits_low_confidence": false, "score": 88.0, "description": "Browser automation CLI for AI agents", "language": "Rust", "open_issues": 425, "category": "Browser & Computer Use", "category_rank": 7, "npm_package": "agent-browser", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1721883, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T23:35:26Z", "slug": "agent-browser", "full_fetched_at": "2026-10-12T12:02:27Z", "source_note": "", "github_homepage": "https://agent-browser.dev", "homepage_icon": "/site-icons/ae7888d1b86fea9f.png", "homepage_icon_for": "https://agent-browser.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Browserbase", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Amazon Bedrock credential/config marker 'AWS_ACCESS_KEY_ID'", "README/docs also mention Amazon Bedrock", "Found Browserbase credential/config marker 'BROWSERBASE_API_KEY'", "README/docs also mention Browserbase", "Found Redis dependency 'redis' in docs/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'redis' in docs/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'agent-browser' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "agent-browser", "version": "0.39.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:27Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 87.5, "trust_score_v2": 87.5, "rank_v2": 54, "rank_v2_delta": 0, "trust_v2_adjustment": 1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.1, "identity": 18.0, "transparency": 12.3, "maintenance": 18.0, "adoption": 19.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Gitlab MCP", "repo": "zereight/gitlab-mcp", "display_repo": "", "url": "https://github.com/zereight/gitlab-mcp", "listing_class": "agent", "rank": 55, "previous_rank": 57, "rank_delta": 2, "stars": 2034, "stars_fmt": "2.0k", "forks": 356, "forks_fmt": "356", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 305, "commits_low_confidence": false, "score": 81.8, "description": "First gitlab mcp for you, building together", "language": "TypeScript", "open_issues": 12, "category": "MCP Servers", "category_rank": 17, "npm_package": "@zereight/mcp-gitlab", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 106225, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.3, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 8, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-05T08:11:43Z", "slug": "gitlab-mcp", "full_fetched_at": "2026-10-12T04:02:39Z", "source_note": "", "github_homepage": "https://zereight.github.io/gitlab-mcp/", "homepage_icon": "/site-icons/48316facba9090a8.png", "homepage_icon_for": "https://zereight.github.io/gitlab-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .well-known/mcp/server-card.json", "Found MCP-related server path: mcp-server/.gitignore", "Found MCP-related server test path: mcp-server/test/run-tests.mjs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker '22GITLAB_PERSONAL_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@zereight/mcp-gitlab' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@zereight/mcp-gitlab", "version": "2.2.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:39Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.4, "trust_score_v2": 87.4, "rank_v2": 55, "rank_v2_delta": 28, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.9, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 14.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agno", "repo": "agno-agi/agno", "display_repo": "", "url": "https://github.com/agno-agi/agno", "listing_class": "agent", "rank": 56, "previous_rank": 55, "rank_delta": -1, "stars": 42685, "stars_fmt": "42.7k", "forks": 6121, "forks_fmt": "6.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 136, "commits_low_confidence": false, "score": 95.4, "description": "Build, run, and manage agent platforms.", "language": "Python", "open_issues": 893, "category": "Agent Frameworks", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "agno", "docker_image": "", "vscode_extension": "", "weekly_downloads": 489899, "dl_source": "pypi", "hn_mentions_30d": 227, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T06:37:25Z", "slug": "agno", "full_fetched_at": "2026-10-12T04:02:08Z", "source_note": "", "github_homepage": "https://docs.agno.com", "homepage_icon": "/site-icons/b2443cc897c4c8b4.png", "homepage_icon_for": "https://docs.agno.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cookbook/12_context/06_mcp_server.py", "Found MCP-related server path: cookbook/91_tools/mcp/dynamic_headers/server.py", "Found MCP-related server test path: libs/agno/tests/unit/os/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Brave Search", "Browserbase", "Cohere", "ElevenLabs", "Firecrawl", "Google Gemini", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Redis", "Tavily", "Weaviate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in libs/agno/pyproject.toml", "Found Anthropic dependency 'anthropic' in libs/agno/pyproject.toml", "Found Google Gemini dependency 'google-genai' in libs/agno/pyproject.toml", "Found Mistral AI dependency 'mistralai' in libs/agno/pyproject.toml", "Found Cohere dependency 'cohere' in libs/agno/pyproject.toml", "Found Groq dependency 'groq' in libs/agno/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "code", "database", "search" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in libs/agno/pyproject.toml", "Found search dependency 'tavily' in libs/agno/pyproject.toml", "Found database dependency 'postgres' in libs/agno/pyproject.toml", "README/docs also mention database capabilities", "Found code dependency 'gitpython' in libs/agno_infra/pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'agno' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agno", "version": "3.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:08Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 87.4, "trust_score_v2": 87.4, "rank_v2": 56, "rank_v2_delta": -24, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.6, "identity": 18.0, "transparency": 12.7, "maintenance": 20.0, "adoption": 18.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AiSOC", "repo": "beenuar/AiSOC", "display_repo": "", "url": "https://github.com/beenuar/AiSOC", "listing_class": "agent", "rank": 57, "previous_rank": 54, "rank_delta": -3, "stars": 2403, "stars_fmt": "2.4k", "forks": 269, "forks_fmt": "269", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 834, "commits_low_confidence": false, "score": 81.6, "description": "Open-source AI Security Operations Center: alert fusion, LLM-agent triage, MITRE ATT&CK investigation, and a replayable decision ledger for every agent step. Self-hostable, runs with no API keys, MIT licensed. Ships an MCP server for Claude, Cursor and Continue.", "language": "Python", "open_issues": 3, "category": "Security & Guardrails", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "aisoc-sandbox", "docker_image": "", "vscode_extension": "", "weekly_downloads": 552, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.97, "scorecard_score": 6.2, "scorecard_checks": { "Code-Review": 2, "Maintained": 10, "Security-Policy": 10, "Dependency-Update-Tool": 10, "Dangerous-Workflow": 10, "CII-Best-Practices": 0, "Token-Permissions": 0, "Binary-Artifacts": 10, "Packaging": 10, "License": 10, "Fuzzing": 0, "Branch-Protection": -1, "Signed-Releases": 0, "SAST": 7, "Vulnerabilities": 7, "Pinned-Dependencies": 3, "CI-Tests": 10, "Contributors": 6 }, "scorecard_scanned_at": "2026-10-12T12:06:22Z", "slug": "aisoc", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "https://beenuar.github.io/AiSOC/", "homepage_icon": "/site-icons/015a22e443c59ed6.png", "homepage_icon_for": "https://beenuar.github.io/AiSOC/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: services/api/app/api/v1/endpoints/mcp_servers.py", "Found MCP-related server path: services/api/app/models/mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AISOC_INGEST_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/docs/docs/plugins/cli.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'aisoc-sandbox' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "aisoc-sandbox", "version": "0.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:35Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.3, "trust_score_v2": 87.3, "rank_v2": 57, "rank_v2_delta": 23, "trust_v2_adjustment": 3.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.1, "identity": 18.0, "transparency": 13.8, "maintenance": 20.0, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "EverOS", "repo": "EverMind-AI/EverOS", "display_repo": "", "url": "https://github.com/EverMind-AI/EverOS", "listing_class": "agent", "rank": 58, "previous_rank": 85, "rank_delta": 27, "stars": 13406, "stars_fmt": "13.4k", "forks": 929, "forks_fmt": "929", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 22, "commits_low_confidence": false, "score": 80.6, "description": "One portable memory layer for every AI agent: local-first, Markdown-native, user-owned, and self-evolving across apps, tools, and workflows.", "language": "Python", "open_issues": 55, "category": "Memory & Knowledge", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "everos", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3188, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.87, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:19:44Z", "slug": "everos", "full_fetched_at": "2026-10-12T04:02:33Z", "source_note": "", "github_homepage": "https://evermind.ai/everos", "homepage_icon": "/site-icons/ce61b0853ac7256b.png", "homepage_icon_for": "https://evermind.ai/everos", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: use-cases/claude-code-plugin/mcp/server.js" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in use-cases/claude-code-plugin/package.json", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: use-cases/claude-code-plugin/README.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'everos' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "everos", "version": "1.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:33Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 87.2, "trust_score_v2": 87.2, "rank_v2": 58, "rank_v2_delta": 5, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.6, "identity": 18.0, "transparency": 14.4, "maintenance": 17.4, "adoption": 14.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cc Safety Net", "repo": "kenryu42/cc-safety-net", "display_repo": "", "url": "https://github.com/kenryu42/cc-safety-net", "listing_class": "skill", "rank": 6, "previous_rank": 6, "rank_delta": 0, "stars": 1603, "stars_fmt": "1.6k", "forks": 84, "forks_fmt": "84", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 403, "commits_low_confidence": false, "score": 78.2, "description": "A pre-execution guard for AI coding agents. It blocks destructive Git and file system commands, plus common attempts to access sensitive files, before a tool call runs. Supports Amp Code, Antigravity CLI, Claude Code, Codex, Cursor, DeepSeek Harness, Devin CLI, GitHub Copilot CLI, Grok Build…", "language": "TypeScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 6, "npm_package": "cc-safety-net", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 18488, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.88, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T13:41:43Z", "slug": "cc-safety-net", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "https://ccsafetynet.com", "homepage_icon": "/site-icons/8a9cfe713b6f7636.png", "homepage_icon_for": "https://ccsafetynet.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .amp/plugins/github-issues.ts" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'cc-safety-net' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "cc-safety-net", "version": "2.6.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:38Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 87.2, "trust_score_v2": 87.2, "rank_v2": 6, "rank_v2_delta": 66, "trust_v2_adjustment": 2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.6, "maintenance": 20.0, "adoption": 13.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Skyvern", "repo": "Skyvern-AI/skyvern", "display_repo": "", "url": "https://github.com/Skyvern-AI/skyvern", "listing_class": "agent", "rank": 59, "previous_rank": 59, "rank_delta": 0, "stars": 23185, "stars_fmt": "23.2k", "forks": 2192, "forks_fmt": "2.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 284, "commits_low_confidence": false, "score": 91.7, "description": "Automate browser based workflows with AI", "language": "Python", "open_issues": 46, "category": "Browser & Computer Use", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "skyvern", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1608, "dl_source": "pypi", "hn_mentions_30d": 3, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-09-26T15:15:01Z", "slug": "skyvern", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://www.skyvern.com", "homepage_icon": "/site-icons/ef7ef90c27b11b35.png", "homepage_icon_for": "https://www.skyvern.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-cloud-aiplatform' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'skyvern' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "skyvern", "version": "1.0.55" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:30Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 87.1, "trust_score_v2": 87.1, "rank_v2": 59, "rank_v2_delta": -37, "trust_v2_adjustment": -2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.7, "identity": 18.0, "transparency": 14.8, "maintenance": 20.0, "adoption": 14.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Unstructured", "repo": "Unstructured-IO/unstructured", "display_repo": "", "url": "https://github.com/Unstructured-IO/unstructured", "listing_class": "agent", "rank": 60, "previous_rank": 58, "rank_delta": -2, "stars": 15559, "stars_fmt": "15.6k", "forks": 1350, "forks_fmt": "1.4k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 23, "commits_low_confidence": false, "score": 81.7, "description": "Convert documents to structured data effortlessly. Unstructured is open-source ETL solution for transforming complex documents into clean, structured formats for language models. Visit our website to learn more about our enterprise grade Platform product for production grade workflows…", "language": "HTML", "open_issues": 191, "category": "Research & Data", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "unstructured", "docker_image": "", "vscode_extension": "", "weekly_downloads": 679027, "dl_source": "pypi", "hn_mentions_30d": 3, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T18:06:20Z", "slug": "unstructured", "full_fetched_at": "2026-10-12T08:02:44Z", "source_note": "", "github_homepage": "https://www.unstructured.io/", "homepage_icon": "/site-icons/a3bcc4df9eeb9ade.png", "homepage_icon_for": "https://www.unstructured.io/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Google Gemini", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Weaviate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Google Gemini dependency 'vertexai' in pyproject.toml", "Found Amazon Bedrock dependency 'bedrock' in pyproject.toml", "Found Pinecone dependency 'pinecone' in pyproject.toml", "Found Qdrant dependency 'qdrant' in pyproject.toml", "Found Weaviate dependency 'weaviate' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'postgres' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'unstructured' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "unstructured", "version": "0.27.25" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:44Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 87.1, "trust_score_v2": 87.1, "rank_v2": 60, "rank_v2_delta": -25, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.7, "identity": 18.0, "transparency": 14.1, "maintenance": 17.4, "adoption": 17.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Graphiti", "repo": "getzep/graphiti", "display_repo": "", "url": "https://github.com/getzep/graphiti", "listing_class": "agent", "rank": 61, "previous_rank": 60, "rank_delta": -1, "stars": 31674, "stars_fmt": "31.7k", "forks": 3257, "forks_fmt": "3.3k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 32, "commits_low_confidence": false, "score": 87.2, "description": "Build Real-Time Knowledge Graphs for AI Agents", "language": "Python", "open_issues": 219, "category": "Memory & Knowledge", "category_rank": 4, "npm_package": "", "crate_package": "", "pypi_package": "graphiti-core", "docker_image": "", "vscode_extension": "", "weekly_downloads": 168384, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.95, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T16:41:21Z", "slug": "graphiti", "full_fetched_at": "2026-10-12T04:02:40Z", "source_note": "", "github_homepage": "https://help.getzep.com/graphiti", "homepage_icon": "/site-icons/e216a8e7575c7aee.png", "homepage_icon_for": "https://help.getzep.com/graphiti", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/mcp-server-tests.yml", "Found MCP-related server path: .github/workflows/release-mcp-server.yml", "Found MCP-related server docs path: mcp_server/docs/cursor_rules.md" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Groq", "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'graphiti-core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "graphiti-core", "version": "0.30.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:40Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 87.0, "trust_score_v2": 87.0, "rank_v2": 61, "rank_v2_delta": -22, "trust_v2_adjustment": 0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.6, "identity": 18.0, "transparency": 13.5, "maintenance": 18.0, "adoption": 17.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Easyeda MCP Pro", "repo": "oaslananka/easyeda-mcp-pro", "display_repo": "", "url": "https://github.com/oaslananka/easyeda-mcp-pro", "listing_class": "agent", "rank": 62, "previous_rank": 64, "rank_delta": 2, "stars": 57, "stars_fmt": "57", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 49, "commits_low_confidence": false, "score": 61.6, "description": "Production-grade MCP server for EasyEDA Pro, connecting AI agents to schematic and PCB workflows, controlled design operations, DRC, BOM sourcing, board analysis, and manufacturing export—with profile-gated tools and safety controls.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 18, "npm_package": "easyeda-mcp-pro", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 327, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 8.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 6, "CII-Best-Practices": 7, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:14:51Z", "slug": "easyeda-mcp-pro", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://oaslananka.github.io/easyeda-mcp-pro", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'AI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'easyeda-mcp-pro' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "easyeda-mcp-pro", "version": "1.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 86.9, "trust_score_v2": 86.9, "rank_v2": 62, "rank_v2_delta": 25, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 23.1, "identity": 18.0, "transparency": 15.7, "maintenance": 18.8, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Hangar", "repo": "mcp-hangar/mcp-hangar", "display_repo": "", "url": "https://github.com/mcp-hangar/mcp-hangar", "listing_class": "agent", "rank": 63, "previous_rank": 65, "rank_delta": 2, "stars": 18, "stars_fmt": "18", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 183, "commits_low_confidence": false, "score": 62.5, "description": "MCP policy enforcement plane — deterministic policy on every Model Context Protocol call: identity, RFC 8707 audience binding, tool schema digest pinning, full audit trail. Python, self-hosted, MIT.", "language": "Python", "open_issues": 83, "category": "MCP Servers", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "mcp-hangar", "docker_image": "", "vscode_extension": "", "weekly_downloads": 593, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.9, "scorecard_checks": { "Dependency-Update-Tool": 10, "Maintained": 10, "Dangerous-Workflow": 10, "Security-Policy": 10, "Code-Review": 0, "Token-Permissions": 10, "Binary-Artifacts": 10, "Pinned-Dependencies": 5, "License": 10, "CII-Best-Practices": 5, "Signed-Releases": 10, "SAST": 10, "Branch-Protection": 4, "Vulnerabilities": 4, "Packaging": 10, "Fuzzing": 10, "Contributors": 3, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-11T20:03:59Z", "slug": "mcp-hangar", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "https://mcp-hangar.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: security/seccomp/mcp-server-default.json", "Found MCP-related server path: src/mcp_hangar/application/read_models/mcp_server_views.py" ] }, "external_service_dependencies": { "providers": [ "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in pyproject.toml", "Found Redis dependency 'redis' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-hangar' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-hangar", "version": "2.25.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:55Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.9, "trust_score_v2": 86.9, "rank_v2": 63, "rank_v2_delta": 29, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.4, "identity": 18.0, "transparency": 15.2, "maintenance": 20.0, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Hevy MCP Server", "repo": "chrisdoc/hevy-mcp", "display_repo": "", "url": "https://github.com/chrisdoc/hevy-mcp", "listing_class": "agent", "rank": 64, "previous_rank": 62, "rank_delta": -2, "stars": 510, "stars_fmt": "510", "forks": 94, "forks_fmt": "94", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 77, "commits_low_confidence": false, "score": 74.0, "description": "Manage your Hevy workouts, routines, folders, and exercise templates. Create and update sessions faster, organize plans, and search exercises to build workouts quickly. Stay synced with changes so your training log is always up to date.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 20, "npm_package": "hevy-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7290, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.92, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 8, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T19:17:46Z", "slug": "hevy-mcp-server", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "https://hevy-mcp.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .agents/skills/build-mcp-server/SKILL.md", "Found MCP-related server path: .agents/skills/build-mcp-server/references/auth.md", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'HEVY_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'hevy-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "hevy-mcp", "version": "6.1.22" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:57Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.9, "trust_score_v2": 86.9, "rank_v2": 64, "rank_v2_delta": 22, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.1, "identity": 18.0, "transparency": 13.9, "maintenance": 19.5, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Botpress", "repo": "botpress/botpress", "display_repo": "", "url": "https://github.com/botpress/botpress", "listing_class": "agent", "rank": 65, "previous_rank": 71, "rank_delta": 6, "stars": 14946, "stars_fmt": "14.9k", "forks": 2292, "forks_fmt": "2.3k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 27, "commits_low_confidence": false, "score": 83.4, "description": "The open-source hub to build & deploy GPT/LLM Agents ⚡️", "language": "TypeScript", "open_issues": 12, "category": "Workflow Platforms", "category_rank": 2, "npm_package": "@botpress/client", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 16417, "dl_source": "npm", "hn_mentions_30d": 2, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:08:54Z", "slug": "botpress", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://botpress.com", "homepage_icon": "/site-icons/85923f0b8cd00d6e.png", "homepage_icon_for": "https://botpress.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SINLIN_LINEAR_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .github/actions/deploy-plugins/action.yml", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@botpress/client' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@botpress/client", "version": "2.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:24Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.9, "trust_score_v2": 86.9, "rank_v2": 65, "rank_v2_delta": -4, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.2, "identity": 18.0, "transparency": 13.8, "maintenance": 17.6, "adoption": 15.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FastMCP (TypeScript)", "repo": "punkpeye/fastmcp", "display_repo": "", "url": "https://github.com/punkpeye/fastmcp", "listing_class": "agent", "rank": 66, "previous_rank": 61, "rank_delta": -5, "stars": 3273, "stars_fmt": "3.3k", "forks": 323, "forks_fmt": "323", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 45, "commits_low_confidence": false, "score": 77.4, "description": "A TypeScript framework for building MCP servers.", "language": "TypeScript", "open_issues": 3, "category": "Protocols & Tool Integration", "category_rank": 5, "npm_package": "fastmcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 701202, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.79, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:04:05Z", "slug": "fastmcp-typescript", "full_fetched_at": "2026-10-12T08:02:18Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .roo/mcp.json", "Found MCP-related server path: src/FastMCP.ts", "Found MCP-related server test path: src/FastMCP.batch-methods.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found shell dependency 'execa' in package.json", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'fastmcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "fastmcp", "version": "4.22.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:18Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.9, "trust_score_v2": 86.9, "rank_v2": 66, "rank_v2_delta": 30, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.1, "identity": 18.0, "transparency": 12.3, "maintenance": 18.1, "adoption": 16.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Trigger.dev", "repo": "triggerdotdev/trigger.dev", "display_repo": "", "url": "https://github.com/triggerdotdev/trigger.dev", "listing_class": "agent", "rank": 67, "previous_rank": 67, "rank_delta": 0, "stars": 16525, "stars_fmt": "16.5k", "forks": 1493, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 250, "commits_low_confidence": false, "score": 90.1, "description": "Trigger.dev – build and deploy durable AI agents and workflows", "language": "TypeScript", "open_issues": 175, "category": "Workflow Platforms", "category_rank": 3, "npm_package": "@trigger.dev/sdk", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1169583, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:31:46Z", "slug": "trigger-dev", "full_fetched_at": "2026-10-12T12:02:28Z", "source_note": "", "github_homepage": "https://trigger.dev/changelog", "homepage_icon": "/site-icons/c62ee66428efdcf6.png", "homepage_icon_for": "https://trigger.dev/changelog", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: packages/cli-v3/src/mcp/tools/devServer.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/webapp/package.json", "Found Anthropic dependency 'anthropic' in package.json", "Found Postgres dependency 'pg' in apps/webapp/package.json", "Found Redis dependency 'redis' in apps/webapp/package.json" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: docs/config/extensions/additionalFiles.mdx", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'pg' in apps/webapp/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@trigger.dev/sdk' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@trigger.dev/sdk", "version": "4.7.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:28Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.8, "trust_score_v2": 86.8, "rank_v2": 67, "rank_v2_delta": 3, "trust_v2_adjustment": 2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.9, "identity": 18.0, "transparency": 13.4, "maintenance": 20.0, "adoption": 18.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SageMath MCP", "repo": "XBP-Europe/sagemath-mcp", "display_repo": "", "url": "https://github.com/XBP-Europe/sagemath-mcp", "listing_class": "agent", "rank": 68, "previous_rank": 56, "rank_delta": -12, "stars": 18, "stars_fmt": "18", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 129, "commits_low_confidence": false, "score": 59.1, "description": "Stateful SageMath MCP server: 40 tools for symbolic math, algebra, number theory, graphs, plotting and claim verification. A persistent Sage session per client, an AST policy in front of it, and a hardened container as the real boundary.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "sagemath-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 361, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 2, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:52:46Z", "slug": "sagemath-mcp", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/fastmcp4_session_regression.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (packaging/claude-plugin/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'sagemath-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sagemath-mcp", "version": "0.9.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:00Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.7, "trust_score_v2": 86.7, "rank_v2": 68, "rank_v2_delta": 27, "trust_v2_adjustment": 4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.4, "identity": 18.0, "transparency": 15.2, "maintenance": 20.0, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MisakaNet", "repo": "Ikalus1988/MisakaNet", "display_repo": "", "url": "https://github.com/Ikalus1988/MisakaNet", "listing_class": "skill", "rank": 7, "previous_rank": 7, "rank_delta": 0, "stars": 526, "stars_fmt": "526", "forks": 218, "forks_fmt": "218", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1362, "commits_low_confidence": false, "score": 77.2, "description": "📚 A zero-dependency, git-backed micro-lesson library for AI Agents to asynchronously share and search verified debugging experience. | https://misakanet.org", "language": "Python", "open_issues": 213, "category": "Agent Skills", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "misakanet", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1150, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 9, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T22:32:21Z", "slug": "misakanet", "full_fetched_at": "2026-10-11T20:01:50Z", "source_note": "", "github_homepage": "https://misakanet.org", "homepage_icon": "/site-icons/37180c01396b583e.png", "homepage_icon_for": "https://misakanet.org", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: lessons/contrib/feishu-mcp-server-deepseek-tui-setup.md", "Found MCP-related server path: lessons/contrib/ghidra-mcp-server-reverse-engineering.md", "Found MCP-related server docs path: docs/.well-known/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in package.json", "README/docs also mention DeepSeek", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found shell dependency 'subprocess' in scripts/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'misakanet' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "misakanet", "version": "2.42.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:50Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.7, "trust_score_v2": 86.7, "rank_v2": 7, "rank_v2_delta": 83, "trust_v2_adjustment": 4.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.2, "identity": 18.0, "transparency": 13.8, "maintenance": 20.0, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Apps", "repo": "modelcontextprotocol/ext-apps", "display_repo": "", "url": "https://github.com/modelcontextprotocol/ext-apps", "listing_class": "agent", "rank": 69, "previous_rank": 66, "rank_delta": -3, "stars": 2943, "stars_fmt": "2.9k", "forks": 402, "forks_fmt": "402", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 8, "commits_low_confidence": false, "score": 67.4, "description": "Official repo for spec & SDK of MCP Apps protocol - standard for UIs embedded AI chatbots, served by MCP servers", "language": "TypeScript", "open_issues": 130, "category": "Protocols & Tool Integration", "category_rank": 6, "npm_package": "@modelcontextprotocol/ext-apps", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4861253, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.68, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:21:05Z", "slug": "mcp-apps", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "https://apps.extensions.modelcontextprotocol.io/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency 'modelcontextprotocol' in examples/qr-server/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/mcp-apps/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@modelcontextprotocol/ext-apps' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@modelcontextprotocol/ext-apps", "version": "2.0.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:19Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 86.7, "trust_score_v2": 86.7, "rank_v2": 69, "rank_v2_delta": 31, "trust_v2_adjustment": 5.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.1, "identity": 18.0, "transparency": 13.4, "maintenance": 14.7, "adoption": 17.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LanceDB", "repo": "lancedb/lancedb", "display_repo": "", "url": "https://github.com/lancedb/lancedb", "listing_class": "agent", "rank": 70, "previous_rank": 68, "rank_delta": -2, "stars": 11651, "stars_fmt": "11.7k", "forks": 1102, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 175, "commits_low_confidence": false, "score": 88.5, "description": "Developer-friendly OSS embedded retrieval library for multimodal AI. Search More; Manage Less.", "language": "Rust", "open_issues": 510, "category": "Memory & Knowledge", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "lancedb", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1786723, "dl_source": "pypi", "hn_mentions_30d": 13, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.9, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:15:31Z", "slug": "lancedb", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "https://lancedb.com/docs", "homepage_icon": "/site-icons/d19a59f249965f8f.png", "homepage_icon_for": "https://lancedb.com/docs", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Cohere", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in nodejs/package.json", "Found Google Gemini dependency 'google-genai' in python/pyproject.toml", "Found Cohere dependency 'cohere' in python/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in python/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'lancedb' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "lancedb", "version": "0.40.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:51Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.7, "trust_score_v2": 86.7, "rank_v2": 70, "rank_v2_delta": -44, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 13.3, "maintenance": 20.0, "adoption": 18.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Microsoft 365 MCP Server", "repo": "Softeria/ms-365-mcp-server", "display_repo": "", "url": "https://github.com/Softeria/ms-365-mcp-server", "listing_class": "agent", "rank": 71, "previous_rank": 69, "rank_delta": -2, "stars": 1031, "stars_fmt": "1.0k", "forks": 389, "forks_fmt": "389", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 32, "commits_low_confidence": false, "score": 74.0, "description": "A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Microsoft Office services through the Graph API", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 22, "npm_package": "@softeria/ms-365-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 47055, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:47:06Z", "slug": "microsoft-365-mcp-server", "full_fetched_at": "2026-10-12T00:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@softeria/ms-365-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@softeria/ms-365-mcp-server", "version": "0.162.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:13Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.6, "trust_score_v2": 86.6, "rank_v2": 71, "rank_v2_delta": 22, "trust_v2_adjustment": 4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.5, "identity": 18.0, "transparency": 13.3, "maintenance": 18.0, "adoption": 13.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenLLMetry", "repo": "traceloop/openllmetry", "display_repo": "", "url": "https://github.com/traceloop/openllmetry", "listing_class": "agent", "rank": 72, "previous_rank": 70, "rank_delta": -2, "stars": 7484, "stars_fmt": "7.5k", "forks": 1149, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 17, "commits_low_confidence": false, "score": 78.1, "description": "Open-source observability for your GenAI or LLM application, based on OpenTelemetry", "language": "Python", "open_issues": 153, "category": "Observability & Evaluation", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "traceloop-sdk", "docker_image": "", "vscode_extension": "", "weekly_downloads": 447146, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.82, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:47:20Z", "slug": "openllmetry", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "https://www.traceloop.com/openllmetry", "homepage_icon": "/site-icons/457a172ad1da087f.png", "homepage_icon_for": "https://www.traceloop.com/openllmetry", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/opentelemetry-instrumentation-mcp/opentelemetry/instrumentation/mcp/fastmcp_instrumentation.py", "Found MCP-related server test path: packages/opentelemetry-instrumentation-mcp/tests/test_fastmcp.py", "Found MCP-related server test path: packages/opentelemetry-instrumentation-mcp/tests/test_fastmcp_attributes.py", "Found MCP dependency 'fastmcp' in packages/sample-app/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "Pinecone", "Replicate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/sample-app/pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/sample-app/pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-generativeai' in packages/sample-app/pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pinecone' in packages/sample-app/pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'traceloop-sdk' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "traceloop-sdk", "version": "0.62.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:39Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.5, "trust_score_v2": 86.5, "rank_v2": 72, "rank_v2_delta": -14, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.7, "identity": 18.0, "transparency": 14.0, "maintenance": 17.0, "adoption": 16.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Vespa", "repo": "vespa-engine/vespa", "display_repo": "", "url": "https://github.com/vespa-engine/vespa", "listing_class": "agent", "rank": 73, "previous_rank": 86, "rank_delta": 13, "stars": 7126, "stars_fmt": "7.1k", "forks": 746, "forks_fmt": "746", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 701, "commits_low_confidence": false, "score": 86.5, "description": "The AI search platform", "language": "Java", "open_issues": 225, "category": "Memory & Knowledge", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "pyvespa", "docker_image": "", "vscode_extension": "", "weekly_downloads": 152668, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.8, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-11T20:55:08Z", "slug": "vespa", "full_fetched_at": "2026-10-12T12:02:26Z", "source_note": "", "github_homepage": "https://vespa.ai", "homepage_icon": "/site-icons/98b3b91dc54b7cf8.png", "homepage_icon_for": "https://vespa.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: abi-check-plugin/README.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'pyvespa' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.5, "trust_score_v2": 86.5, "rank_v2": 73, "rank_v2_delta": -32, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.0, "identity": 18.0, "transparency": 13.6, "maintenance": 20.0, "adoption": 16.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Canvas MCP", "repo": "vishalsachdev/canvas-mcp", "display_repo": "", "url": "https://github.com/vishalsachdev/canvas-mcp", "listing_class": "agent", "rank": 74, "previous_rank": 74, "rank_delta": 0, "stars": 290, "stars_fmt": "290", "forks": 96, "forks_fmt": "96", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 289, "commits_low_confidence": false, "score": 74.0, "description": "Canvas LMS MCP server — up to 102 tools and 8 agent skills for students & educators. Works with Claude, Cursor, Codex, and 40+ agents.", "language": "Python", "open_issues": 10, "category": "MCP Servers", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "canvas-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 467, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.37, "scorecard_score": 7.8, "scorecard_checks": { "Dependency-Update-Tool": 10, "Maintained": 10, "Security-Policy": 10, "Code-Review": 0, "Dangerous-Workflow": 10, "Token-Permissions": 10, "Binary-Artifacts": 10, "Pinned-Dependencies": 4, "CII-Best-Practices": 0, "Signed-Releases": 10, "Vulnerabilities": 10, "Packaging": 10, "Fuzzing": 0, "SAST": 10, "License": 10, "Branch-Protection": 5, "CI-Tests": 10, "Contributors": 6 }, "scorecard_scanned_at": "2026-10-12T00:06:16Z", "slug": "canvas-mcp", "full_fetched_at": "2026-10-12T00:02:36Z", "source_note": "", "github_homepage": "http://canvas-mcp.illinihunt.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/test_fastmcp_compat.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CANVAS_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'canvas-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "canvas-mcp", "version": "1.14.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:36Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.2, "trust_score_v2": 86.2, "rank_v2": 74, "rank_v2_delta": 23, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 15.1, "maintenance": 20.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CodeWhale", "repo": "Hmbown/CodeWhale", "display_repo": "", "url": "https://github.com/codewhale-hq/Codewhale", "listing_class": "agent", "rank": 75, "previous_rank": 111, "rank_delta": 36, "stars": 41074, "stars_fmt": "41.1k", "forks": 3566, "forks_fmt": "3.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 3235, "commits_low_confidence": false, "score": 94.2, "description": "Open-source Rust agent engine and terminal client for Codewhale, with provider choice, tools, approvals and receipts.", "language": "Rust", "open_issues": 200, "category": "Coding Agents", "category_rank": 6, "npm_package": "codewhale", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6510, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.7, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-10T23:14:03Z", "slug": "codewhale", "full_fetched_at": "2026-10-12T08:02:05Z", "source_note": "", "github_homepage": "https://codewhale.net/", "homepage_icon": "/site-icons/ed9152d9977233fc.png", "homepage_icon_for": "https://codewhale.net/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: crates/tui/plugins/computer-use/mcp.json", "Found MCP-related server path: crates/tui/plugins/computer-use/mcp/server.mjs", "Found MCP-related server test path: crates/cli/tests/mcp_server_proxy.rs", "Found MCP-related server test path: crates/tui/tests/fixtures/conformance/mcp/deny_server_wildcard.case.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: crates/tui/assets/plugins/rust-toolkit/plugin.toml", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'codewhale' points to codewhale-hq/codewhale, the tracked repo's current name after a rename/transfer (not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "codewhale", "version": "0.10.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:05Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.2, "trust_score_v2": 86.2, "rank_v2": 75, "rank_v2_delta": -31, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.6, "identity": 18.0, "transparency": 13.7, "maintenance": 20.0, "adoption": 16.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "UI5 MCP Server", "repo": "UI5/mcp-server", "display_repo": "", "url": "https://github.com/UI5/mcp-server", "listing_class": "agent", "rank": 76, "previous_rank": 72, "rank_delta": -4, "stars": 101, "stars_fmt": "101", "forks": 22, "forks_fmt": "22", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 25, "commits_low_confidence": false, "score": 60.6, "description": "The UI5 MCP server improves the developer experience when working with agentic AI and the UI5 framework.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 24, "npm_package": "@ui5/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 104405, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.23, "scorecard_score": 7.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:44:52Z", "slug": "ui5-mcp-server", "full_fetched_at": "2026-10-12T00:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "shell" ], "confidence": "medium", "evidence": [ "Found shell dependency 'execa' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@ui5/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@ui5/mcp-server", "version": "0.3.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:31Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.1, "trust_score_v2": 86.1, "rank_v2": 76, "rank_v2_delta": 31, "trust_v2_adjustment": 5.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.5, "identity": 18.0, "transparency": 15.2, "maintenance": 17.4, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qwen Audio Agent", "repo": "QwenAudio/qwen-audio-agent", "display_repo": "", "url": "https://github.com/QwenAudio/qwen-audio-agent", "listing_class": "agent", "rank": 77, "previous_rank": 73, "rank_delta": -4, "stars": 2904, "stars_fmt": "2.9k", "forks": 291, "forks_fmt": "291", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 91, "commits_low_confidence": false, "score": 81.8, "description": "A realtime voice runtime that keeps Agents talking, working, and present. Real-time Voice Runtime for AI Agents", "language": "JavaScript", "open_issues": 5, "category": "Voice & Conversational", "category_rank": 2, "npm_package": "qwen-audio-agent", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 265, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T06:39:24Z", "slug": "qwen-audio-agent", "full_fetched_at": "2026-10-12T00:02:01Z", "source_note": "", "github_homepage": "https://qwenaudio.github.io/qwen-audio-agent/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/customer-service/service/mcp-server.mjs", "Found MCP-related server path: examples/smart-cockpit/service/mcp-server.mjs", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DASHSCOPE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'qwen-audio-agent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "qwen-audio-agent", "version": "2.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:01Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.1, "trust_score_v2": 86.1, "rank_v2": 77, "rank_v2_delta": 21, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 13.2, "maintenance": 19.8, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CloakBrowser MCP", "repo": "swimmwatch/cloakbrowser-mcp", "display_repo": "", "url": "https://github.com/swimmwatch/cloakbrowser-mcp", "listing_class": "agent", "rank": 78, "previous_rank": 76, "rank_delta": -2, "stars": 165, "stars_fmt": "165", "forks": 19, "forks_fmt": "19", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 58, "commits_low_confidence": false, "score": 66.4, "description": "⚡ CloakBrowser MCP server for AI agents: Playwright-powered browsing, clean tool forwarding, Docker support, and multi-session HTTP transport.", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 25, "npm_package": "cloakbrowser-mcp", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/swimmwatch/cloakbrowser-mcp:1.10.0", "vscode_extension": "", "weekly_downloads": 918, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 7.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:53:52Z", "slug": "cloakbrowser-mcp", "full_fetched_at": "2026-10-12T00:02:22Z", "source_note": "", "github_homepage": "https://swimmwatch.github.io/cloakbrowser-mcp/", "homepage_icon": "/site-icons/a60699db5426d383.png", "homepage_icon_for": "https://swimmwatch.github.io/cloakbrowser-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: scripts/lib/schemas/mcp-server-2025-12-11.schema.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'cloakbrowser-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "cloakbrowser-mcp", "version": "1.14.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:22Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.0, "trust_score_v2": 86.0, "rank_v2": 78, "rank_v2_delta": 32, "trust_v2_adjustment": 5.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.0, "identity": 18.0, "transparency": 15.0, "maintenance": 19.1, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DaVinci Resolve MCP", "repo": "samuelgursky/davinci-resolve-mcp", "display_repo": "", "url": "https://github.com/samuelgursky/davinci-resolve-mcp", "listing_class": "agent", "rank": 79, "previous_rank": 77, "rank_delta": -2, "stars": 3489, "stars_fmt": "3.5k", "forks": 403, "forks_fmt": "403", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 196, "commits_low_confidence": false, "score": 83.4, "description": "MCP server integration for DaVinci Resolve Studio", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 26, "npm_package": "davinci-resolve-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5479, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T17:13:01Z", "slug": "davinci-resolve-mcp", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/resolve_mcp_server.py", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Postgres dependency 'pg' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'davinci-resolve-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "davinci-resolve-mcp", "version": "4.10.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:07Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 86.0, "trust_score_v2": 86.0, "rank_v2": 79, "rank_v2_delta": 30, "trust_v2_adjustment": 5.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.2, "identity": 18.0, "transparency": 13.8, "maintenance": 20.0, "adoption": 13.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mem0", "repo": "mem0ai/mem0", "display_repo": "", "url": "https://github.com/mem0ai/mem0", "listing_class": "agent", "rank": 80, "previous_rank": 75, "rank_delta": -5, "stars": 67039, "stars_fmt": "67.0k", "forks": 7882, "forks_fmt": "7.9k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 45, "commits_low_confidence": false, "score": 92.4, "description": "The Memory Layer for AI Agents - Drop-in memory infrastructure for AI agents and apps. Context that persists. Built for production.", "language": "Python", "open_issues": 383, "category": "Memory & Knowledge", "category_rank": 7, "npm_package": "mem0ai", "crate_package": "", "pypi_package": "mem0ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 644576, "dl_source": "npm+pypi", "hn_mentions_30d": 479, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:35:10Z", "slug": "mem0", "full_fetched_at": "2026-10-12T08:02:03Z", "source_note": "", "github_homepage": "https://mem0.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: integrations/agent-plugin-core/python/mcp_server.py", "Found MCP-related server path: integrations/antigravity-plugin/core/mcp_server.py", "Found MCP dependency '@modelcontextprotocol/sdk' in mem0-ts/package.json" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Google Gemini", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Redis", "Supabase", "Weaviate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in mem0-ts/package.json", "Found Google Gemini dependency 'google-generativeai' in pyproject.toml", "Found Mistral AI dependency 'mistralai' in mem0-ts/package.json", "Found Cohere dependency 'cohere-ai' in mem0-ts/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'mem0ai' points to the tracked repo", "pypi package 'mem0ai' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mem0ai", "version": "3.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:03Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 86.0, "trust_score_v2": 86.0, "rank_v2": 80, "rank_v2_delta": -53, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.2, "maintenance": 18.4, "adoption": 19.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Hindsight", "repo": "vectorize-io/hindsight", "display_repo": "", "url": "https://github.com/vectorize-io/hindsight", "listing_class": "agent", "rank": 81, "previous_rank": 78, "rank_delta": -3, "stars": 48739, "stars_fmt": "48.7k", "forks": 6012, "forks_fmt": "6.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 644, "commits_low_confidence": false, "score": 95.7, "description": "Hindsight: Agent Memory That Learns", "language": "Python", "open_issues": 138, "category": "Memory & Knowledge", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "hindsight-api-slim", "docker_image": "", "vscode_extension": "", "weekly_downloads": 21811, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.99, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:13:52Z", "slug": "hindsight", "full_fetched_at": "2026-10-12T08:02:38Z", "source_note": "", "github_homepage": "https://hindsight.vectorize.io/", "homepage_icon": "/site-icons/b976149c545030ad.png", "homepage_icon_for": "https://hindsight.vectorize.io/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: hindsight-docs/guides/2026-04-16-guide-run-hindsight-as-a-local-mcp-server.md", "Found MCP-related server path: hindsight-docs/static/img/blog/guide-run-hindsight-as-a-local-mcp-server.png", "Found MCP-related server test path: hindsight-api-slim/tests/test_mcp_server_version.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Ships a Claude Code plugin manifest (hindsight-integrations/claude-code/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'hindsight-api-slim' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 85.9, "trust_score_v2": 85.9, "rank_v2": 81, "rank_v2_delta": -32, "trust_v2_adjustment": -0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.6, "identity": 18.0, "transparency": 12.7, "maintenance": 20.0, "adoption": 17.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cognee", "repo": "topoteretes/cognee", "display_repo": "", "url": "https://github.com/topoteretes/cognee", "listing_class": "agent", "rank": 82, "previous_rank": 79, "rank_delta": -3, "stars": 32094, "stars_fmt": "32.1k", "forks": 3330, "forks_fmt": "3.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 909, "commits_low_confidence": false, "score": 93.4, "description": "Cognee is the open-source AI memory platform for agents. Give your AI agents persistent long-term memory with small models for free", "language": "Python", "open_issues": 409, "category": "Memory & Knowledge", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "cognee", "docker_image": "", "vscode_extension": "", "weekly_downloads": 26032, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.56, "scorecard_score": 6.9, "scorecard_checks": { "Code-Review": 4, "Security-Policy": 9, "Maintained": 10, "Dependency-Update-Tool": 10, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "Token-Permissions": 0, "CII-Best-Practices": 0, "License": 10, "Pinned-Dependencies": 8, "SAST": 7, "Signed-Releases": 10, "Fuzzing": 0, "Packaging": 10, "Branch-Protection": -1, "Vulnerabilities": 0, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T08:06:20Z", "slug": "cognee", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "https://www.cognee.ai", "homepage_icon": "/site-icons/a642e20ea0f6bd86.png", "homepage_icon_for": "https://www.cognee.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: cognee-mcp/tests/test_mcp_server_hardening.py", "Found MCP dependency 'fastmcp' in cognee-mcp/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Mistral AI dependency 'mistralai' in pyproject.toml", "Found Groq dependency 'groq' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "code", "database", "search" ], "confidence": "high", "evidence": [ "Found extension-based path: cognee_db_workers/ladybug_extensions/README.md", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'pg' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cognee' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cognee", "version": "1.6.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:37Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 85.8, "trust_score_v2": 85.8, "rank_v2": 82, "rank_v2_delta": -49, "trust_v2_adjustment": -2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 14.4, "maintenance": 20.0, "adoption": 16.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -1.8, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Browserstack MCP Server", "repo": "browserstack/mcp-server", "display_repo": "", "url": "https://github.com/browserstack/mcp-server", "listing_class": "agent", "rank": 83, "previous_rank": 80, "rank_delta": -3, "stars": 154, "stars_fmt": "154", "forks": 56, "forks_fmt": "56", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 207, "commits_low_confidence": false, "score": 71.3, "description": "BrowserStack's Official MCP Server", "language": "TypeScript", "open_issues": 18, "category": "MCP Servers", "category_rank": 27, "npm_package": "@browserstack/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 23704, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 8, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:41:43Z", "slug": "browserstack-mcp-server", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/add_mcp_server.png", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@browserstack/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@browserstack/mcp-server", "version": "2.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:46Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 85.8, "trust_score_v2": 85.8, "rank_v2": 83, "rank_v2_delta": 33, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.7, "identity": 18.0, "transparency": 14.0, "maintenance": 20.0, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AIPass", "repo": "AIOSAI/AIPass", "display_repo": "", "url": "https://github.com/AIOSAI/AIPass", "listing_class": "agent", "rank": 84, "previous_rank": 84, "rank_delta": 0, "stars": 288, "stars_fmt": "288", "forks": 43, "forks_fmt": "43", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 687, "commits_low_confidence": false, "score": 72.4, "description": "Persistent Agent Workspace — AI agents that remember, collaborate, and never start from zero.", "language": "Python", "open_issues": 1, "category": "Multi-Agent Systems", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "aipass", "docker_image": "", "vscode_extension": "", "weekly_downloads": 241, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.3, "scorecard_checks": { "Maintained": 10, "Code-Review": 0, "Dangerous-Workflow": 10, "Security-Policy": 10, "Token-Permissions": 10, "Dependency-Update-Tool": 10, "CII-Best-Practices": 5, "Binary-Artifacts": 10, "Pinned-Dependencies": 6, "SAST": 10, "Signed-Releases": 6, "Packaging": 10, "License": 10, "Branch-Protection": 3, "Fuzzing": 0, "Vulnerabilities": 8, "Contributors": 0, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:15Z", "slug": "aipass", "full_fetched_at": "2026-10-12T04:02:15Z", "source_note": "", "github_homepage": "https://aipass.ai", "homepage_icon": "/site-icons/1236bbeffe674adf.png", "homepage_icon_for": "https://aipass.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Ships Claude Code wiring ('.claude/hooks') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: src/aipass/ai_mail/apps/extensions/__init__.py", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'aipass' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "aipass", "version": "2.8.12" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:15Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 85.6, "trust_score_v2": 85.6, "rank_v2": 84, "rank_v2_delta": 0, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.6, "identity": 18.0, "transparency": 14.7, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Threadplane", "repo": "cacheplane/threadplane", "display_repo": "", "url": "https://github.com/cacheplane/threadplane", "listing_class": "agent", "rank": 85, "previous_rank": 81, "rank_delta": -4, "stars": 305, "stars_fmt": "305", "forks": 29, "forks_fmt": "29", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 294, "commits_low_confidence": false, "score": 71.8, "description": "The open-source thread-plane for agents: chat, durable threads, persistence, human approvals, and generative UI for Angular, on LangGraph and AG-UI.", "language": "TypeScript", "open_issues": 2, "category": "Agent Frameworks", "category_rank": 10, "npm_package": "@threadplane/chat", "crate_package": "", "pypi_package": "threadplane-middleware", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1469, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:45:43Z", "slug": "threadplane", "full_fetched_at": "2026-10-12T16:02:03Z", "source_note": "", "github_homepage": "https://threadplane.ai", "homepage_icon": "/site-icons/20b2d42240a34624.png", "homepage_icon_for": "https://threadplane.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Redis dependency 'redis' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in package.json" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package '@threadplane/chat' points to the tracked repo", "pypi package 'threadplane-middleware' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@threadplane/chat", "version": "0.3.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:03Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 85.6, "trust_score_v2": 85.6, "rank_v2": 85, "rank_v2_delta": -12, "trust_v2_adjustment": 1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.5, "identity": 18.0, "transparency": 14.6, "maintenance": 20.0, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "mcp-proxy", "repo": "sparfenyuk/mcp-proxy", "display_repo": "", "url": "https://github.com/sparfenyuk/mcp-proxy", "listing_class": "agent", "rank": 86, "previous_rank": 97, "rank_delta": 11, "stars": 2778, "stars_fmt": "2.8k", "forks": 267, "forks_fmt": "267", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 14, "commits_low_confidence": false, "score": 71.6, "description": "A bridge between Streamable HTTP and stdio MCP transports", "language": "Python", "open_issues": 45, "category": "Protocols & Tool Integration", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "mcp-proxy", "docker_image": "", "vscode_extension": "", "weekly_downloads": 200973, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.51, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 5, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:06:39Z", "slug": "mcp-proxy", "full_fetched_at": "2026-10-12T08:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_proxy/mcp_server.py", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'API_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-proxy' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-proxy", "version": "0.13.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:29Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 85.6, "trust_score_v2": 85.6, "rank_v2": 86, "rank_v2_delta": 19, "trust_v2_adjustment": 4.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.4, "identity": 18.0, "transparency": 13.5, "maintenance": 16.6, "adoption": 15.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "BoxLite", "repo": "boxlite-ai/boxlite", "display_repo": "", "url": "https://github.com/boxlite-ai/boxlite", "listing_class": "agent", "rank": 87, "previous_rank": 83, "rank_delta": -4, "stars": 2544, "stars_fmt": "2.5k", "forks": 207, "forks_fmt": "207", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 131, "commits_low_confidence": false, "score": 81.2, "description": "The micro-VM for AI agents — light enough to embed on your laptop, elastic enough to power an agentic cloud.", "language": "TypeScript", "open_issues": 123, "category": "Sandboxes & Runtimes", "category_rank": 1, "npm_package": "@boxlite-ai/boxlite", "crate_package": "", "pypi_package": "boxlite", "docker_image": "", "vscode_extension": "", "weekly_downloads": 22248, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:32:11Z", "slug": "boxlite", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "https://boxlite.ai/", "homepage_icon": "/site-icons/01d3380ac18418b7.png", "homepage_icon_for": "https://boxlite.ai/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Postgres dependency 'pg' in apps/package.json", "Found Redis dependency 'redis' in apps/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in sdks/node/package.json", "Found database dependency 'pg' in apps/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@boxlite-ai/boxlite' points to the tracked repo", "pypi package 'boxlite' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@boxlite-ai/boxlite", "version": "0.10.5" }, { "ecosystem": "PyPI", "name": "boxlite", "version": "0.10.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:35Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 85.6, "trust_score_v2": 85.6, "rank_v2": 87, "rank_v2_delta": -6, "trust_v2_adjustment": 1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 12.8, "maintenance": 20.0, "adoption": 14.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "WrenAI", "repo": "Canner/WrenAI", "display_repo": "", "url": "https://github.com/Canner/WrenAI", "listing_class": "agent", "rank": 88, "previous_rank": 82, "rank_delta": -6, "stars": 17854, "stars_fmt": "17.9k", "forks": 2047, "forks_fmt": "2.0k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 35, "commits_low_confidence": false, "score": 84.9, "description": "GenBI (Generative BI) for AI agents, an open-source, governed text-to-SQL through an open context layer that turns natural-language questions into trusted dashboards, charts, and SQL across 20+ data sources, such as BigQuery, Snowflake, PostgreSQL, ClickHouse, Amazon Redshift, Databricks and more.", "language": "Python", "open_issues": 199, "category": "Research & Data", "category_rank": 4, "npm_package": "@wrenai/wren-core-wasm", "crate_package": "", "pypi_package": "wren-pydantic", "docker_image": "", "vscode_extension": "", "weekly_downloads": 165, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 0.9, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-11T16:47:00Z", "slug": "wrenai", "full_fetched_at": "2026-10-12T04:02:32Z", "source_note": "", "github_homepage": "https://www.getwren.ai/en/open-core", "homepage_icon": "/site-icons/c6545a09beaf75cc.png", "homepage_icon_for": "https://www.getwren.ai/en/open-core", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: core/wren/src/wren/mcp_server.py", "Found MCP-related server test path: core/wren/tests/unit/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in core/wren/pyproject.toml", "Found Postgres dependency 'psycopg' in core/wren/pyproject.toml", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (skills/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: skills/.claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'postgres' in core/wren/pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@wrenai/wren-core-wasm' points to the tracked repo", "pypi package 'wren-pydantic' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@wrenai/wren-core-wasm", "version": "0.4.1" }, { "ecosystem": "PyPI", "name": "wren-pydantic", "version": "0.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:32Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 85.5, "trust_score_v2": 85.5, "rank_v2": 88, "rank_v2_delta": 11, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.0, "identity": 18.0, "transparency": 13.3, "maintenance": 18.0, "adoption": 13.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Markdown Vault MCP", "repo": "pvliesdonk/markdown-vault-mcp", "display_repo": "", "url": "https://github.com/pvliesdonk/markdown-vault-mcp", "listing_class": "agent", "rank": 89, "previous_rank": 89, "rank_delta": 0, "stars": 34, "stars_fmt": "34", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 158, "commits_low_confidence": false, "score": 64.5, "description": "Generic markdown vault MCP with hybrid search", "language": "Python", "open_issues": 142, "category": "MCP Servers", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "markdown-vault-mcp", "docker_image": "ghcr.io/pvliesdonk/markdown-vault-mcp:v3.1.0", "vscode_extension": "", "weekly_downloads": 724, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.98, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:15:24Z", "slug": "markdown-vault-mcp", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://pvliesdonk.github.io/markdown-vault-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/design/reference/fastmcp-4.md", "Found MCP-related server docs path: docs/design/reference/fastmcp-transfer.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Ships a Claude Code plugin manifest (.claude-plugin/plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin/.claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'markdown-vault-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "markdown-vault-mcp", "version": "5.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 85.3, "trust_score_v2": 85.3, "rank_v2": 89, "rank_v2_delta": 25, "trust_v2_adjustment": 5.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.6, "identity": 18.0, "transparency": 14.1, "maintenance": 20.0, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Skill Scanner", "repo": "cisco-ai-defense/skill-scanner", "display_repo": "", "url": "https://github.com/cisco-ai-defense/skill-scanner", "listing_class": "skill", "rank": 8, "previous_rank": 8, "rank_delta": 0, "stars": 2592, "stars_fmt": "2.6k", "forks": 331, "forks_fmt": "331", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 32, "commits_low_confidence": false, "score": 75.7, "description": "Security Scanner for Agent Skills", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "cisco-ai-skill-scanner", "docker_image": "", "vscode_extension": "", "weekly_downloads": 106058, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 6, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:04:29Z", "slug": "skill-scanner", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "https://cisco-ai-defense.github.io/docs/skill-scanner", "homepage_icon": "/site-icons/39bd1412ac368e2a.png", "homepage_icon_for": "https://cisco-ai-defense.github.io/docs/skill-scanner", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-generativeai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cisco-ai-skill-scanner' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cisco-ai-skill-scanner", "version": "2.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:50Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 85.2, "trust_score_v2": 85.2, "rank_v2": 8, "rank_v2_delta": 54, "trust_v2_adjustment": -0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.5, "identity": 18.0, "transparency": 13.9, "maintenance": 17.9, "adoption": 14.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Token Optimizer MCP", "repo": "ooples/token-optimizer-mcp", "display_repo": "", "url": "https://github.com/ooples/token-optimizer-mcp", "listing_class": "agent", "rank": 90, "previous_rank": 87, "rank_delta": -3, "stars": 544, "stars_fmt": "544", "forks": 68, "forks_fmt": "68", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 68, "commits_low_confidence": false, "score": 72.9, "description": "Measure token savings per AI coding agent, optimize context, and share a live local knowledge graph across 16 CLI clients.", "language": "JavaScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 29, "npm_package": "@ooples/token-optimizer-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 776, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T23:01:32Z", "slug": "token-optimizer-mcp", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: integrations/cline/mcp.json", "Found MCP-related server path: integrations/cursor/mcp.json", "Found MCP-related server docs path: docs/MCP_SERVER_VALIDATION.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'ORCAROUTER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@ooples/token-optimizer-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@ooples/token-optimizer-mcp", "version": "7.4.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:08Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 85.1, "trust_score_v2": 85.1, "rank_v2": 90, "rank_v2_delta": 11, "trust_v2_adjustment": 3.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.0, "identity": 18.0, "transparency": 13.6, "maintenance": 19.3, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Containers Kubernetes MCP Server", "repo": "containers/kubernetes-mcp-server", "display_repo": "", "url": "https://github.com/containers/kubernetes-mcp-server", "listing_class": "agent", "rank": 91, "previous_rank": 88, "rank_delta": -3, "stars": 2154, "stars_fmt": "2.2k", "forks": 453, "forks_fmt": "453", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 28, "commits_low_confidence": false, "score": 75.6, "description": "Model Context Protocol (MCP) server for Kubernetes and OpenShift", "language": "Go", "open_issues": 61, "category": "MCP Servers", "category_rank": 30, "npm_package": "kubernetes-mcp-server", "crate_package": "", "pypi_package": "kubernetes-mcp-server", "docker_image": "ghcr.io/containers/kubernetes-mcp-server:v0.0.66", "vscode_extension": "", "weekly_downloads": 3506, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-10T23:21:45Z", "slug": "containers-kubernetes-mcp-server", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: charts/kubernetes-mcp-server/.helmignore", "Found MCP-related server path: charts/kubernetes-mcp-server/Chart.yaml", "Found MCP-related server docs path: docs/images/kubernetes-mcp-server-github-copilot.jpg" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'kubernetes-mcp-server' points to the tracked repo", "pypi package 'kubernetes-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "kubernetes-mcp-server", "version": "0.0.67" }, { "ecosystem": "PyPI", "name": "kubernetes-mcp-server", "version": "0.0.67" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:56Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 85.1, "trust_score_v2": 85.1, "rank_v2": 91, "rank_v2_delta": 33, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.2, "identity": 18.0, "transparency": 12.4, "maintenance": 17.8, "adoption": 12.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LightRAG", "repo": "HKUDS/LightRAG", "display_repo": "", "url": "https://github.com/HKUDS/LightRAG", "listing_class": "agent", "rank": 92, "previous_rank": 91, "rank_delta": -1, "stars": 40088, "stars_fmt": "40.1k", "forks": 5683, "forks_fmt": "5.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 252, "commits_low_confidence": false, "score": 95.1, "description": "[EMNLP2025] LightRAG: Simple and Fast Retrieval-Augmented Generation", "language": "Python", "open_issues": 213, "category": "Memory & Knowledge", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "lightrag-hku", "docker_image": "", "vscode_extension": "", "weekly_downloads": 36549, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.6, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:12:15Z", "slug": "lightrag", "full_fetched_at": "2026-10-12T04:02:42Z", "source_note": "", "github_homepage": "https://arxiv.org/abs/2410.05779", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "https://arxiv.org/abs/2410.05779", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pg' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'lightrag-hku' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "lightrag-hku", "version": "1.5.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:42Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.9, "trust_score_v2": 84.9, "rank_v2": 92, "rank_v2_delta": -39, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.5, "identity": 18.0, "transparency": 13.3, "maintenance": 20.0, "adoption": 17.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pipecat", "repo": "pipecat-ai/pipecat", "display_repo": "", "url": "https://github.com/pipecat-ai/pipecat", "listing_class": "agent", "rank": 93, "previous_rank": 90, "rank_delta": -3, "stars": 16394, "stars_fmt": "16.4k", "forks": 2859, "forks_fmt": "2.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 941, "commits_low_confidence": false, "score": 91.4, "description": "Open Source framework for voice agents, multimodal apps, and realtime AI. Maintained by Daily and the community.", "language": "Python", "open_issues": 116, "category": "Voice & Conversational", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "pipecat-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 288675, "dl_source": "pypi", "hn_mentions_30d": 6, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.16, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-10T01:38:41Z", "slug": "pipecat", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "https://pipecat.ai", "homepage_icon": "/site-icons/3aec886bcbe0aa30.png", "homepage_icon_for": "https://pipecat.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Groq", "Mistral AI", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'pg' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'pipecat-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pipecat-ai", "version": "1.12.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:16Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-2-Clause", "license_type": "open", "license_override": "", "trust_score": 84.8, "trust_score_v2": 84.8, "rank_v2": 93, "rank_v2_delta": -36, "trust_v2_adjustment": -0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.2, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 17.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Firecrawl MCP Server", "repo": "firecrawl/firecrawl-mcp-server", "display_repo": "", "url": "https://github.com/firecrawl/firecrawl-mcp-server", "listing_class": "agent", "rank": 94, "previous_rank": 92, "rank_delta": -2, "stars": 7586, "stars_fmt": "7.6k", "forks": 905, "forks_fmt": "905", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 250, "commits_low_confidence": false, "score": 87.1, "description": "🔥 Official Firecrawl MCP Server - Adds powerful web scraping and search to Cursor, Claude and any other LLM clients.", "language": "JavaScript", "open_issues": 91, "category": "MCP Servers", "category_rank": 31, "npm_package": "firecrawl-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 146686, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.28, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T00:31:38Z", "slug": "firecrawl-mcp-server", "full_fetched_at": "2026-10-12T04:02:37Z", "source_note": "", "github_homepage": "https://firecrawl.dev", "homepage_icon": "/site-icons/e74ccd189416d335.png", "homepage_icon_for": "https://firecrawl.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: patches/fastmcp@4.3.2.patch", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Firecrawl", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Firecrawl dependency 'firecrawl' in package.json", "Found Firecrawl credential/config marker 'FIRECRAWL_API_KEY'", "README/docs also mention Firecrawl", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'firecrawl-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "firecrawl-mcp", "version": "3.29.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:37Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.8, "trust_score_v2": 84.8, "rank_v2": 94, "rank_v2_delta": 14, "trust_v2_adjustment": 4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.2, "identity": 18.0, "transparency": 12.1, "maintenance": 20.0, "adoption": 16.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Finopsmcp", "repo": "getnable/finopsmcp", "display_repo": "", "url": "https://github.com/getnable/finopsmcp", "listing_class": "agent", "rank": 95, "previous_rank": 93, "rank_delta": -2, "stars": 19, "stars_fmt": "19", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 289, "commits_low_confidence": false, "score": 58.1, "description": "The headless FinOps intelligence layer: API-first, agent-first cost control for cloud + AI. Connect your cloud stack in Claude, Cursor, or the terminal, and gate what agents do to your infra before they act. Propose-only. Open source, local-first.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 32, "npm_package": "", "crate_package": "", "pypi_package": "finops-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 255, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.9, "scorecard_checks": { "Dependency-Update-Tool": 10, "Maintained": 10, "Dangerous-Workflow": 10, "Code-Review": 0, "Binary-Artifacts": 10, "Security-Policy": 10, "Token-Permissions": 10, "Pinned-Dependencies": 5, "Vulnerabilities": 10, "License": 10, "CII-Best-Practices": 0, "Signed-Releases": -1, "Packaging": 10, "Fuzzing": 0, "SAST": 10, "Branch-Protection": -1, "Contributors": 3, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T16:04:15Z", "slug": "finopsmcp", "full_fetched_at": "2026-10-12T16:02:08Z", "source_note": "", "github_homepage": "https://getnable.com", "homepage_icon": "/site-icons/eee82f6bfccee476.png", "homepage_icon_for": "https://getnable.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "README/docs also mention Amazon Bedrock", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'finops-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "finops-mcp", "version": "0.8.216" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:08Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 84.6, "trust_score_v2": 84.6, "rank_v2": 95, "rank_v2_delta": 7, "trust_v2_adjustment": 3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.4, "identity": 18.0, "transparency": 15.2, "maintenance": 19.4, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Gongio MCP", "repo": "JustinBeckwith/gongio-mcp", "display_repo": "", "url": "https://github.com/JustinBeckwith/gongio-mcp", "listing_class": "agent", "rank": 96, "previous_rank": 100, "rank_delta": 4, "stars": 21, "stars_fmt": "21", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 11, "commits_low_confidence": false, "score": 51.8, "description": "MCP server for Gong.io - access calls, transcripts, and users", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 33, "npm_package": "gongio-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1324, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:07:13Z", "slug": "gongio-mcp", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'gongio-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "gongio-mcp", "version": "2.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:36Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.6, "trust_score_v2": 84.6, "rank_v2": 96, "rank_v2_delta": 37, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 22.0, "identity": 18.0, "transparency": 15.0, "maintenance": 16.2, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Stripe Agent Toolkit", "repo": "stripe/ai", "display_repo": "", "url": "https://github.com/stripe/ai", "listing_class": "agent", "rank": 97, "previous_rank": 95, "rank_delta": -2, "stars": 1909, "stars_fmt": "1.9k", "forks": 358, "forks_fmt": "358", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 33, "commits_low_confidence": false, "score": 75.7, "description": "One-stop shop for building AI-powered products and businesses with Stripe.", "language": "TypeScript", "open_issues": 32, "category": "MCP Servers", "category_rank": 34, "npm_package": "@stripe/agent-toolkit", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 18421, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.28, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T02:00:29Z", "slug": "stripe-agent-toolkit", "full_fetched_at": "2026-10-12T08:02:41Z", "source_note": "", "github_homepage": "https://docs.stripe.com/agents", "homepage_icon": "/site-icons/00b9a5850cc0038b.png", "homepage_icon_for": "https://docs.stripe.com/agents", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: providers/agent-plugins/plugin/mcp.json", "Found MCP-related server path: providers/cursor/plugin/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in llm/ai-sdk/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in llm/ai-sdk/package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/generative-ai' in llm/token-meter/package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@stripe/agent-toolkit' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@stripe/agent-toolkit", "version": "0.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:41Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.6, "trust_score_v2": 84.6, "rank_v2": 97, "rank_v2_delta": 18, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.5, "identity": 18.0, "transparency": 13.7, "maintenance": 18.1, "adoption": 13.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Coolify MCP", "repo": "StuMason/coolify-mcp", "display_repo": "", "url": "https://github.com/StuMason/coolify-mcp", "listing_class": "agent", "rank": 98, "previous_rank": 94, "rank_delta": -4, "stars": 612, "stars_fmt": "612", "forks": 93, "forks_fmt": "93", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 47, "commits_low_confidence": false, "score": 71.9, "description": "MCP server for Coolify — 42 optimized tools for managing self-hosted PaaS through AI assistants", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 35, "npm_package": "@masonator/coolify-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2898, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:38:41Z", "slug": "coolify-mcp", "full_fetched_at": "2026-10-12T04:02:17Z", "source_note": "", "github_homepage": "https://coolify-mcp.stumason.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/lib/mcp-server.ts", "Found MCP-related server test path: src/__tests__/mcp-server.test.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@masonator/coolify-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@masonator/coolify-mcp", "version": "3.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:17Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.6, "trust_score_v2": 84.6, "rank_v2": 98, "rank_v2_delta": 23, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.8, "identity": 18.0, "transparency": 12.8, "maintenance": 18.7, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Weights & Biases Weave", "repo": "wandb/weave", "display_repo": "", "url": "https://github.com/wandb/weave", "listing_class": "agent", "rank": 99, "previous_rank": 96, "rank_delta": -3, "stars": 1140, "stars_fmt": "1.1k", "forks": 173, "forks_fmt": "173", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 70, "commits_low_confidence": false, "score": 76.8, "description": "Weave is a toolkit for developing AI-powered applications, built by Weights & Biases.", "language": "Python", "open_issues": 88, "category": "Observability & Evaluation", "category_rank": 4, "npm_package": "weave", "crate_package": "", "pypi_package": "weave", "docker_image": "", "vscode_extension": "", "weekly_downloads": 596651, "dl_source": "npm+pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": true, "pypi_provenance": true, "signed_commits_ratio": 0.87, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:08:32Z", "slug": "weights-biases-weave", "full_fetched_at": "2026-10-12T12:02:33Z", "source_note": "", "github_homepage": "https://wandb.me/weave", "homepage_icon": "/site-icons/f854437dacc6a60f.png", "homepage_icon_for": "https://wandb.me/weave", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: weave/integrations/fastmcp/__init__.py", "Found MCP-related server path: weave/integrations/fastmcp/fastmcp_client.py", "Found MCP-related server test path: tests/integrations/fastmcp/cassettes/fastmcp_test/test_fastmcp_client.yaml", "Found MCP-related server test path: tests/integrations/fastmcp/cassettes/fastmcp_test/test_fastmcp_server.yaml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Google Gemini", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'weave' points to the tracked repo", "pypi package 'weave' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "weave", "version": "0.16.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:33Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 84.5, "trust_score_v2": 84.5, "rank_v2": 99, "rank_v2_delta": -47, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.7, "identity": 18.0, "transparency": 13.9, "maintenance": 19.4, "adoption": 15.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "DvalinCode", "repo": "arthurpanhku/dvalincode", "display_repo": "", "url": "https://github.com/arthurpanhku/dvalincode", "listing_class": "agent", "rank": 100, "previous_rank": 105, "rank_delta": 5, "stars": 116, "stars_fmt": "116", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 67, "commits_low_confidence": false, "score": 65.8, "description": "Independent security verification for code written by humans and AI agents. Scan, repair, then prove it — Dvalin runs your project's own checks and issues a Verified Fix Record anyone can re-derive offline. Local-first, policy-bound, MIT.", "language": "TypeScript", "open_issues": 15, "category": "Security & Guardrails", "category_rank": 4, "npm_package": "dvalincode", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 99, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.91, "scorecard_score": 6.8, "scorecard_checks": { "Code-Review": 0, "Security-Policy": 10, "Dangerous-Workflow": 10, "Maintained": 10, "Token-Permissions": 10, "Dependency-Update-Tool": 10, "Binary-Artifacts": 10, "Pinned-Dependencies": 9, "CII-Best-Practices": 0, "SAST": 10, "License": 10, "Vulnerabilities": 0, "Fuzzing": 0, "Branch-Protection": -1, "Packaging": 10, "Signed-Releases": 0, "Contributors": 6, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T12:06:34Z", "slug": "dvalincode", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "https://dvalincode.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: tests/fixtures/mcp-server.schema.json", "Found MCP-related server test path: tests/mcp/fixtures/echo-mcp-server.mjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (integrations/dvalin-security/.claude-plugin/plugin.json)", "Found credential/config marker 'CODEX_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: integrations/dvalin-security/.claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'dvalincode' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "dvalincode", "version": "0.21.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:52Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.4, "trust_score_v2": 84.4, "rank_v2": 100, "rank_v2_delta": 19, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.5, "identity": 18.0, "transparency": 14.3, "maintenance": 19.3, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Google Flights MCP (fli)", "repo": "punitarani/fli", "display_repo": "", "url": "https://github.com/punitarani/fli", "listing_class": "agent", "rank": 101, "previous_rank": 98, "rank_delta": -3, "stars": 3222, "stars_fmt": "3.2k", "forks": 404, "forks_fmt": "404", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 35, "commits_low_confidence": false, "score": 74.6, "description": "Google Flights MCP, CLI and Python Library", "language": "Python", "open_issues": 13, "category": "MCP Servers", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "flights", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4713, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.95, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:11:40Z", "slug": "google-flights-mcp-fli", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fli/mcp/server.py", "Found MCP-related server test path: tests/mcp/test_mcp_server.py", "Found MCP-related server test path: tests/mcp/test_mcp_server_fixes.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'flights' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "flights", "version": "0.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.4, "trust_score_v2": 84.4, "rank_v2": 101, "rank_v2_delta": 34, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.0, "identity": 18.0, "transparency": 12.4, "maintenance": 16.7, "adoption": 13.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "oh-my-pi", "repo": "can1357/oh-my-pi", "display_repo": "", "url": "https://github.com/can1357/oh-my-pi", "listing_class": "agent", "rank": 102, "previous_rank": 109, "rank_delta": 7, "stars": 35184, "stars_fmt": "35.2k", "forks": 3828, "forks_fmt": "3.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 6917, "commits_low_confidence": false, "score": 94.0, "description": "⌥ Coding agent with the IDE wired in. Built by Stencil Labs.", "language": "TypeScript", "open_issues": 2222, "category": "Coding Agents", "category_rank": 7, "npm_package": "@oh-my-pi/pi-coding-agent", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 197641, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-25T13:28:37Z", "slug": "oh-my-pi", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "https://omp.sh", "homepage_icon": "/site-icons/96e0366c82b8e6c0.png", "homepage_icon_for": "https://omp.sh", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: packages/mnemopi/src/mcp-server.ts", "Found MCP-related server docs path: docs/mcp-server-tool-authoring.md", "Found MCP-related server test path: packages/coding-agent/test/mcp-server-tool-ownership.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Firecrawl", "Perplexity", "Tavily", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found xAI Grok credential/config marker 'XAI_API_KEY'", "README/docs also mention xAI Grok", "Found Perplexity credential/config marker 'PERPLEXITY_API_KEY'", "README/docs also mention Perplexity", "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: docs/skills/examples/mini-marketplace/.claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@oh-my-pi/pi-coding-agent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@oh-my-pi/pi-coding-agent", "version": "18.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:27Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.3, "trust_score_v2": 84.3, "rank_v2": 102, "rank_v2_delta": -33, "trust_v2_adjustment": -0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.8, "identity": 18.0, "transparency": 12.7, "maintenance": 20.0, "adoption": 18.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mistral Vibe", "repo": "mistralai/mistral-vibe", "display_repo": "", "url": "https://github.com/mistralai/mistral-vibe", "listing_class": "agent", "rank": 103, "previous_rank": 101, "rank_delta": -2, "stars": 5104, "stars_fmt": "5.1k", "forks": 733, "forks_fmt": "733", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 8, "commits_low_confidence": true, "score": 72.0, "description": "Minimal CLI coding agent by Mistral", "language": "Python", "open_issues": 189, "category": "Coding Agents", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "mistral-vibe", "docker_image": "", "vscode_extension": "", "weekly_downloads": 481068, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.76, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-11T10:33:27Z", "slug": "mistral-vibe", "full_fetched_at": "2026-10-12T08:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: client-e2e/scenarios/mcp/mcp_toggle_server_state.py", "Found MCP-related server path: vibe/core/config/mcp_servers.py", "Found MCP-related server test path: tests/core/config/test_mcp_servers.py" ] }, "external_service_dependencies": { "providers": [ "Mistral AI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Mistral AI dependency 'mistralai' in pyproject.toml", "Found Mistral AI credential/config marker 'MISTRAL_API_KEY'", "README/docs also mention Mistral AI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code", "shell" ], "confidence": "high", "evidence": [ "Found declared path: client-e2e/goldens/plugins/browser/requests.json", "README/docs also mention a extension-based plugin/integration surface", "Found shell dependency 'pty' in pyproject.toml", "README/docs also mention shell capabilities", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mistral-vibe' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mistral-vibe", "version": "2.26.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:03Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 84.2, "trust_score_v2": 84.2, "rank_v2": 103, "rank_v2_delta": 10, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.6, "identity": 18.0, "transparency": 13.4, "maintenance": 13.7, "adoption": 16.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Anytype MCP", "repo": "anyproto/anytype-mcp", "display_repo": "", "url": "https://github.com/anyproto/anytype-mcp", "listing_class": "agent", "rank": 104, "previous_rank": 103, "rank_delta": -1, "stars": 532, "stars_fmt": "532", "forks": 60, "forks_fmt": "60", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 21, "commits_low_confidence": false, "score": 65.6, "description": "An MCP server enabling AI assistants to interact with Anytype - your encrypted, local and collaborative wiki - to organize objects, lists, and more through natural language.", "language": "TypeScript", "open_issues": 17, "category": "MCP Servers", "category_rank": 37, "npm_package": "@anyproto/anytype-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1736, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:45:36Z", "slug": "anytype-mcp", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker '3CYOUR_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@anyproto/anytype-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@anyproto/anytype-mcp", "version": "2.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:50Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.1, "trust_score_v2": 84.1, "rank_v2": 104, "rank_v2_delta": 21, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.8, "identity": 18.0, "transparency": 13.5, "maintenance": 16.9, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Hermes Agent", "repo": "nousresearch/hermes-agent", "display_repo": "", "url": "https://github.com/NousResearch/hermes-agent", "listing_class": "agent", "rank": 105, "previous_rank": 102, "rank_delta": -3, "stars": 253029, "stars_fmt": "253.0k", "forks": 54812, "forks_fmt": "54.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 17110, "commits_low_confidence": false, "score": 100.0, "description": "The agent that grows with you", "language": "Python", "open_issues": 15126, "category": "Coding Agents", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "hermes-agent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 50589, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:31:19Z", "slug": "hermes-agent", "full_fetched_at": "2026-10-12T12:02:53Z", "source_note": "", "github_homepage": "https://hermes-agent.nousresearch.com", "homepage_icon": "/site-icons/903d538f05330104.png", "homepage_icon_for": "https://hermes-agent.nousresearch.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: agent/transports/hermes_tools_mcp_server.py", "Found MCP-related server path: apps/desktop/src/app/capabilities/mcp/use-mcp-servers.ts", "Found MCP-related server test path: apps/desktop/src/lib/mcp-servers.test.ts" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "ElevenLabs", "Firecrawl", "Mistral AI", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Mistral AI dependency 'mistralai' in pyproject.toml", "Found ElevenLabs dependency 'elevenlabs' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "shell" ], "confidence": "high", "evidence": [ "Found declared path: apps/desktop/src/app/capabilities/plugins/plugin-packages.test.ts", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "Found shell dependency 'pty' in pyproject.toml", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'hermes-agent' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "hermes-agent", "version": "0.19.0" } ], "found": [ { "id": "GHSA-pmqc-57g8-c22c", "aliases": [ "CVE-2026-10224", "PYSEC-2026-3576" ], "summary": "hermes-agent has an Uncontrolled Resource Consumption issue", "severity": "MODERATE", "published": "2026-06-01", "package": "hermes-agent", "version": "0.19.0" }, { "id": "GHSA-xq8w-9jvx-gm3v", "aliases": [ "CVE-2026-10221", "PYSEC-2026-3577" ], "summary": "hermes-agent has an Injection issue", "severity": "MODERATE", "published": "2026-06-01", "package": "hermes-agent", "version": "0.19.0" } ], "worst": "MODERATE", "checked_at": "2026-10-12T12:02:53Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 84.0, "trust_score_v2": 84.0, "rank_v2": 105, "rank_v2_delta": -62, "trust_v2_adjustment": -2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.5, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 19.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dynatrace Managed MCP", "repo": "dynatrace-oss/dynatrace-managed-mcp", "display_repo": "", "url": "https://github.com/dynatrace-oss/dynatrace-managed-mcp", "listing_class": "agent", "rank": 106, "previous_rank": 104, "rank_delta": -2, "stars": 32, "stars_fmt": "32", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 36, "commits_low_confidence": false, "score": 58.4, "description": "An MCP server for self-hosted Dynatrace Managed platform", "language": "TypeScript", "open_issues": 15, "category": "MCP Servers", "category_rank": 38, "npm_package": "@dynatrace-oss/dynatrace-managed-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 602, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.49, "scorecard_score": 8.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-28T10:50:25Z", "slug": "dynatrace-managed-mcp", "full_fetched_at": "2026-10-12T12:03:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json", "Found credential/config marker 'DT_PROD_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@dynatrace-oss/dynatrace-managed-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@dynatrace-oss/dynatrace-managed-mcp-server", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:07Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 83.8, "trust_score_v2": 83.8, "rank_v2": 106, "rank_v2_delta": 20, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.2, "identity": 18.0, "transparency": 15.5, "maintenance": 18.0, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Open Code Review", "repo": "alibaba/open-code-review", "display_repo": "", "url": "https://github.com/alibaba/open-code-review", "listing_class": "skill", "rank": 9, "previous_rank": 10, "rank_delta": 1, "stars": 46446, "stars_fmt": "46.4k", "forks": 3380, "forks_fmt": "3.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 119, "commits_low_confidence": false, "score": 94.4, "description": "Secure, fast, efficient, battle-tested at Alibaba's scale. Hybrid architecture code review tool: deterministic pipelines + LLM Agent, precise line-level comments, built-in multi-language ruleset (NPE, thread-safety, XSS, SQL injection), OpenAI & Anthropic compatible.", "language": "Go", "open_issues": 125, "category": "Agent Skills", "category_rank": 9, "npm_package": "@alibaba-group/open-code-review", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 122239, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.5, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 10, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:05:46Z", "slug": "open-code-review", "full_fetched_at": "2026-10-12T12:02:31Z", "source_note": "", "github_homepage": "https://open-codereview.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/open-code-review/claude-code/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@alibaba-group/open-code-review' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@alibaba-group/open-code-review", "version": "1.12.13" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:31Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 83.8, "trust_score_v2": 83.8, "rank_v2": 9, "rank_v2_delta": 128, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.4, "identity": 10.8, "transparency": 14.9, "maintenance": 20.0, "adoption": 18.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claudecodeui", "repo": "siteboon/claudecodeui", "display_repo": "", "url": "https://github.com/siteboon/claudecodeui", "listing_class": "skill", "rank": 10, "previous_rank": 11, "rank_delta": 1, "stars": 14043, "stars_fmt": "14.0k", "forks": 2028, "forks_fmt": "2.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 52, "commits_low_confidence": false, "score": 86.8, "description": "Use Claude Code, OpenCode, Cursor CLI, and Codex on mobile and web with CloudCLI (aka Claude Code UI). CloudCLI is a free open source webui/GUI that helps you manage your Claude Code session and projects remotely.", "language": "TypeScript", "open_issues": 139, "category": "Agent Skills", "category_rank": 10, "npm_package": "@cloudcli-ai/cloudcli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2274, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.87, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 5, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:58:44Z", "slug": "claudecodeui", "full_fetched_at": "2026-10-12T00:02:19Z", "source_note": "", "github_homepage": "https://cloudcli.ai", "homepage_icon": "/site-icons/9da84c649051d98b.png", "homepage_icon_for": "https://cloudcli.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/modules/mcp/McpServerFormModal.tsx", "Found MCP-related server path: src/modules/mcp/McpServers.tsx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: server/modules/plugins/index.ts", "README/docs also mention a declared plugin/integration surface", "Found code dependency '@octokit' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@cloudcli-ai/cloudcli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@cloudcli-ai/cloudcli", "version": "1.37.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:19Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 83.8, "trust_score_v2": 83.8, "rank_v2": 10, "rank_v2_delta": 93, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.5, "identity": 18.0, "transparency": 12.3, "maintenance": 18.9, "adoption": 14.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenMausBot", "repo": "milind-soni/OpenMausBot", "display_repo": "", "url": "https://github.com/milind-soni/OpenMausBot", "listing_class": "agent", "rank": 107, "previous_rank": 99, "rank_delta": -8, "stars": 4585, "stars_fmt": "4.6k", "forks": 779, "forks_fmt": "779", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2345, "commits_low_confidence": false, "score": 85.4, "description": "Open-source Grok Bot alternative with a virtual machine that bots can use", "language": "TypeScript", "open_issues": 205, "category": "Multi-Agent Systems", "category_rank": 2, "npm_package": "openmausbot", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2263, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:11:42Z", "slug": "openmausbot", "full_fetched_at": "2026-10-12T12:02:38Z", "source_note": "", "github_homepage": "https://www.openmausbot.com/", "homepage_icon": "/site-icons/cd56f7b240f3ddd0.png", "homepage_icon_for": "https://www.openmausbot.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: scripts/mcp-server.ts", "Found MCP-related server path: server/testing/fake-http-mcp-server.ts", "Found MCP-related server docs path: docs/custom-mcp-servers.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'openmausbot' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "openmausbot", "version": "0.1.107" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:38Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 83.8, "trust_score_v2": 83.8, "rank_v2": 107, "rank_v2_delta": 33, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.4, "identity": 18.0, "transparency": 12.1, "maintenance": 20.0, "adoption": 13.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenScience", "repo": "synthetic-sciences/openscience", "display_repo": "", "url": "https://github.com/synthetic-sciences/openscience", "listing_class": "agent", "rank": 108, "previous_rank": 107, "rank_delta": -1, "stars": 3974, "stars_fmt": "4.0k", "forks": 525, "forks_fmt": "525", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 367, "commits_low_confidence": false, "score": 84.3, "description": "The open-source AI workbench for scientific research", "language": "TypeScript", "open_issues": 1, "category": "Research & Data", "category_rank": 5, "npm_package": "@synsci/openscience", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 854, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.78, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:37:34Z", "slug": "openscience", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "https://openscience.sh", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in backend/cli/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "DeepSeek", "Groq", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in backend/cli/package.json", "Found Anthropic dependency 'anthropic' in backend/cli/package.json", "README/docs also mention Anthropic", "Found Cohere dependency 'cohere' in backend/cli/package.json", "Found Groq dependency 'groq' in backend/cli/package.json", "Found xAI Grok dependency '@ai-sdk/xai' in backend/cli/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: backend/cli/skills/other/hugging-face-trackio/.claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@synsci/openscience' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@synsci/openscience", "version": "2.0.151" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:25Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 83.7, "trust_score_v2": 83.7, "rank_v2": 108, "rank_v2_delta": -30, "trust_v2_adjustment": -0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.9, "maintenance": 20.0, "adoption": 12.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "mcpc", "repo": "apify/mcpc", "display_repo": "", "url": "https://github.com/apify/mcpc", "listing_class": "agent", "rank": 109, "previous_rank": 108, "rank_delta": -1, "stars": 1022, "stars_fmt": "1.0k", "forks": 98, "forks_fmt": "98", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 41, "commits_low_confidence": false, "score": 72.2, "description": "The most compatible MCP CLI client. Supports: tools, resources, prompts, completions, async tasks, skills, stdio and Streamable HTTP (MCP 2026-07-28 and 2025-11-25). Persistent sessions, OAuth 2.1 with DCR, CIMD, client credentials, and ID-JAG, OS keychain, --json for code mode, grep across…", "language": "TypeScript", "open_issues": 17, "category": "Protocols & Tool Integration", "category_rank": 8, "npm_package": "@apify/mcpc", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4850, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:22:24Z", "slug": "mcpc", "full_fetched_at": "2026-10-12T08:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/vhs/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'APIFY_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@apify/mcpc' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@apify/mcpc", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:43Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 83.6, "trust_score_v2": 83.6, "rank_v2": 109, "rank_v2_delta": 22, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.9, "identity": 18.0, "transparency": 12.3, "maintenance": 18.3, "adoption": 12.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Oh My Claudecode", "repo": "Yeachan-Heo/oh-my-claudecode", "display_repo": "", "url": "https://github.com/Yeachan-Heo/oh-my-claudecode", "listing_class": "skill", "rank": 11, "previous_rank": 9, "rank_delta": -2, "stars": 39821, "stars_fmt": "39.8k", "forks": 3566, "forks_fmt": "3.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 685, "commits_low_confidence": false, "score": 94.1, "description": "Teams-first Multi-agent orchestration for Claude Code", "language": "TypeScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 11, "npm_package": "oh-my-claude-sisyphus", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4453, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.16, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:47:33Z", "slug": "oh-my-claudecode", "full_fetched_at": "2026-10-12T04:02:26Z", "source_note": "", "github_homepage": "https://oh-my-claudecode.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: bridge/mcp-server.cjs", "Found MCP-related server path: bridge/run-mcp-server.sh", "Found MCP-related server test path: dist/mcp/__tests__/team-server-artifact-convergence.test.d.ts", "Found MCP-related server test path: dist/mcp/__tests__/team-server-artifact-convergence.test.d.ts.map" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'oh-my-claude-sisyphus' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "oh-my-claude-sisyphus", "version": "5.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:26Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 83.6, "trust_score_v2": 83.6, "rank_v2": 11, "rank_v2_delta": 117, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 18.0, "transparency": 11.8, "maintenance": 20.0, "adoption": 15.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "App Store Connect MCP", "repo": "erayendes/app-store-connect-mcp", "display_repo": "", "url": "https://github.com/erayendes/app-store-connect-mcp", "listing_class": "agent", "rank": 110, "previous_rank": 106, "rank_delta": -4, "stars": 52, "stars_fmt": "52", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 35, "commits_low_confidence": false, "score": 58.6, "description": "Heimdall — MCP server for the Apple App Store Connect API and App Store Server API (StoreKit 2). 890 tools across 13 profiles, generated from Apple's OpenAPI spec, plus one-call macros for worldwide pricing, submission readiness and metadata diffs, and confirm-before-write safety. Works with…", "language": "TypeScript", "open_issues": 9, "category": "MCP Servers", "category_rank": 39, "npm_package": "@erayendes/asc-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 428, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 6.4, "scorecard_checks": { "Code-Review": 0, "Binary-Artifacts": 10, "Security-Policy": 10, "Dangerous-Workflow": 10, "Maintained": 0, "Dependency-Update-Tool": 10, "Token-Permissions": 10, "Pinned-Dependencies": 9, "CII-Best-Practices": 0, "Vulnerabilities": 10, "SAST": 9, "Fuzzing": 0, "Packaging": 10, "Signed-Releases": 0, "License": 10, "Branch-Protection": 3, "Contributors": 3, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T16:04:06Z", "slug": "app-store-connect-mcp", "full_fetched_at": "2026-10-12T16:01:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@erayendes/asc-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@erayendes/asc-mcp", "version": "2.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:52Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 83.4, "trust_score_v2": 83.4, "rank_v2": 110, "rank_v2_delta": 35, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.0, "identity": 18.0, "transparency": 13.9, "maintenance": 18.2, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Open WebUI", "repo": "open-webui/open-webui", "display_repo": "", "url": "https://github.com/open-webui/open-webui", "listing_class": "agent", "rank": 111, "previous_rank": 110, "rank_delta": -1, "stars": 154638, "stars_fmt": "154.6k", "forks": 22621, "forks_fmt": "22.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 773, "commits_low_confidence": false, "score": 100.0, "description": "User-friendly AI Interface (Supports Ollama, OpenAI API, ...)", "language": "Python", "open_issues": 159, "category": "UI & App Builders", "category_rank": 3, "npm_package": "open-webui", "crate_package": "", "pypi_package": "open-webui", "docker_image": "", "vscode_extension": "", "weekly_downloads": 192028, "dl_source": "npm+pypi", "hn_mentions_30d": 1, "has_provenance": true, "npm_provenance": false, "pypi_provenance": true, "signed_commits_ratio": 0.43, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 5, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-20T10:39:54Z", "slug": "open-webui", "full_fetched_at": "2026-10-12T08:02:15Z", "source_note": "", "github_homepage": "https://openwebui.com", "homepage_icon": "/site-icons/ff7550c9538aca3d.png", "homepage_icon_for": "https://openwebui.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Redis", "Weaviate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Pinecone dependency 'pinecone' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "Found database dependency 'pg' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'open-webui' does not expose a source repo URL", "pypi package 'open-webui' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "open", "trust_score": 83.4, "trust_score_v2": 83.4, "rank_v2": 111, "rank_v2_delta": -80, "trust_v2_adjustment": -4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.0, "identity": 18.0, "transparency": 13.5, "maintenance": 20.0, "adoption": 19.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Obsidian Wiki", "repo": "Ar9av/obsidian-wiki", "display_repo": "", "url": "https://github.com/Ar9av/obsidian-wiki", "listing_class": "skill", "rank": 12, "previous_rank": 12, "rank_delta": 0, "stars": 3550, "stars_fmt": "3.5k", "forks": 361, "forks_fmt": "361", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 47, "commits_low_confidence": false, "score": 78.9, "description": "Framework for AI agents to build and maintain a digital brain through Obsidian wiki | Memory System for Agents", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "obsidian-wiki", "docker_image": "", "vscode_extension": "", "weekly_downloads": 795, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.76, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:50:02Z", "slug": "obsidian-wiki", "full_fetched_at": "2026-10-12T08:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude/hooks') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'obsidian-wiki' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "obsidian-wiki", "version": "2026.10.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:43Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 83.4, "trust_score_v2": 83.4, "rank_v2": 12, "rank_v2_delta": 106, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.8, "identity": 18.0, "transparency": 12.9, "maintenance": 18.6, "adoption": 12.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "iMessage MCP", "repo": "anipotts/imessage-mcp", "display_repo": "", "url": "https://github.com/anipotts/imessage-mcp", "listing_class": "agent", "rank": 112, "previous_rank": 112, "rank_delta": 0, "stars": 27, "stars_fmt": "27", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 125, "commits_low_confidence": false, "score": 62.6, "description": "Search and read your Messages history from Claude, Codex, Cursor, VS Code, and any other MCP client.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 40, "npm_package": "imessage-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 248, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:22:46Z", "slug": "imessage-mcp", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json", "Found credential/config marker 'IMESSAGE_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'imessage-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "imessage-mcp", "version": "3.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:42Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 83.2, "trust_score_v2": 83.2, "rank_v2": 112, "rank_v2_delta": -6, "trust_v2_adjustment": 2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.4, "identity": 18.0, "transparency": 14.5, "maintenance": 20.0, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DSH TUI", "repo": "ccch1mneyyy/dsh-TUI", "display_repo": "", "url": "https://github.com/ccch1mneyyy/dsh-TUI", "listing_class": "skill", "rank": 13, "previous_rank": 13, "rank_delta": 0, "stars": 4426, "stars_fmt": "4.4k", "forks": 250, "forks_fmt": "250", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 768, "commits_low_confidence": false, "score": 83.1, "description": "DSH's officially top-recommended TUI plugin — high performance, low overhead, cute pixel whale, smooth mouse interaction. One-command install via npm. / DSH 官方首推的 TUI 插件，高性能低占用，可爱像素鲸鱼，流畅鼠标交互，npm 一键安装", "language": "TypeScript", "open_issues": 98, "category": "Agent Skills", "category_rank": 13, "npm_package": "@deepseek-harness-tui/dsh-tui", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 10903, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.71, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-09-27T06:08:21Z", "slug": "dsh-tui", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "https://dshtui.com/", "homepage_icon": "/site-icons/4170f8146f7e38ce.png", "homepage_icon_for": "https://dshtui.com/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found DeepSeek dependency 'deepseek' in package.json", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@deepseek-harness-tui/dsh-tui' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@deepseek-harness-tui/dsh-tui", "version": "0.14.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:52Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 83.2, "trust_score_v2": 83.2, "rank_v2": 13, "rank_v2_delta": 91, "trust_v2_adjustment": 2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.6, "identity": 18.0, "transparency": 12.2, "maintenance": 20.0, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Slack MCP Server", "repo": "jtalk22/slack-mcp-server", "display_repo": "", "url": "https://github.com/jtalk22/slack-mcp-server", "listing_class": "agent", "rank": 113, "previous_rank": 122, "rank_delta": 9, "stars": 31, "stars_fmt": "31", "forks": 25, "forks_fmt": "25", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 27, "commits_low_confidence": false, "score": 58.7, "description": "Put your agent inside your Slack. Zero bots, zero admin queues, no Business+ upgrade — 20+ tools for stealth search, thread parsing and mention tracking.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 41, "npm_package": "@jtalk22/slack-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1257, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:42:45Z", "slug": "slack-mcp-server", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "https://mcp.revasserlabs.com", "homepage_icon": "/site-icons/e71c074cae747895.png", "homepage_icon_for": "https://mcp.revasserlabs.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: lib/mcp-server.js", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SLACK_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'puppeteer' in workers/browser-ops/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@jtalk22/slack-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@jtalk22/slack-mcp", "version": "5.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:36Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 83.1, "trust_score_v2": 83.1, "rank_v2": 113, "rank_v2_delta": 23, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.7, "identity": 18.0, "transparency": 14.2, "maintenance": 17.8, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LangChain", "repo": "langchain-ai/langchain", "display_repo": "", "url": "https://github.com/langchain-ai/langchain", "listing_class": "agent", "rank": 114, "previous_rank": 113, "rank_delta": -1, "stars": 147693, "stars_fmt": "147.7k", "forks": 24770, "forks_fmt": "24.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 218, "commits_low_confidence": false, "score": 100.0, "description": "The agent engineering platform.", "language": "Python", "open_issues": 525, "category": "Agent Frameworks", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "langchain", "docker_image": "", "vscode_extension": "", "weekly_downloads": 36001937, "dl_source": "pypi", "hn_mentions_30d": 10, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 9, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-11T10:43:54Z", "slug": "langchain", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "https://docs.langchain.com/langchain/", "homepage_icon": "/site-icons/443e5689cc74d832.png", "homepage_icon_for": "https://docs.langchain.com/langchain/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: libs/langchain_v1/examples/mcp/_fleet_servers.py", "Found MCP-related server path: libs/langchain_v1/examples/mcp/_servers.py", "Found MCP dependency 'fastmcp' in libs/langchain_v1/pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'langchain' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "langchain", "version": "1.4.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:51Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 83.1, "trust_score_v2": 83.1, "rank_v2": 114, "rank_v2_delta": 40, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LangWatch", "repo": "langwatch/langwatch", "display_repo": "", "url": "https://github.com/langwatch/langwatch", "listing_class": "agent", "rank": 115, "previous_rank": 114, "rank_delta": -1, "stars": 4939, "stars_fmt": "4.9k", "forks": 409, "forks_fmt": "409", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 205, "commits_low_confidence": false, "score": 84.3, "description": "Open-Source Agent Observability & Evals for AI Platform teams. Trace, test, route and govern every agent & coding assistant in the company.", "language": "TypeScript", "open_issues": 60, "category": "Observability & Evaluation", "category_rank": 5, "npm_package": "@langwatch/server", "crate_package": "", "pypi_package": "langwatch", "docker_image": "", "vscode_extension": "", "weekly_downloads": 90875, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 0.83, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-08-30T06:28:30Z", "slug": "langwatch", "full_fetched_at": "2026-10-12T04:02:54Z", "source_note": "", "github_homepage": "https://langwatch.ai", "homepage_icon": "/site-icons/fe8590daa1b85750.png", "homepage_icon_for": "https://langwatch.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/mcp-server/cursor-example.png", "Found MCP-related server path: mcp/typescript/src/create-mcp-server.d.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in platform/app/package.json" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "ElevenLabs", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in platform/app/package.json", "README/docs also mention OpenAI", "Found ElevenLabs dependency 'elevenlabs' in platform/app/package.json", "Found Amazon Bedrock credential/config marker 'AWS_ACCESS_KEY_ID'", "README/docs also mention Amazon Bedrock", "Found Postgres dependency 'pg' in platform/app/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: platform/app/biome-plugins/__tests__/no-raw-error-toast.fixtures.tsx", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'pg' in platform/app/package.json" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package '@langwatch/server' points to the tracked repo", "pypi package 'langwatch' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@langwatch/server", "version": "3.20.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:54Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 83.1, "trust_score_v2": 83.1, "rank_v2": 115, "rank_v2_delta": -39, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.8, "identity": 18.0, "transparency": 12.7, "maintenance": 20.0, "adoption": 15.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "MCP Observatory", "repo": "KryptosAI/mcp-observatory", "display_repo": "", "url": "https://github.com/KryptosAI/mcp-observatory", "listing_class": "agent", "rank": 116, "previous_rank": 115, "rank_delta": -1, "stars": 142, "stars_fmt": "142", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 17, "commits_low_confidence": false, "score": 58.4, "description": "CI-native security testing for MCP servers. Attack simulation, schema drift detection, and health scoring before agents depend on them.", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 42, "npm_package": "@kryptosai/mcp-observatory", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1763, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-11T03:49:49Z", "slug": "mcp-observatory", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: dashboard/safety-index/servers/aikidosec-mcp-server.html", "Found MCP-related server path: dashboard/safety-index/servers/airtable-mcp-server.html", "Found MCP-related server docs path: docs/mcp-server-safety-index.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_SERVER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency '@octokit' in github-app/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@kryptosai/mcp-observatory' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@kryptosai/mcp-observatory", "version": "1.49.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:21Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.8, "trust_score_v2": 82.8, "rank_v2": 116, "rank_v2_delta": 22, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.2, "identity": 18.0, "transparency": 14.8, "maintenance": 16.6, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mnemoverse Memory", "repo": "mnemoverse/mcp-memory-server", "display_repo": "", "url": "https://github.com/mnemoverse/mcp-memory-server", "listing_class": "agent", "rank": 117, "previous_rank": 117, "rank_delta": 0, "stars": 26, "stars_fmt": "26", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 75, "commits_low_confidence": false, "score": 60.4, "description": "Hosted persistent memory for AI agents over MCP. Tell it a recalled memory helped or misled, and it re-ranks what comes back next. Shared rooms for multi-agent work. One key or OAuth across Claude Code, Cursor, VS Code and ChatGPT. MIT, in the official MCP Registry.", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 43, "npm_package": "@mnemoverse/mcp-memory-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 297, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-05T01:37:56Z", "slug": "mnemoverse-memory", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "https://mnemoverse.com/docs/api/mcp-server", "homepage_icon": "/site-icons/8bcbff330c7111de.png", "homepage_icon_for": "https://mnemoverse.com/docs/api/mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'MNEMOVERSE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mnemoverse/mcp-memory-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mnemoverse/mcp-memory-server", "version": "0.15.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:01Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.8, "trust_score_v2": 82.8, "rank_v2": 117, "rank_v2_delta": 24, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.0, "identity": 18.0, "transparency": 13.6, "maintenance": 19.5, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Exa MCP Server", "repo": "exa-labs/exa-mcp-server", "display_repo": "", "url": "https://github.com/exa-labs/exa-mcp-server", "listing_class": "agent", "rank": 118, "previous_rank": 118, "rank_delta": 0, "stars": 5110, "stars_fmt": "5.1k", "forks": 401, "forks_fmt": "401", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 6, "commits_low_confidence": true, "score": 69.3, "description": "Exa MCP for web search and web crawling!", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 44, "npm_package": "exa-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 16837, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:45:29Z", "slug": "exa-mcp-server", "full_fetched_at": "2026-10-12T04:02:34Z", "source_note": "", "github_homepage": "https://exa.ai/docs/reference/exa-mcp", "homepage_icon": "/site-icons/b2baffbe23fb4ea2.png", "homepage_icon_for": "https://exa.ai/docs/reference/exa-mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'exa-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "exa-mcp-server", "version": "3.4.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:34Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.8, "trust_score_v2": 82.8, "rank_v2": 118, "rank_v2_delta": 29, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.4, "identity": 18.0, "transparency": 13.3, "maintenance": 13.4, "adoption": 14.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DawnAI", "repo": "cacheplane/b4run", "display_repo": "", "url": "https://github.com/cacheplane/b4run", "listing_class": "agent", "rank": 119, "previous_rank": 116, "rank_delta": -3, "stars": 311, "stars_fmt": "311", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 309, "commits_low_confidence": false, "score": 70.2, "description": "Ridiculous speed. Readable code.", "language": "TypeScript", "open_issues": 13, "category": "Agent Frameworks", "category_rank": 12, "npm_package": "@dawn-ai/cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 292, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.5, "scorecard_checks": { "Code-Review": 10, "Dependency-Update-Tool": 10, "Maintained": 10, "Security-Policy": 10, "Packaging": -1, "Dangerous-Workflow": 10, "License": 10, "Token-Permissions": 0, "Binary-Artifacts": 10, "CII-Best-Practices": 5, "SAST": 10, "Vulnerabilities": 0, "Signed-Releases": 10, "Pinned-Dependencies": 8, "Fuzzing": 0, "Branch-Protection": -1, "Contributors": 6, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:25Z", "slug": "dawnai", "full_fetched_at": "2026-10-12T04:02:32Z", "source_note": "", "github_homepage": "https://b4.run", "homepage_icon": "/site-icons/ce3fff006f8920f4.png", "homepage_icon_for": "https://b4.run", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/vite-plugin/CHANGELOG.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@dawn-ai/cli' points to cacheplane/dawnai (same owner as cacheplane/b4run, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@dawn-ai/cli", "version": "0.8.26" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:32Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.7, "trust_score_v2": 82.7, "rank_v2": 119, "rank_v2_delta": -42, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.9, "identity": 18.0, "transparency": 14.9, "maintenance": 19.9, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Esa MCP Server", "repo": "esaio/esa-mcp-server", "display_repo": "", "url": "https://github.com/esaio/esa-mcp-server", "listing_class": "agent", "rank": 120, "previous_rank": 119, "rank_delta": -1, "stars": 62, "stars_fmt": "62", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 28, "commits_low_confidence": false, "score": 58.7, "description": "esa.io の公式 MCP(Model Context Protocol)サーバー(STDIO Transport版)", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 45, "npm_package": "@esaio/esa-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/esaio/esa-mcp-server:0.13.0", "vscode_extension": "", "weekly_downloads": 5555, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T01:34:59Z", "slug": "esa-mcp-server", "full_fetched_at": "2026-10-12T16:02:01Z", "source_note": "", "github_homepage": "https://esa.io", "homepage_icon": "/site-icons/df8ddc25a0ddbef9.png", "homepage_icon_for": "https://esa.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ESA_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@esaio/esa-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@esaio/esa-mcp-server", "version": "0.14.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:01Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.7, "trust_score_v2": 82.7, "rank_v2": 120, "rank_v2_delta": 24, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.3, "identity": 18.0, "transparency": 13.3, "maintenance": 17.8, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Antigravity Sdk Python", "repo": "google-antigravity/antigravity-sdk-python", "display_repo": "", "url": "https://github.com/google-antigravity/antigravity-sdk-python", "listing_class": "skill", "rank": 14, "previous_rank": 14, "rank_delta": 0, "stars": 3699, "stars_fmt": "3.7k", "forks": 1465, "forks_fmt": "1.5k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 103, "commits_low_confidence": false, "score": 85.5, "description": "A Python library for building AI agents that leverage the full power of Google Antigravity.", "language": "Python", "open_issues": 24, "category": "Agent Skills", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "google-antigravity", "docker_image": "", "vscode_extension": "", "weekly_downloads": 134282, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-25T07:11:46Z", "slug": "antigravity-sdk-python", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "https://antigravity.google/product/antigravity-sdk", "homepage_icon": "/site-icons/e3ace022cc338bc5.png", "homepage_icon_for": "https://antigravity.google/product/antigravity-sdk", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: examples/resources/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'google-antigravity' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "google-antigravity", "version": "0.1.21" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:19Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 82.7, "trust_score_v2": 82.7, "rank_v2": 14, "rank_v2_delta": 103, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.8, "identity": 18.0, "transparency": 12.8, "maintenance": 19.7, "adoption": 15.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Better Notion MCP", "repo": "n24q02m/better-notion-mcp", "display_repo": "", "url": "https://github.com/n24q02m/notion", "listing_class": "agent", "rank": 121, "previous_rank": 126, "rank_delta": 5, "stars": 36, "stars_fmt": "36", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 13, "commits_low_confidence": false, "score": 53.7, "description": "Markdown-first Notion for AI agents -- pages, databases, blocks, and comments in one call.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 46, "npm_package": "@n24q02m/better-notion-mcp", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/n24q02m/better-notion-mcp:latest", "vscode_extension": "", "weekly_downloads": 25340, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.8, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-12T00:27:47Z", "slug": "better-notion-mcp", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://mcp.n24q02m.com/servers/better-notion-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'NOTION_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@n24q02m/better-notion-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@n24q02m/better-notion-mcp", "version": "2.41.6" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 82.6, "trust_score_v2": 82.6, "rank_v2": 121, "rank_v2_delta": 18, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.7, "identity": 18.0, "transparency": 14.1, "maintenance": 16.5, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DSH Market", "repo": "dsh-market/dsh-market", "display_repo": "", "url": "https://github.com/dsh-market/dsh-market", "listing_class": "skill", "rank": 15, "previous_rank": 15, "rank_delta": 0, "stars": 6263, "stars_fmt": "6.3k", "forks": 263, "forks_fmt": "263", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 347, "commits_low_confidence": false, "score": 84.1, "description": "The plugin market inside DeepSeek Harness — browse, search, one-click install · DSH 可视化插件市场", "language": "TypeScript", "open_issues": 37, "category": "Agent Skills", "category_rank": 15, "npm_package": "dshmarket", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 138367, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:28:00Z", "slug": "dsh-market", "full_fetched_at": "2026-10-12T16:01:57Z", "source_note": "", "github_homepage": "https://dshmarket.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in package.json", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'dshmarket' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "dshmarket", "version": "1.66.17" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:57Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.6, "trust_score_v2": 82.6, "rank_v2": 15, "rank_v2_delta": 115, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 18.0, "transparency": 11.6, "maintenance": 19.9, "adoption": 16.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Kubernetes MCP Server", "repo": "Flux159/mcp-server-kubernetes", "display_repo": "", "url": "https://github.com/Flux159/mcp-server-kubernetes", "listing_class": "agent", "rank": 122, "previous_rank": 121, "rank_delta": -1, "stars": 1597, "stars_fmt": "1.6k", "forks": 284, "forks_fmt": "284", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 9, "commits_low_confidence": false, "score": 66.7, "description": "MCP Server for kubernetes management commands", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 47, "npm_package": "mcp-server-kubernetes", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7058, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:45:42Z", "slug": "kubernetes-mcp-server", "full_fetched_at": "2026-10-12T04:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-server-kubernetes' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-server-kubernetes", "version": "4.1.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:34Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.4, "trust_score_v2": 82.4, "rank_v2": 122, "rank_v2_delta": 41, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.0, "identity": 18.0, "transparency": 13.3, "maintenance": 15.3, "adoption": 12.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Reef", "repo": "Human-Agent-Society/reef", "display_repo": "", "url": "https://github.com/Human-Agent-Society/reef", "listing_class": "agent", "rank": 123, "previous_rank": 120, "rank_delta": -3, "stars": 7557, "stars_fmt": "7.6k", "forks": 706, "forks_fmt": "706", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 186, "commits_low_confidence": false, "score": 86.5, "description": "Infrastructure for continually self‑improving agents", "language": "Python", "open_issues": 70, "category": "Agent Frameworks", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "reef-infra", "docker_image": "", "vscode_extension": "", "weekly_downloads": 38, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-05T01:52:25Z", "slug": "reef", "full_fetched_at": "2026-10-12T16:02:09Z", "source_note": "", "github_homepage": "https://reefinfra.ai", "homepage_icon": "/site-icons/fef8d43db2c39876.png", "homepage_icon_for": "https://reefinfra.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "E2B", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found E2B dependency 'e2b' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml", "Found credential/config marker 'REEF_UPSTREAM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: tests/reef_service/data/harness_goldens/claude/claude/plugins/tracer/index.js", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'reef-infra' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "reef-infra", "version": "0.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:09Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 82.4, "trust_score_v2": 82.4, "rank_v2": 123, "rank_v2_delta": -11, "trust_v2_adjustment": 2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.4, "identity": 18.0, "transparency": 12.5, "maintenance": 20.0, "adoption": 11.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Roslyn CodeLens", "repo": "MarcelRoozekrans/roslyn-codelens-mcp", "display_repo": "", "url": "https://github.com/MarcelRoozekrans/roslyn-codelens-mcp", "listing_class": "agent", "rank": 124, "previous_rank": 123, "rank_delta": -1, "stars": 61, "stars_fmt": "61", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 61, "commits_low_confidence": false, "score": 63.9, "description": "Roslyn-based MCP server giving AI agents deep semantic understanding of .NET/C# codebases — 67 tools for navigation, call graphs, diagnostics & code fixes, safe refactoring, code-quality auditing, test intelligence, DI graphs, and IL/external-assembly inspection.", "language": "C#", "open_issues": 1, "category": "MCP Servers", "category_rank": 48, "npm_package": "roslyn-codelens-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 69, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:40:09Z", "slug": "roslyn-codelens", "full_fetched_at": "2026-10-11T20:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in npm/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/roslyn-codelens/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'roslyn-codelens-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "roslyn-codelens-mcp", "version": "2.18.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:54Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 82.3, "trust_score_v2": 82.3, "rank_v2": 124, "rank_v2_delta": 38, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.2, "maintenance": 19.2, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Scrivener MCP", "repo": "writerslogic/scrivener-mcp", "display_repo": "", "url": "https://github.com/writerslogic/scrivener-mcp", "listing_class": "agent", "rank": 125, "previous_rank": 127, "rank_delta": 2, "stars": 67, "stars_fmt": "67", "forks": 22, "forks_fmt": "22", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 25, "commits_low_confidence": false, "score": 59.9, "description": "The definitive MCP server for Scrivener — connect your novels, screenplays, and manuscripts to Claude, ChatGPT, and any AI assistant. 53 tools: document management, writing analysis, content enhancement, offline semantic search, and character/plot tracking.", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 49, "npm_package": "scrivener-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 206, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.42, "scorecard_score": 7.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:31:16Z", "slug": "scrivener-mcp", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "https://writerslogic.com/scrivener-mcp/", "homepage_icon": "/site-icons/1c4c81d0b3a12475.png", "homepage_icon_for": "https://writerslogic.com/scrivener-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'scrivener-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "scrivener-mcp", "version": "0.12.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:40Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 81.8, "trust_score_v2": 81.8, "rank_v2": 125, "rank_v2_delta": 17, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.5, "identity": 18.0, "transparency": 15.2, "maintenance": 17.6, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Discord MCP", "repo": "cappyeo/discord-mcp", "display_repo": "", "url": "https://github.com/cappyeo/discord-mcp", "listing_class": "agent", "rank": 126, "previous_rank": 124, "rank_delta": -2, "stars": 130, "stars_fmt": "130", "forks": 21, "forks_fmt": "21", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 14, "commits_low_confidence": false, "score": 58.5, "description": "Open-source Discord MCP server for Claude, Codex, Cursor and other AI clients: 209 typed tools, caller-owned bots, safety controls and verifiable guild builds.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 50, "npm_package": "@discord-mcp/cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1086, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-03T23:29:22Z", "slug": "discord-mcp", "full_fetched_at": "2026-10-12T12:02:59Z", "source_note": "", "github_homepage": "https://cappyeo.github.io/discord-mcp/", "homepage_icon": "/site-icons/adaac12d8a115cff.png", "homepage_icon_for": "https://cappyeo.github.io/discord-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mcp-server-mocks/package.json", "Found MCP-related server path: packages/mcp-server-mocks/src/index.ts", "Found MCP-related server test path: packages/mcp-server/scripts/benchmark/activation-artifact.test.mjs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DISCORD_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@discord-mcp/cli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@discord-mcp/cli", "version": "0.31.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:59Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 81.8, "trust_score_v2": 81.8, "rank_v2": 126, "rank_v2_delta": 31, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.4, "identity": 18.0, "transparency": 14.7, "maintenance": 16.6, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Auth0 MCP Server", "repo": "auth0/auth0-mcp-server", "display_repo": "", "url": "https://github.com/auth0/auth0-mcp-server", "listing_class": "agent", "rank": 127, "previous_rank": 125, "rank_delta": -2, "stars": 121, "stars_fmt": "121", "forks": 49, "forks_fmt": "49", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 44.6, "description": "Connect LLMs and AI agents to Auth0 Management APIs via an MCP server. Use natural-language commands to create apps, deploy Actions, and query logs—runs locally and supports interactive tenant authentication for secure Auth0 administration from AI tools/CLIs.", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 51, "npm_package": "@auth0/auth0-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 8555, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T09:56:18Z", "slug": "auth0-mcp-server", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/auth0-mcp-server-hld.png", "Found MCP-related server path: assets/mcp-server-auth.png", "Found MCP-related server test path: test/integration/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@auth0/auth0-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@auth0/auth0-mcp-server", "version": "0.1.0-beta.19" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:40Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.8, "trust_score_v2": 81.8, "rank_v2": 127, "rank_v2_delta": 49, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.4, "identity": 18.0, "transparency": 14.5, "maintenance": 11.6, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Delimit — API Governance for AI Coding Assistants", "repo": "delimit-ai/delimit-mcp-server", "display_repo": "", "url": "https://github.com/delimit-ai/delimit-mcp-server", "listing_class": "agent", "rank": 128, "previous_rank": 128, "rank_delta": 0, "stars": 24, "stars_fmt": "24", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 69, "commits_low_confidence": false, "score": 60.0, "description": "Building your AI organization: shared records and handoffs, plus a merge gate for AI-written code with signed, replayable attestation. Works with Claude Code, Codex, Cursor, and Gemini CLI.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 52, "npm_package": "delimit-cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2956, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.92, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-24T23:00:11Z", "slug": "delimit-api-governance-for-ai-coding-assistants", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "https://delimit.ai", "homepage_icon": "/site-icons/e6da7032d0ed85bd.png", "homepage_icon_for": "https://delimit.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in gateway/requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (claude-plugin-governance/.claude-plugin/plugin.json)", "Found credential/config marker 'META_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'delimit-cli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "delimit-cli", "version": "4.21.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:03Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.8, "trust_score_v2": 81.8, "rank_v2": 128, "rank_v2_delta": 27, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.7, "identity": 18.0, "transparency": 13.0, "maintenance": 19.4, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ClickHouse", "repo": "ClickHouse/mcp-clickhouse", "display_repo": "", "url": "https://github.com/ClickHouse/mcp-clickhouse", "listing_class": "agent", "rank": 129, "previous_rank": 132, "rank_delta": 3, "stars": 886, "stars_fmt": "886", "forks": 209, "forks_fmt": "209", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 7, "commits_low_confidence": true, "score": 64.1, "description": "Connect ClickHouse to your AI assistants.", "language": "Python", "open_issues": 5, "category": "MCP Servers", "category_rank": 53, "npm_package": "", "crate_package": "", "pypi_package": "mcp-clickhouse", "docker_image": "ghcr.io/clickhouse/mcp-clickhouse:0.4.1", "vscode_extension": "", "weekly_downloads": 53470, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.9, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:23:29Z", "slug": "clickhouse", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP-related server path: mcp_clickhouse/mcp_server.py", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CLICKHOUSE_MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-clickhouse' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-clickhouse", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:50Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 129, "rank_v2_delta": -18, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.0, "identity": 18.0, "transparency": 14.6, "maintenance": 13.4, "adoption": 13.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Teamcity MCP", "repo": "Daghis/teamcity-mcp", "display_repo": "", "url": "https://github.com/Daghis/teamcity-mcp", "listing_class": "agent", "rank": 130, "previous_rank": 129, "rank_delta": -1, "stars": 30, "stars_fmt": "30", "forks": 21, "forks_fmt": "21", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 16, "commits_low_confidence": false, "score": 54.3, "description": "Model Context Protocol (MCP) server for JetBrains TeamCity: control builds, tests, agents and configs from AI coding assistants.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 54, "npm_package": "@daghis/teamcity-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2434, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-09T10:06:40Z", "slug": "teamcity-mcp", "full_fetched_at": "2026-10-12T12:03:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/mcp-server.output-schema.test.ts", "Found MCP-related server test path: tests/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'TEAMCITY_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@daghis/teamcity-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@daghis/teamcity-mcp", "version": "2.12.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:02Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 130, "rank_v2_delta": 36, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.2, "identity": 18.0, "transparency": 13.8, "maintenance": 16.3, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Imap MCP Server", "repo": "nikolausm/imap-mcp-server", "display_repo": "", "url": "https://github.com/nikolausm/imap-mcp-server", "listing_class": "agent", "rank": 131, "previous_rank": 136, "rank_delta": 5, "stars": 107, "stars_fmt": "107", "forks": 55, "forks_fmt": "55", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 33, "commits_low_confidence": false, "score": 64.4, "description": "Full-featured IMAP & SMTP email for AI assistants: search, read, send, organize and clean up multiple mailboxes, with AES-256-encrypted credentials. Works with Claude, Cursor and any MCP client.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 55, "npm_package": "imap-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 528, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.65, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:14:34Z", "slug": "imap-mcp-server", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'IMAP_MCP_WIZARD_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'imap-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "imap-mcp-server", "version": "2.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:04Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 131, "rank_v2_delta": 33, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.2, "identity": 18.0, "transparency": 13.6, "maintenance": 18.1, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Awkoy Notion MCP Server", "repo": "awkoy/notion-mcp-server", "display_repo": "", "url": "https://github.com/awkoy/notion-mcp-server", "listing_class": "agent", "rank": 132, "previous_rank": 130, "rank_delta": -2, "stars": 175, "stars_fmt": "175", "forks": 40, "forks_fmt": "40", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 19, "commits_low_confidence": false, "score": 61.5, "description": "Notion MCP server for Claude, Cursor, ChatGPT & Claude Desktop. Connect AI agents to Notion via Model Context Protocol — pages, databases, blocks, comments, files.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 56, "npm_package": "notion-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3567, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.71, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T15:04:54Z", "slug": "awkoy-notion-mcp-server", "full_fetched_at": "2026-10-12T12:02:42Z", "source_note": "", "github_homepage": "https://yaroslavboiko.com", "homepage_icon": "/site-icons/89e1c855e498b69e.png", "homepage_icon_for": "https://yaroslavboiko.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'NOTION_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'notion-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "notion-mcp-server", "version": "3.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:42Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 132, "rank_v2_delta": 33, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.1, "identity": 18.0, "transparency": 13.3, "maintenance": 16.9, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Blockrun MCP", "repo": "BlockRunAI/blockrun-mcp", "display_repo": "", "url": "https://github.com/BlockRunAI/blockrun-mcp", "listing_class": "agent", "rank": 133, "previous_rank": 134, "rank_delta": 1, "stars": 392, "stars_fmt": "392", "forks": 39, "forks_fmt": "39", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 48, "commits_low_confidence": false, "score": 69.1, "description": "Live data for AI agents — search, research, markets, crypto, X/Twitter. Pay-per-call via x402 micropayments.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 57, "npm_package": "@blockrun/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1144, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.51, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:17:05Z", "slug": "blockrun-mcp", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found credential/config marker 'BLOCKRUN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@blockrun/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@blockrun/mcp", "version": "0.54.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:46Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 133, "rank_v2_delta": 27, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.7, "identity": 18.0, "transparency": 13.0, "maintenance": 18.7, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Zotero MCP", "repo": "54yyyu/zotero-mcp", "display_repo": "", "url": "https://github.com/54yyyu/zotero-mcp", "listing_class": "agent", "rank": 134, "previous_rank": 131, "rank_delta": -3, "stars": 5341, "stars_fmt": "5.3k", "forks": 420, "forks_fmt": "420", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 408, "commits_low_confidence": false, "score": 84.0, "description": "Zotero MCP: Connects your Zotero research library with Claude and other AI assistants via the Model Context Protocol to discuss papers, get summaries, analyze citations, and more.", "language": "Python", "open_issues": 48, "category": "MCP Servers", "category_rank": 58, "npm_package": "", "crate_package": "", "pypi_package": "zotero-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7784, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.07, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:02:45Z", "slug": "zotero-mcp", "full_fetched_at": "2026-10-12T08:02:23Z", "source_note": "", "github_homepage": "https://stevenyuyy.com/zotero-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini", "Found credential/config marker 'ZOTERO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugin/.gitignore", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'zotero-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "zotero-mcp-server", "version": "0.14.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:23Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 134, "rank_v2_delta": 18, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 18.0, "transparency": 12.2, "maintenance": 19.7, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Prompts MCP", "repo": "minipuft/claude-prompts-mcp", "display_repo": "", "url": "https://github.com/minipuft/claude-prompts-mcp", "listing_class": "agent", "rank": 135, "previous_rank": 137, "rank_delta": 2, "stars": 188, "stars_fmt": "188", "forks": 33, "forks_fmt": "33", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 203, "commits_low_confidence": false, "score": 70.8, "description": "MCP server for reusable prompt templates, multi-step workflow chains, and quality gates. Compose agentic workflows with an operator syntax; export as native skills to Claude Code, Cursor, OpenCode, and Gemini CLI.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 59, "npm_package": "claude-prompts", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 296, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:03:20Z", "slug": "claude-prompts-mcp", "full_fetched_at": "2026-10-11T20:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server test path: server/tests/e2e/mcp-server-smoke.test.ts", "Found MCP dependency 'modelcontextprotocol' in server/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in server/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'claude-prompts' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "claude-prompts", "version": "5.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:00Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 135, "rank_v2_delta": 42, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.2, "identity": 18.0, "transparency": 11.7, "maintenance": 20.0, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CopilotKit", "repo": "CopilotKit/CopilotKit", "display_repo": "", "url": "https://github.com/CopilotKit/CopilotKit", "listing_class": "agent", "rank": 136, "previous_rank": 135, "rank_delta": -1, "stars": 37963, "stars_fmt": "38.0k", "forks": 4720, "forks_fmt": "4.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2000, "commits_low_confidence": false, "score": 94.6, "description": "The Frontend Stack for Agents & Generative UI. React, Angular, Mobile, Slack, and more. Makers of the AG-UI Protocol", "language": "TypeScript", "open_issues": 109, "category": "UI & App Builders", "category_rank": 4, "npm_package": "@copilotkit/react-core", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 483197, "dl_source": "npm", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.68, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "copilotkit", "full_fetched_at": "2026-10-12T04:02:30Z", "source_note": "", "github_homepage": "https://docs.copilotkit.ai", "homepage_icon": "/site-icons/44d107a4d04c9132.png", "homepage_icon_for": "https://docs.copilotkit.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/integrations/mcp-apps/scripts/run-mcp-server.bat", "Found MCP-related server path: examples/integrations/mcp-apps/scripts/run-mcp-server.sh", "Found MCP-related server test path: examples/showcases/reskinnable-demo/src/skins/ledgerline/mcp/server.test.ts", "Found MCP-related server test path: packages/runtime/src/agent/__tests__/mcp-servers-integration.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found code dependency '@octokit' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@copilotkit/react-core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@copilotkit/react-core", "version": "1.78.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:30Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.4, "trust_score_v2": 81.4, "rank_v2": 136, "rank_v2_delta": 37, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 18.0, "transparency": 8.5, "maintenance": 20.0, "adoption": 18.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LibreNMS MCP", "repo": "mhajder/librenms-mcp", "display_repo": "", "url": "https://github.com/mhajder/librenms-mcp", "listing_class": "agent", "rank": 137, "previous_rank": 145, "rank_delta": 8, "stars": 41, "stars_fmt": "41", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 18, "commits_low_confidence": false, "score": 55.4, "description": "MCP server for LibreNMS management", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 60, "npm_package": "", "crate_package": "", "pypi_package": "librenms-mcp", "docker_image": "ghcr.io/mhajder/librenms-mcp:1.11.0", "vscode_extension": "", "weekly_downloads": 1296, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T23:02:10Z", "slug": "librenms-mcp", "full_fetched_at": "2026-10-11T20:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'LIBRENMS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'librenms-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "librenms-mcp", "version": "1.11.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:56Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.3, "trust_score_v2": 81.3, "rank_v2": 137, "rank_v2_delta": 31, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.8, "identity": 18.0, "transparency": 13.4, "maintenance": 17.1, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Hypit", "repo": "hypit-ai/hypit", "display_repo": "", "url": "https://github.com/hypit-ai/hypit", "listing_class": "agent", "rank": 138, "previous_rank": 144, "rank_delta": 6, "stars": 21532, "stars_fmt": "21.5k", "forks": 2365, "forks_fmt": "2.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 310, "commits_low_confidence": false, "score": 91.7, "description": "Clone any viral video with AI agents. Not just a script, the whole workflow: swap the face, the words, the B-roll, ship 100 variants in one command, and get your 100M views.", "language": "TypeScript", "open_issues": 7, "category": "Workflow Platforms", "category_rank": 4, "npm_package": "@hypit/hypit", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9001, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 5, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:21:02Z", "slug": "hypit", "full_fetched_at": "2026-10-12T16:02:26Z", "source_note": "", "github_homepage": "https://hypit.ai", "homepage_icon": "/site-icons/03a9018fe8f84f86.png", "homepage_icon_for": "https://hypit.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@hypit/hypit' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@hypit/hypit", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:26Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "source-available", "trust_score": 81.3, "trust_score_v2": 81.3, "rank_v2": 138, "rank_v2_delta": 13, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 18.0, "transparency": 11.2, "maintenance": 20.0, "adoption": 15.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PaSympa Discord MCP", "repo": "PaSympa/discord-mcp", "display_repo": "", "url": "https://github.com/PaSympa/discord-mcp", "listing_class": "agent", "rank": 139, "previous_rank": 146, "rank_delta": 7, "stars": 27, "stars_fmt": "27", "forks": 17, "forks_fmt": "17", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 37, "commits_low_confidence": false, "score": 59.2, "description": "MCP server to control Discord — messages, channels, roles, permissions, members, and moderation", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 61, "npm_package": "@pasympa/discord-mcp", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/pasympa/discord-mcp:2.1.1", "vscode_extension": "", "weekly_downloads": 2024, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.81, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:04:34Z", "slug": "pasympa-discord-mcp", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DISCORD_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@pasympa/discord-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@pasympa/discord-mcp", "version": "2.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:09Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.1, "trust_score_v2": 81.1, "rank_v2": 139, "rank_v2_delta": 33, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.7, "identity": 18.0, "transparency": 13.3, "maintenance": 18.2, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mirroir MCP", "repo": "jfarcand/mirroir-mcp", "display_repo": "", "url": "https://github.com/jfarcand/mirroir-mcp", "listing_class": "agent", "rank": 140, "previous_rank": 155, "rank_delta": 15, "stars": 251, "stars_fmt": "251", "forks": 36, "forks_fmt": "36", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 28, "commits_low_confidence": false, "score": 64.9, "description": "MCP server for controlling a real iPhone via macOS iPhone Mirroring...and any MacOs app. Screenshot, tap, swipe, type — from any MCP client.", "language": "Swift", "open_issues": 2, "category": "MCP Servers", "category_rank": 62, "npm_package": "mirroir-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 579, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.85, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 3, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:51:56Z", "slug": "mirroir-mcp", "full_fetched_at": "2026-10-12T16:02:34Z", "source_note": "", "github_homepage": "https://mirroir.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mirroir-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mirroir-mcp", "version": "0.40.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:34Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 81.1, "trust_score_v2": 81.1, "rank_v2": 140, "rank_v2_delta": 21, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.4, "identity": 18.0, "transparency": 13.0, "maintenance": 17.8, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "vLLM", "repo": "vllm-project/vllm", "display_repo": "", "url": "https://github.com/vllm-project/vllm", "listing_class": "agent", "rank": 141, "previous_rank": 142, "rank_delta": 1, "stars": 93638, "stars_fmt": "93.6k", "forks": 23282, "forks_fmt": "23.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1677, "commits_low_confidence": false, "score": 99.8, "description": "A high-throughput and memory-efficient inference and serving engine for LLMs", "language": "Python", "open_issues": 2592, "category": "LLM Gateways & Infra", "category_rank": 2, "npm_package": "", "crate_package": "", "pypi_package": "vllm", "docker_image": "", "vscode_extension": "", "weekly_downloads": 465993, "dl_source": "pypi", "hn_mentions_30d": 828, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 1, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:45:51Z", "slug": "vllm", "full_fetched_at": "2026-10-12T12:02:23Z", "source_note": "", "github_homepage": "https://vllm.ai", "homepage_icon": "/site-icons/f5f671be7a51c4b1.png", "homepage_icon_for": "https://vllm.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: vllm/entrypoints/mcp/tool_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: csrc/cutlass_extensions/cute_utils.cuh", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'vllm' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "vllm", "version": "0.31.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:23Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 81.0, "trust_score_v2": 81.0, "rank_v2": 141, "rank_v2_delta": 5, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 10.8, "transparency": 14.1, "maintenance": 20.0, "adoption": 19.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pg Aiguide", "repo": "timescale/pg-aiguide", "display_repo": "", "url": "https://github.com/timescale/pg-aiguide", "listing_class": "skill", "rank": 16, "previous_rank": 16, "rank_delta": 0, "stars": 1865, "stars_fmt": "1.9k", "forks": 114, "forks_fmt": "114", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 10, "commits_low_confidence": false, "score": 66.6, "description": "MCP server and Claude plugin for Postgres skills and documentation. Helps AI coding tools generate better PostgreSQL code.", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 16, "npm_package": "@tigerdata/pg-aiguide", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 87, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:48:58Z", "slug": "pg-aiguide", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found Postgres dependency 'pg' in package.json", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'pg' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@tigerdata/pg-aiguide' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@tigerdata/pg-aiguide", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:26Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 81.0, "trust_score_v2": 81.0, "rank_v2": 16, "rank_v2_delta": 155, "trust_v2_adjustment": 4.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.8, "identity": 18.0, "transparency": 13.1, "maintenance": 15.8, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Tambo", "repo": "tambo-ai/tambo", "display_repo": "", "url": "https://github.com/tambo-ai/tambo", "listing_class": "agent", "rank": 142, "previous_rank": 139, "rank_delta": -3, "stars": 11186, "stars_fmt": "11.2k", "forks": 574, "forks_fmt": "574", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 8, "commits_low_confidence": true, "score": 73.9, "description": "Generative UI SDK for React", "language": "TypeScript", "open_issues": 18, "category": "UI & App Builders", "category_rank": 5, "npm_package": "@tambo-ai/react", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7827, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:46:47Z", "slug": "tambo", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "https://tambo.co", "homepage_icon": "/site-icons/491addf9eac2f394.png", "homepage_icon_for": "https://tambo.co", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: apps/api/src/mcp-server/elicitations.ts", "Found MCP-related server path: apps/api/src/mcp-server/prompts.ts", "Found MCP-related server test path: apps/api/src/mcp-server/elicitations.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found credential/config marker 'NEXT_PUBLIC_TAMBO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@tambo-ai/react' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@tambo-ai/react", "version": "1.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:39Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.0, "trust_score_v2": 81.0, "rank_v2": 142, "rank_v2_delta": -13, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 13.0, "maintenance": 13.8, "adoption": 14.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Excalidraw MCP", "repo": "yctimlin/mcp_excalidraw", "display_repo": "", "url": "https://github.com/yctimlin/mcp_excalidraw", "listing_class": "agent", "rank": 143, "previous_rank": 141, "rank_delta": -2, "stars": 2535, "stars_fmt": "2.5k", "forks": 284, "forks_fmt": "284", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 21, "commits_low_confidence": false, "score": 73.2, "description": "MCP server and Claude Code skill for Excalidraw — programmatic canvas toolkit to create, edit, and export diagrams via AI agents with real-time canvas sync.", "language": "TypeScript", "open_issues": 34, "category": "MCP Servers", "category_rank": 63, "npm_package": "mcp-excalidraw-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4662, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:50:06Z", "slug": "excalidraw-mcp", "full_fetched_at": "2026-10-12T04:02:06Z", "source_note": "", "github_homepage": "https://mcp-excalidraw-landing.vercel.app/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/core/mcp-server.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-excalidraw-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-excalidraw-server", "version": "2.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:06Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 81.0, "trust_score_v2": 81.0, "rank_v2": 143, "rank_v2_delta": 44, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.0, "identity": 18.0, "transparency": 11.7, "maintenance": 17.2, "adoption": 13.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Camofox Browser", "repo": "jo-inc/camofox-browser", "display_repo": "", "url": "https://github.com/jo-inc/camofox-browser", "listing_class": "agent", "rank": 144, "previous_rank": 140, "rank_delta": -4, "stars": 11548, "stars_fmt": "11.5k", "forks": 1154, "forks_fmt": "1.2k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 52, "commits_low_confidence": false, "score": 84.4, "description": "Stealth headless browser for AI agents — bypass Cloudflare, bot detection, and anti-scraping. Drop-in Puppeteer/Playwright replacement.", "language": "JavaScript", "open_issues": 153, "category": "Browser & Computer Use", "category_rank": 9, "npm_package": "@askjo/camofox-browser", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 15175, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-06T17:57:31Z", "slug": "camofox-browser", "full_fetched_at": "2026-10-12T16:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CAMOFOX_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: plugins/persistence/AGENTS.md", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@askjo/camofox-browser' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@askjo/camofox-browser", "version": "1.18.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:34Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.9, "trust_score_v2": 80.9, "rank_v2": 144, "rank_v2_delta": -10, "trust_v2_adjustment": 2.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 18.0, "transparency": 12.7, "maintenance": 18.5, "adoption": 15.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Openrouter MCP Multimodal", "repo": "stabgan/openrouter-mcp-multimodal", "display_repo": "", "url": "https://github.com/stabgan/openrouter-mcp-multimodal", "listing_class": "agent", "rank": 145, "previous_rank": 147, "rank_delta": 2, "stars": 97, "stars_fmt": "97", "forks": 29, "forks_fmt": "29", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 420, "commits_low_confidence": false, "score": 68.8, "description": "MCP server for OpenRouter — chat with 300+ LLMs (Claude, Gemini, GPT), analyze images / audio / video, generate images / speech / music / video (Veo 3.1, Sora, Seedance, Wan) from Claude Desktop, Cursor, Kiro, VS Code.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 64, "npm_package": "@stabgan/openrouter-mcp-multimodal", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/stabgan/openrouter-mcp-multimodal:4.5.1", "vscode_extension": "", "weekly_downloads": 15550, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-09T16:52:04Z", "slug": "openrouter-mcp-multimodal", "full_fetched_at": "2026-10-12T00:02:18Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: python/mcp_server_openrouter_multimodal/__init__.py", "Found MCP-related server path: python/mcp_server_openrouter_multimodal/__main__.py", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@stabgan/openrouter-mcp-multimodal' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@stabgan/openrouter-mcp-multimodal", "version": "5.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:18Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 80.8, "trust_score_v2": 80.8, "rank_v2": 145, "rank_v2_delta": 22, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.6, "identity": 18.0, "transparency": 13.3, "maintenance": 20.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Talkthrough MCP", "repo": "korovin-aa97/talkthrough-mcp", "display_repo": "", "url": "https://github.com/korovin-aa97/talkthrough-mcp", "listing_class": "agent", "rank": 146, "previous_rank": 151, "rank_delta": 5, "stars": 31, "stars_fmt": "31", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 18, "commits_low_confidence": false, "score": 52.0, "description": "Recordings in. Agent-ready evidence out. Local-first MCP for transcripts, keyframes, OCR, speakers, and wall-clock evidence.", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 65, "npm_package": "", "crate_package": "", "pypi_package": "talkthrough-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 298, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.38, "scorecard_score": 7.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:31:48Z", "slug": "talkthrough-mcp", "full_fetched_at": "2026-10-12T16:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (integrations/claude-code/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'talkthrough-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "talkthrough-mcp", "version": "0.4.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:40Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.7, "trust_score_v2": 80.7, "rank_v2": 146, "rank_v2_delta": 42, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.8, "identity": 18.0, "transparency": 14.9, "maintenance": 16.4, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Openzim MCP", "repo": "cameronrye/openzim-mcp", "display_repo": "", "url": "https://github.com/cameronrye/openzim-mcp", "listing_class": "agent", "rank": 147, "previous_rank": 138, "rank_delta": -9, "stars": 145, "stars_fmt": "145", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 5, "commits_low_confidence": false, "score": 51.9, "description": "OpenZIM MCP is a modern, secure, and high-performance MCP (Model Context Protocol) server that enables AI models to access and search ZIM format knowledge bases offline.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 66, "npm_package": "", "crate_package": "", "pypi_package": "openzim-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 291, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Dependency-Update-Tool": 10, "Code-Review": 0, "Maintained": 10, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "Security-Policy": 10, "Token-Permissions": 10, "Pinned-Dependencies": 10, "CII-Best-Practices": 0, "Signed-Releases": 0, "Branch-Protection": -1, "Vulnerabilities": 0, "SAST": 10, "License": 10, "Packaging": 10, "Fuzzing": 0, "Contributors": 0, "CI-Tests": 9 }, "scorecard_scanned_at": "2026-10-12T12:06:33Z", "slug": "openzim-mcp", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "https://cameronrye.github.io/openzim-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/fixtures/mcp_server_schema_2025-12-11.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OPENZIM_MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'openzim-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openzim-mcp", "version": "3.3.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:52Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.7, "trust_score_v2": 80.7, "rank_v2": 147, "rank_v2_delta": 31, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.7, "identity": 18.0, "transparency": 14.1, "maintenance": 14.4, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DSH Better Sidebar", "repo": "omdsh-dev/DSH-better-sidebar", "display_repo": "", "url": "https://github.com/omdsh-dev/DSH-better-sidebar", "listing_class": "skill", "rank": 17, "previous_rank": 17, "rank_delta": 0, "stars": 4130, "stars_fmt": "4.1k", "forks": 397, "forks_fmt": "397", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 420, "commits_low_confidence": false, "score": 83.8, "description": "开放的侧边栏底座，支持三方拓展注册新侧边栏页面。内置文件渲染编辑/终端/侧边对话/Git/子代理页面 ｜ Open sidebar foundation, supports third-party extensions to register new sidebar pages. Built-in file rendering/editing, terminal, side chat, Git, and sub-agent pages.", "language": "TypeScript", "open_issues": 104, "category": "Agent Skills", "category_rank": 17, "npm_package": "dsh-better-sidebar", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 57806, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:58:38Z", "slug": "dsh-better-sidebar", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in package.json", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'dsh-better-sidebar' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "dsh-better-sidebar", "version": "0.25.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.7, "trust_score_v2": 80.7, "rank_v2": 17, "rank_v2_delta": 142, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 18.0, "transparency": 11.6, "maintenance": 20.0, "adoption": 15.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qase Test Management", "repo": "qase-tms/qase-mcp-server", "display_repo": "", "url": "https://github.com/qase-tms/qase-mcp-server", "listing_class": "agent", "rank": 148, "previous_rank": 159, "rank_delta": 11, "stars": 37, "stars_fmt": "37", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 17, "commits_low_confidence": false, "score": 55.0, "description": "An official Qase MCP server", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 67, "npm_package": "@qase/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4848, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 3, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-12T06:58:30Z", "slug": "qase-test-management", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'QASE_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@qase/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@qase/mcp-server", "version": "2.7.5" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.4, "trust_score_v2": 80.4, "rank_v2": 148, "rank_v2_delta": 31, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.6, "identity": 18.0, "transparency": 14.1, "maintenance": 17.0, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mdk MCP Server", "repo": "SAP/mdk-mcp-server", "display_repo": "", "url": "https://github.com/SAP/mdk-mcp-server", "listing_class": "agent", "rank": 149, "previous_rank": 156, "rank_delta": 7, "stars": 37, "stars_fmt": "37", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 51.8, "description": "Model Context Protocol (MCP) server for AI-assisted development (\"vibe coding\") of MDK applications.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 68, "npm_package": "@sap/mdk-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 11098, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:13:39Z", "slug": "mdk-mcp-server", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface", "Found code dependency '@octokit' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@sap/mdk-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@sap/mdk-mcp-server", "version": "0.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:07Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 80.4, "trust_score_v2": 80.4, "rank_v2": 149, "rank_v2_delta": 40, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.8, "identity": 18.0, "transparency": 14.0, "maintenance": 14.0, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Copilot Money", "repo": "ignaciohermosillacornejo/copilot-money-mcp", "display_repo": "", "url": "https://github.com/ignaciohermosillacornejo/copilot-money-mcp", "listing_class": "agent", "rank": 150, "previous_rank": 149, "rank_delta": -1, "stars": 84, "stars_fmt": "84", "forks": 30, "forks_fmt": "30", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 281, "commits_low_confidence": false, "score": 68.4, "description": "MCP server for Copilot Money App - AI powered personal finance queries using local data", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 69, "npm_package": "copilot-money-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 131, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:16:12Z", "slug": "copilot-money", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "https://ignaciohermosillacornejo.github.io/copilot-money-mcp/", "homepage_icon": "/site-icons/446bf801534f3272.png", "homepage_icon_for": "https://ignaciohermosillacornejo.github.io/copilot-money-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'copilot-money-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "copilot-money-mcp", "version": "2.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:24Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.4, "trust_score_v2": 80.4, "rank_v2": 150, "rank_v2_delta": 52, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.2, "identity": 18.0, "transparency": 13.8, "maintenance": 19.9, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Music Studio", "repo": "linxule/mcp-music-studio", "display_repo": "", "url": "https://github.com/linxule/mcp-music-studio", "listing_class": "agent", "rank": 151, "previous_rank": 150, "rank_delta": -1, "stars": 74, "stars_fmt": "74", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 137, "commits_low_confidence": false, "score": 65.0, "description": "Two-mode MCP music studio: scored composition (ABC notation) and live performance (Strudel). Interactive ext-apps UI with sheet music rendering, 30+ instruments, style presets, and live coding REPL.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 70, "npm_package": "mcp-music-studio", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1863, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-09-29T04:10:33Z", "slug": "music-studio", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "https://mcp-music-studio.linxule.workers.dev/mcp", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in worker/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-music-studio' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-music-studio", "version": "0.12.4" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:57Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 80.4, "trust_score_v2": 80.4, "rank_v2": 151, "rank_v2_delta": 52, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.7, "identity": 18.0, "transparency": 13.3, "maintenance": 19.5, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Caldav MCP", "repo": "dominik1001/caldav-mcp", "display_repo": "", "url": "https://github.com/dominik1001/caldav-mcp", "listing_class": "agent", "rank": 152, "previous_rank": 218, "rank_delta": 66, "stars": 103, "stars_fmt": "103", "forks": 35, "forks_fmt": "35", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 10, "commits_low_confidence": false, "score": 57.3, "description": "🗓️ A CalDAV Model Context Protocol (MCP) server to expose calendar operations as tools for AI assistants.", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 71, "npm_package": "caldav-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 530, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:03:36Z", "slug": "caldav-mcp", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'caldav-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "caldav-mcp", "version": "0.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:05Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.4, "trust_score_v2": 80.4, "rank_v2": 152, "rank_v2_delta": 52, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.5, "identity": 18.0, "transparency": 13.2, "maintenance": 16.2, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Better Email MCP", "repo": "n24q02m/better-email-mcp", "display_repo": "", "url": "https://github.com/n24q02m/email", "listing_class": "agent", "rank": 153, "previous_rank": 133, "rank_delta": -20, "stars": 33, "stars_fmt": "33", "forks": 17, "forks_fmt": "17", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 12, "commits_low_confidence": false, "score": 53.9, "description": "IMAP/SMTP email for AI agents -- read, send, organize folders, and manage attachments across multiple accounts, with auto-discovery.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 72, "npm_package": "@n24q02m/better-email-mcp", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/n24q02m/better-email-mcp:latest", "vscode_extension": "", "weekly_downloads": 20278, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.66, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:37:00Z", "slug": "better-email-mcp", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://mcp.n24q02m.com/servers/better-email-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@n24q02m/better-email-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@n24q02m/better-email-mcp", "version": "1.41.5" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 80.4, "trust_score_v2": 80.4, "rank_v2": 153, "rank_v2_delta": 44, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.7, "identity": 18.0, "transparency": 13.2, "maintenance": 16.4, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Api MCP Server", "repo": "hostinger/api-mcp-server", "display_repo": "", "url": "https://github.com/hostinger/api-mcp-server", "listing_class": "agent", "rank": 154, "previous_rank": 157, "rank_delta": 3, "stars": 160, "stars_fmt": "160", "forks": 58, "forks_fmt": "58", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 31, "commits_low_confidence": false, "score": 65.2, "description": "", "language": "TypeScript", "open_issues": 11, "category": "MCP Servers", "category_rank": 73, "npm_package": "hostinger-api-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 196831, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:42:55Z", "slug": "api-mcp-server", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "https://developers.hostinger.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'hostinger-api-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "hostinger-api-mcp", "version": "2.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:53Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.4, "trust_score_v2": 80.4, "rank_v2": 154, "rank_v2_delta": 21, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.4, "identity": 18.0, "transparency": 13.1, "maintenance": 18.0, "adoption": 12.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "UniFi Access MCP", "repo": "sirkirby/unifi-mcp", "display_repo": "", "url": "https://github.com/sirkirby/unifi-mcp", "listing_class": "agent", "rank": 155, "previous_rank": 160, "rank_delta": 5, "stars": 890, "stars_fmt": "890", "forks": 117, "forks_fmt": "117", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 78, "commits_low_confidence": false, "score": 76.0, "description": "MCP servers & Graph API for the UniFi suite of applications, Network, Protect, and Access", "language": "Python", "open_issues": 23, "category": "MCP Servers", "category_rank": 74, "npm_package": "", "crate_package": "", "pypi_package": "unifi-access-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 658, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.65, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:11:05Z", "slug": "unifi-access-mcp", "full_fetched_at": "2026-10-12T00:02:12Z", "source_note": "", "github_homepage": "http://unifimcp.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/cross-product/.claude-plugin/plugin.json)", "Found credential/config marker 'UNIFI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'unifi-access-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.3, "trust_score_v2": 80.3, "rank_v2": 155, "rank_v2_delta": -35, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.9, "identity": 18.0, "transparency": 13.3, "maintenance": 19.6, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Comfyui MCP", "repo": "artokun/comfyui-mcp", "display_repo": "", "url": "https://github.com/artokun/comfyui-mcp", "listing_class": "agent", "rank": 156, "previous_rank": 153, "rank_delta": -3, "stars": 816, "stars_fmt": "816", "forks": 137, "forks_fmt": "137", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 16, "commits_low_confidence": false, "score": 66.8, "description": "Local-first, agent-native control plane for ComfyUI — MCP server + sidebar agent that generates images, video & audio, authors and runs workflows, and edits your live graph in natural language on ANY LLM (Claude, ChatGPT, Gemini, offline Ollama, or any hosted model). 178 tools, 36 AI skills, 55…", "language": "TypeScript", "open_issues": 76, "category": "MCP Servers", "category_rank": 75, "npm_package": "comfyui-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 20343, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:46:45Z", "slug": "comfyui-mcp", "full_fetched_at": "2026-10-12T12:02:41Z", "source_note": "", "github_homepage": "https://comfyui-mcp.artokun.io/docs", "homepage_icon": "/site-icons/7267767d94fc4eb9.png", "homepage_icon_for": "https://comfyui-mcp.artokun.io/docs", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found credential/config marker 'COMFYUI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'comfyui-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "comfyui-mcp", "version": "0.52.205" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:41Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.3, "trust_score_v2": 80.3, "rank_v2": 156, "rank_v2_delta": 14, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.2, "identity": 18.0, "transparency": 12.8, "maintenance": 16.4, "adoption": 12.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CrewAI", "repo": "CrewAIInc/crewAI", "display_repo": "", "url": "https://github.com/crewAIInc/crewAI", "listing_class": "agent", "rank": 157, "previous_rank": 161, "rank_delta": 4, "stars": 59604, "stars_fmt": "59.6k", "forks": 8705, "forks_fmt": "8.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 99, "commits_low_confidence": false, "score": 96.9, "description": "Framework for orchestrating role-playing, autonomous AI agents. By fostering collaborative intelligence, CrewAI empowers agents to work together seamlessly, tackling complex tasks.", "language": "Python", "open_issues": 252, "category": "Agent Frameworks", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "crewai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 633544, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:51:59Z", "slug": "crewai", "full_fetched_at": "2026-10-12T04:02:33Z", "source_note": "", "github_homepage": "https://crewai.com", "homepage_icon": "/site-icons/437d790f96585a49.png", "homepage_icon_for": "https://crewai.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/edge/ar/mcp/multiple-servers.mdx", "Found MCP-related server docs path: docs/edge/en/mcp/multiple-servers.mdx" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Qdrant", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in lib/crewai/pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in lib/crewai/pyproject.toml", "Found Google Gemini dependency 'google-genai' in lib/crewai/pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in lib/crewai/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in lib/crewai/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: lib/crewai/src/crewai/a2a/extensions/__init__.py", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'redis' in lib/crewai/pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'crewai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "crewai", "version": "1.15.27" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:33Z" }, "evidence_grade": "A", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.2, "trust_score_v2": 80.2, "rank_v2": 157, "rank_v2_delta": -35, "trust_v2_adjustment": 1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 10.8, "transparency": 14.8, "maintenance": 20.0, "adoption": 19.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AIquila — Nextcloud MCP Server", "repo": "elgorro/aiquila", "display_repo": "", "url": "https://github.com/elgorro/aiquila", "listing_class": "agent", "rank": 158, "previous_rank": 143, "rank_delta": -15, "stars": 38, "stars_fmt": "38", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 34, "commits_low_confidence": false, "score": 58.6, "description": "Private AI for your Nextcloud — an MCP server (316 tools), a native Nextcloud app with chat and Coworkers, and one-command Hetzner deployment.", "language": "PHP", "open_issues": 89, "category": "MCP Servers", "category_rank": 76, "npm_package": "aiquila-mcp", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/elgorro/aiquila-mcp:0.3.23", "vscode_extension": "", "weekly_downloads": 328, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 4, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:37:01Z", "slug": "aiquila-nextcloud-mcp-server", "full_fetched_at": "2026-10-12T16:01:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: docker/mcp-server/Dockerfile", "Found MCP-related server path: docker/mcp-server/Dockerfile.dev", "Found MCP-related server docs path: docs/dev/mcp-server-architecture.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Mistral AI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in hetzner/scripts/package.json", "README/docs also mention Anthropic", "Found Mistral AI dependency 'mistralai' in mcp-server/scripts/package.json", "README/docs also mention Mistral AI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'aiquila-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "aiquila-mcp", "version": "0.4.16" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:51Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.2, "trust_score_v2": 80.2, "rank_v2": 158, "rank_v2_delta": 38, "trust_v2_adjustment": 5.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 12.8, "maintenance": 17.8, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Enquire MCP", "repo": "oomkapwn/enquire-mcp", "display_repo": "", "url": "https://github.com/oomkapwn/enquire-mcp", "listing_class": "agent", "rank": 159, "previous_rank": 148, "rank_delta": -11, "stars": 34, "stars_fmt": "34", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 7, "commits_low_confidence": true, "score": 49.8, "description": "The #1 Obsidian MCP for AI memory — freshness-aware, cited, local-first and read-only by default. Dataview, Bases, PDFs, every agent.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 77, "npm_package": "@oomkapwn/enquire-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 916, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-11T20:58:07Z", "slug": "enquire-mcp", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://oomkapwn.github.io/enquire-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@oomkapwn/enquire-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@oomkapwn/enquire-mcp", "version": "3.11.6" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:10Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.1, "trust_score_v2": 80.1, "rank_v2": 159, "rank_v2_delta": 50, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.6, "identity": 18.0, "transparency": 14.0, "maintenance": 13.8, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Notion MCP Server", "repo": "makenotion/notion-mcp-server", "display_repo": "", "url": "https://github.com/makenotion/notion-mcp-server", "listing_class": "agent", "rank": 160, "previous_rank": 158, "rank_delta": -2, "stars": 4666, "stars_fmt": "4.7k", "forks": 634, "forks_fmt": "634", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 4, "commits_low_confidence": false, "score": 65.8, "description": "Official Notion MCP Server", "language": "TypeScript", "open_issues": 157, "category": "MCP Servers", "category_rank": 78, "npm_package": "@notionhq/notion-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 191526, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.52, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:05:04Z", "slug": "notion-mcp-server", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/openapi-mcp-server/LICENSE", "Found MCP-related server path: src/openapi-mcp-server/README.md", "Found MCP-related server test path: src/openapi-mcp-server/client/__tests__/http-client-upload.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'NOTION_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@notionhq/notion-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@notionhq/notion-mcp-server", "version": "2.5.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:51Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.1, "trust_score_v2": 80.1, "rank_v2": 160, "rank_v2_delta": 22, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 12.3, "maintenance": 13.3, "adoption": 15.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FastMCP", "repo": "PrefectHQ/fastmcp", "display_repo": "", "url": "https://github.com/PrefectHQ/fastmcp", "listing_class": "agent", "rank": 161, "previous_rank": 162, "rank_delta": 1, "stars": 28051, "stars_fmt": "28.1k", "forks": 2456, "forks_fmt": "2.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 241, "commits_low_confidence": false, "score": 92.5, "description": "🚀 The fast, Pythonic way to build MCP servers and clients.", "language": "Python", "open_issues": 354, "category": "Protocols & Tool Integration", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "fastmcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 13979855, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-03T23:46:38Z", "slug": "fastmcp", "full_fetched_at": "2026-10-12T08:02:18Z", "source_note": "", "github_homepage": "https://gofastmcp.com", "homepage_icon": "/site-icons/e39a9929900c5184.png", "homepage_icon_for": "https://gofastmcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/publish-fastmcp-remote.yml", "Found MCP-related server path: .github/workflows/publish-fastmcp-slim.yml", "Found MCP-related server docs path: docs/apps/fastmcp-app.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in fastmcp_slim/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'fastmcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "fastmcp", "version": "4.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:18Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 80.0, "trust_score_v2": 80.0, "rank_v2": 161, "rank_v2_delta": 24, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Modlens", "repo": "liustack/modlens", "display_repo": "", "url": "https://github.com/liustack/modlens", "listing_class": "skill", "rank": 18, "previous_rank": 18, "rank_delta": 0, "stars": 4223, "stars_fmt": "4.2k", "forks": 130, "forks_fmt": "130", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 25, "commits_low_confidence": false, "score": 73.1, "description": "The first vision plugin for DeepSeek Harness, and the vision bridge for every text-only coding agent. Paste an image, get structured JSON evidence (OCR, layout, semantics). | 全网最强 DeepSeek Harness 外挂视觉插件，为 DeepSeek、GLM 等纯文本模型外挂视觉能力，粘贴图片即得结构化 JSON 证据（OCR、版面、语义）。", "language": "TypeScript", "open_issues": 3, "category": "Agent Skills", "category_rank": 18, "npm_package": "@liustack/modlens", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 24941, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:02:51Z", "slug": "modlens", "full_fetched_at": "2026-10-11T20:01:50Z", "source_note": "", "github_homepage": "https://liustack.dev/tools/modlens", "homepage_icon": "/site-icons/1a6756efbffcbfcf.png", "homepage_icon_for": "https://liustack.dev/tools/modlens", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@liustack/modlens' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@liustack/modlens", "version": "3.26.6" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:50Z" }, "evidence_grade": "A", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 80.0, "trust_score_v2": 80.0, "rank_v2": 18, "rank_v2_delta": 156, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.6, "identity": 18.0, "transparency": 12.7, "maintenance": 17.1, "adoption": 14.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Touchdesigner MCP", "repo": "8beeeaaat/touchdesigner-mcp", "display_repo": "", "url": "https://github.com/8beeeaaat/touchdesigner-mcp", "listing_class": "agent", "rank": 162, "previous_rank": 166, "rank_delta": 4, "stars": 576, "stars_fmt": "576", "forks": 61, "forks_fmt": "61", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 7, "commits_low_confidence": true, "score": 61.2, "description": "MCP server for TouchDesigner", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 79, "npm_package": "touchdesigner-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 963, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-27T17:39:32Z", "slug": "touchdesigner-mcp", "full_fetched_at": "2026-10-12T08:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/touchdesigner/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .agents/plugins/marketplace.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'touchdesigner-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "touchdesigner-mcp-server", "version": "2.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:21Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.9, "trust_score_v2": 79.9, "rank_v2": 162, "rank_v2_delta": 46, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 12.9, "maintenance": 13.8, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Obsidian Sync MCP", "repo": "es617/obsidian-sync-mcp", "display_repo": "", "url": "https://github.com/es617/obsidian-sync-mcp", "listing_class": "agent", "rank": 163, "previous_rank": 169, "rank_delta": 6, "stars": 59, "stars_fmt": "59", "forks": 27, "forks_fmt": "27", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 31, "commits_low_confidence": false, "score": 61.1, "description": "MCP server for Obsidian — access your vault from any AI agent, even when your machine is off. Powered by Self-hosted LiveSync.", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 80, "npm_package": "obsidian-sync-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 616, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-10T15:00:27Z", "slug": "obsidian-sync-mcp", "full_fetched_at": "2026-10-12T16:01:53Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'obsidian-sync-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "obsidian-sync-mcp", "version": "0.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:53Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.8, "trust_score_v2": 79.8, "rank_v2": 163, "rank_v2_delta": 30, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.8, "identity": 18.0, "transparency": 14.1, "maintenance": 17.9, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mikrotik MCP", "repo": "jeff-nasseri/mikrotik-mcp", "display_repo": "", "url": "https://github.com/wiresage/mikrotik-mcp", "listing_class": "agent", "rank": 164, "previous_rank": 163, "rank_delta": -1, "stars": 299, "stars_fmt": "299", "forks": 67, "forks_fmt": "67", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 36, "commits_low_confidence": false, "score": 68.0, "description": "MCP server for Mikrotik", "language": "Python", "open_issues": 13, "category": "MCP Servers", "category_rank": 81, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-mikrotik", "docker_image": "", "vscode_extension": "", "weekly_downloads": 695, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 3, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-01T15:57:54Z", "slug": "mikrotik-mcp", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "https://mikrotik-mcp.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_mikrotik/configured_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-server-mikrotik' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-mikrotik", "version": "0.24.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.8, "trust_score_v2": 79.8, "rank_v2": 164, "rank_v2_delta": 50, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.6, "identity": 18.0, "transparency": 13.3, "maintenance": 18.2, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Memorylens MCP", "repo": "MarcelRoozekrans/memorylens-mcp", "display_repo": "", "url": "https://github.com/MarcelRoozekrans/memorylens-mcp", "listing_class": "agent", "rank": 165, "previous_rank": 165, "rank_delta": 0, "stars": 10, "stars_fmt": "10", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 37, "commits_low_confidence": false, "score": 53.7, "description": "MCP server for .NET memory profiling with AI-actionable code fix suggestions, powered by JetBrains dotMemory", "language": "C#", "open_issues": 2, "category": "MCP Servers", "category_rank": 82, "npm_package": "memorylens-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 46, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": -1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:40:24Z", "slug": "memorylens-mcp", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in npm/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'memorylens-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "memorylens-mcp", "version": "2.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:53Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.5, "trust_score_v2": 79.5, "rank_v2": 165, "rank_v2_delta": 52, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.6, "identity": 18.0, "transparency": 13.3, "maintenance": 18.2, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Illustrator MCP Server", "repo": "ie3jp/illustrator-mcp-server", "display_repo": "", "url": "https://github.com/ie3jp/illustrator-mcp-server", "listing_class": "agent", "rank": 166, "previous_rank": 168, "rank_delta": 2, "stars": 159, "stars_fmt": "159", "forks": 20, "forks_fmt": "20", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 77, "commits_low_confidence": false, "score": 66.1, "description": "MCP server for Adobe Illustrator with 63 tools — read, create, and export design data. Everything the official Illustrator MCP (beta) can do and more, on stable Illustrator.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 83, "npm_package": "illustrator-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 884, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:45:57Z", "slug": "illustrator-mcp-server", "full_fetched_at": "2026-10-12T16:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/ie3-design-bridge/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'illustrator-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "illustrator-mcp-server", "version": "1.10.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:23Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.5, "trust_score_v2": 79.5, "rank_v2": 166, "rank_v2_delta": 49, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.6, "identity": 18.0, "transparency": 13.3, "maintenance": 18.7, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Opik MCP Server", "repo": "comet-ml/opik-mcp", "display_repo": "", "url": "https://github.com/comet-ml/opik-mcp", "listing_class": "agent", "rank": 167, "previous_rank": 152, "rank_delta": -15, "stars": 221, "stars_fmt": "221", "forks": 37, "forks_fmt": "37", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 122, "commits_low_confidence": false, "score": 70.8, "description": "Model Context Protocol (MCP) server for Opik, the open-source LLM observability and evaluation platform, built by Comet. Read traces, log scores, and manage prompts from Claude Code, Cursor, or VS Code.", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 84, "npm_package": "opik-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 98, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:12:46Z", "slug": "opik-mcp-server", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "https://www.comet.com/site/products/opik/", "homepage_icon": "/site-icons/44bb46abcf220196.png", "homepage_icon_for": "https://www.comet.com/site/products/opik/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude/hooks') in pyproject.toml", "Found credential/config marker 'OPIK_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'opik-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "opik-mcp", "version": "2.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:00Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 79.5, "trust_score_v2": 79.5, "rank_v2": 167, "rank_v2_delta": 25, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 13.1, "maintenance": 19.7, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Filesystem MCP", "repo": "j0hanz/filesystem-mcp", "display_repo": "", "url": "https://github.com/j0hanz/filesystem-mcp", "listing_class": "agent", "rank": 168, "previous_rank": 183, "rank_delta": 15, "stars": 24, "stars_fmt": "24", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 325, "commits_low_confidence": false, "score": 62.3, "description": "Filesystem MCP server for AI assistants. Search, read, edit, and manage local files in directories you choose.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 85, "npm_package": "@j0hanz/filesystem-mcp", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/j0hanz/filesystem-mcp:1.19.1", "vscode_extension": "", "weekly_downloads": 1191, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:34:45Z", "slug": "filesystem-mcp", "full_fetched_at": "2026-10-12T16:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json", "Found MCP dependency 'modelcontextprotocol' in examples/clients/fsq/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@j0hanz/filesystem-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@j0hanz/filesystem-mcp", "version": "2.7.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.5, "trust_score_v2": 79.5, "rank_v2": 168, "rank_v2_delta": 48, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.5, "identity": 18.0, "transparency": 12.8, "maintenance": 20.0, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bright Data MCP", "repo": "brightdata/brightdata-mcp", "display_repo": "", "url": "https://github.com/brightdata/brightdata-mcp", "listing_class": "agent", "rank": 169, "previous_rank": 164, "rank_delta": -5, "stars": 2672, "stars_fmt": "2.7k", "forks": 332, "forks_fmt": "332", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 30, "commits_low_confidence": false, "score": 75.8, "description": "A powerful Model Context Protocol (MCP) server that provides an all-in-one solution for public web access.", "language": "JavaScript", "open_issues": 13, "category": "MCP Servers", "category_rank": 86, "npm_package": "@brightdata/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12534, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:18:04Z", "slug": "bright-data-mcp", "full_fetched_at": "2026-10-12T04:02:18Z", "source_note": "", "github_homepage": "https://brightdata.com/", "homepage_icon": "/site-icons/09d27511285a3bf3.png", "homepage_icon_for": "https://brightdata.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@brightdata/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@brightdata/mcp", "version": "3.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:18Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.5, "trust_score_v2": 79.5, "rank_v2": 169, "rank_v2_delta": 22, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.5, "identity": 18.0, "transparency": 11.7, "maintenance": 17.9, "adoption": 13.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Semantic Scholar MCP Server", "repo": "smaniches/semantic-scholar-mcp", "display_repo": "", "url": "https://github.com/smaniches/semantic-scholar-mcp", "listing_class": "agent", "rank": 170, "previous_rank": 175, "rank_delta": 5, "stars": 24, "stars_fmt": "24", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 48.1, "description": "Semantic Scholar MCP server: 14 typed tools for paper search, citation graphs, author profiles, recommendations, PyPI/Docker.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 87, "npm_package": "", "crate_package": "", "pypi_package": "s2-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 820, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.73, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 3, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T17:03:53Z", "slug": "semantic-scholar-mcp-server", "full_fetched_at": "2026-10-12T00:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SEMANTIC_SCHOLAR_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 's2-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "s2-mcp-server", "version": "1.7.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:11Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.4, "trust_score_v2": 79.4, "rank_v2": 170, "rank_v2_delta": 35, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.4, "identity": 18.0, "transparency": 14.8, "maintenance": 14.0, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Linux MCP Server", "repo": "rhel-lightspeed/linux-mcp-server", "display_repo": "", "url": "https://github.com/rhel-lightspeed/linux-mcp-server", "listing_class": "agent", "rank": 171, "previous_rank": 171, "rank_delta": 0, "stars": 317, "stars_fmt": "317", "forks": 66, "forks_fmt": "66", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 29, "commits_low_confidence": false, "score": 66.6, "description": "Tools to allow LLM clients to interact with Linux systems remotely", "language": "Python", "open_issues": 19, "category": "MCP Servers", "category_rank": 88, "npm_package": "", "crate_package": "", "pypi_package": "linux-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 646, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 8, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:00:21Z", "slug": "linux-mcp-server", "full_fetched_at": "2026-10-12T00:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/linux_mcp_server/__init__.py", "Found MCP-related server path: src/linux_mcp_server/__main__.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Redis dependency 'redis' in .konflux/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in .konflux/requirements.txt" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'linux-mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "linux-mcp-server", "version": "1.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:56Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 79.4, "trust_score_v2": 79.4, "rank_v2": 171, "rank_v2_delta": -28, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.1, "identity": 18.0, "transparency": 13.0, "maintenance": 17.8, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Langfuse", "repo": "langfuse/langfuse", "display_repo": "", "url": "https://github.com/langfuse/langfuse", "listing_class": "agent", "rank": 172, "previous_rank": 172, "rank_delta": 0, "stars": 35696, "stars_fmt": "35.7k", "forks": 3977, "forks_fmt": "4.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 762, "commits_low_confidence": false, "score": 94.0, "description": "🪢 Open source agent evals & observability: Trace, evaluate, and improve LLM applications with one open platform.", "language": "TypeScript", "open_issues": 326, "category": "Observability & Evaluation", "category_rank": 6, "npm_package": "langfuse", "crate_package": "", "pypi_package": "langfuse", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6469136, "dl_source": "pypi", "hn_mentions_30d": 3, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 0.98, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 4, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:10:58Z", "slug": "langfuse", "full_fetched_at": "2026-10-12T04:02:53Z", "source_note": "", "github_homepage": "https://langfuse.com", "homepage_icon": "/site-icons/4e65bbef4baf91d6.png", "homepage_icon_for": "https://langfuse.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: web/src/features/mcp/server/mcpServer.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in web/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in worker/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in worker/package.json", "README/docs also mention Anthropic", "Found credential/config marker 'LANGFUSE_SECRET_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/eslint-plugin/package.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'langfuse' points to langfuse/langfuse-js (same owner as langfuse/langfuse, not treated as drift)", "pypi package 'langfuse' points to langfuse/langfuse-python (same owner as langfuse/langfuse, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "langfuse", "version": "3.39.2" }, { "ecosystem": "PyPI", "name": "langfuse", "version": "4.17.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:53Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 79.3, "trust_score_v2": 79.3, "rank_v2": 172, "rank_v2_delta": -49, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.8, "identity": 10.8, "transparency": 14.5, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server Polarion", "repo": "devemberx/mcp-server-polarion", "display_repo": "", "url": "https://github.com/devemberx/mcp-server-polarion", "listing_class": "agent", "rank": 173, "previous_rank": 179, "rank_delta": 6, "stars": 15, "stars_fmt": "15", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 10, "commits_low_confidence": false, "score": 47.3, "description": "MCP server for Polarion ALM — read and write documents, work items, test runs, traceability links, and comments from any MCP-compatible AI assistant", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 89, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-polarion", "docker_image": "", "vscode_extension": "", "weekly_downloads": 171, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:06:11Z", "slug": "mcp-server-polarion", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_server_polarion/__init__.py", "Found MCP-related server path: src/mcp_server_polarion/__main__.py", "Found MCP-related server test path: tests/mcp_server_polarion/__init__.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude/skills') in pyproject.toml", "Found credential/config marker 'POLARION_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-server-polarion' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-polarion", "version": "2.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:00Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.3, "trust_score_v2": 79.3, "rank_v2": 173, "rank_v2_delta": 34, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.6, "identity": 18.0, "transparency": 14.0, "maintenance": 15.8, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Youtube", "repo": "kirbah/mcp-youtube", "display_repo": "", "url": "https://github.com/kirbah/mcp-youtube", "listing_class": "agent", "rank": 174, "previous_rank": 170, "rank_delta": -4, "stars": 30, "stars_fmt": "30", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 20, "commits_low_confidence": false, "score": 56.0, "description": "High-efficiency YouTube MCP server: Get token-optimized, structured data for your LLMs using the YouTube Data API v3.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 90, "npm_package": "@kirbah/mcp-youtube", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 507, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.82, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T10:56:18Z", "slug": "mcp-youtube", "full_fetched_at": "2026-10-12T16:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'YOUTUBE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@kirbah/mcp-youtube' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@kirbah/mcp-youtube", "version": "1.1.15" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:39Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.3, "trust_score_v2": 79.3, "rank_v2": 174, "rank_v2_delta": 32, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.6, "identity": 18.0, "transparency": 13.3, "maintenance": 17.2, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Webdriverio MCP", "repo": "webdriverio/mcp", "display_repo": "", "url": "https://github.com/webdriverio/mcp", "listing_class": "agent", "rank": 175, "previous_rank": 167, "rank_delta": -8, "stars": 41, "stars_fmt": "41", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 14, "commits_low_confidence": false, "score": 54.7, "description": "A Model Context Protocol (MCP) server that enables AI assistants to interact with web browsers and mobile applications using WebDriverIO. Automate Chrome browsers, iOS apps, and Android apps—all through a unified interface.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 91, "npm_package": "@wdio/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7027, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:31:45Z", "slug": "webdriverio-mcp", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'puppeteer' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@wdio/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@wdio/mcp", "version": "4.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:38Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.2, "trust_score_v2": 79.2, "rank_v2": 175, "rank_v2_delta": 47, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.8, "identity": 18.0, "transparency": 13.3, "maintenance": 16.4, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Substack MCP Server", "repo": "conorbronsdon/substack-mcp", "display_repo": "", "url": "https://github.com/conorbronsdon/substack-mcp", "listing_class": "agent", "rank": 176, "previous_rank": 176, "rank_delta": 0, "stars": 43, "stars_fmt": "43", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 134, "commits_low_confidence": false, "score": 64.3, "description": "MCP server for Substack: rich drafts, Notes, analytics, and consented subscriber management across publications. Long-form posts stay draft-only; Notes publish immediately. Used regularly by multiple newsletters, includes a CLI.", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 92, "npm_package": "@conorbronsdon/substack-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 278, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.41, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:40:33Z", "slug": "substack-mcp-server", "full_fetched_at": "2026-10-12T12:02:55Z", "source_note": "", "github_homepage": "https://conorbronsdon.com/builds/", "homepage_icon": "/site-icons/4933055990b0dcaa.png", "homepage_icon_for": "https://conorbronsdon.com/builds/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json", "Found credential/config marker 'SUBSTACK_SESSION_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@conorbronsdon/substack-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@conorbronsdon/substack-mcp", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:55Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.2, "trust_score_v2": 79.2, "rank_v2": 176, "rank_v2_delta": 24, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.3, "identity": 18.0, "transparency": 13.1, "maintenance": 19.9, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "XcodeBuildMCP", "repo": "getsentry/MobileBuildMCP", "display_repo": "", "url": "https://github.com/getsentry/MobileBuildMCP", "listing_class": "agent", "rank": 177, "previous_rank": 173, "rank_delta": -4, "stars": 6475, "stars_fmt": "6.5k", "forks": 323, "forks_fmt": "323", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 8, "commits_low_confidence": true, "score": 71.1, "description": "A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.", "language": "TypeScript", "open_issues": 16, "category": "MCP Servers", "category_rank": 93, "npm_package": "xcodebuildmcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 66474, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.64, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 9, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:22:38Z", "slug": "xcodebuildmcp", "full_fetched_at": "2026-10-12T04:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server path: src/server/start-mcp-server.ts", "Found MCP-related server test path: src/server/__tests__/start-mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'xcodebuildmcp' points to getsentry/xcodebuildmcp (same owner as getsentry/mobilebuildmcp, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "xcodebuildmcp", "version": "2.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:36Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.2, "trust_score_v2": 79.2, "rank_v2": 177, "rank_v2_delta": -24, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.1, "identity": 18.0, "transparency": 12.8, "maintenance": 13.7, "adoption": 15.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dify", "repo": "langgenius/dify", "display_repo": "", "url": "https://github.com/langgenius/dify", "listing_class": "agent", "rank": 178, "previous_rank": 177, "rank_delta": -1, "stars": 158251, "stars_fmt": "158.3k", "forks": 25011, "forks_fmt": "25.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 769, "commits_low_confidence": false, "score": 100.0, "description": "Build Agentic workflows, RAG pipelines, with rich AI model and tool support on one collaborative workspace. Deploy on cloud, VPC, or self-hosted, so teams move from prototype to production without rebuilding the stack.", "language": "TypeScript", "open_issues": 485, "category": "Workflow Platforms", "category_rank": 5, "npm_package": "dify", "crate_package": "", "pypi_package": "dify-client", "docker_image": "langgenius/dify-api", "vscode_extension": "", "weekly_downloads": 24644196, "dl_source": "docker+pypi", "hn_mentions_30d": 466, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:12:00Z", "slug": "dify", "full_fetched_at": "2026-10-12T04:02:53Z", "source_note": "", "github_homepage": "https://dify.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: api/controllers/console/app/mcp_server.py", "Found MCP-related server path: api/migrations/versions/2025_06_25_0936-58eb7bdb93fe_add_mcp_server_tool_and_app_server.py", "Found MCP-related server test path: api/tests/unit_tests/controllers/console/app/test_mcp_server_admission.py", "Found MCP-related server test path: api/tests/unit_tests/controllers/console/app/test_mcp_server_response.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: api/controllers/inner_api/plugin/__init__.py", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'dify' has a non-GitHub or unparseable source URL", "pypi package 'dify-client' points to the tracked repo" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "source-available", "trust_score": 79.1, "trust_score_v2": 79.1, "rank_v2": 178, "rank_v2_delta": -29, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 13.8, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Better Godot MCP", "repo": "n24q02m/better-godot-mcp", "display_repo": "", "url": "https://github.com/n24q02m/better-godot-mcp", "listing_class": "agent", "rank": 179, "previous_rank": 154, "rank_delta": -25, "stars": 36, "stars_fmt": "36", "forks": 8, "forks_fmt": "8", "last_push": "2026-09-13", "days_ago": 29, "weekly_commits": 9, "commits_low_confidence": false, "score": 47.3, "description": "Composite MCP server for Godot Engine -- 17 composite tools for AI-assisted game development.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 94, "npm_package": "@n24q02m/better-godot-mcp", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/n24q02m/better-godot-mcp:latest", "vscode_extension": "", "weekly_downloads": 14429, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.81, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-09T16:49:44Z", "slug": "better-godot-mcp", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://mcp.n24q02m.com/servers/better-godot-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@n24q02m/better-godot-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@n24q02m/better-godot-mcp", "version": "1.24.4" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "n24q02m/better-godot-mcp", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 79.1, "trust_score_v2": 79.1, "rank_v2": 179, "rank_v2_delta": 47, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.7, "identity": 18.0, "transparency": 13.3, "maintenance": 14.1, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Sec Edgar MCP", "repo": "stefanoamorelli/sec-edgar-mcp", "display_repo": "", "url": "https://github.com/stefanoamorelli/sec-edgar-mcp", "listing_class": "agent", "rank": 180, "previous_rank": 203, "rank_delta": 23, "stars": 370, "stars_fmt": "370", "forks": 99, "forks_fmt": "99", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 8, "commits_low_confidence": false, "score": 60.4, "description": "A SEC EDGAR MCP (Model Context Protocol) Server", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 95, "npm_package": "", "crate_package": "", "pypi_package": "sec-edgar-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 685, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.66, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T23:03:09Z", "slug": "sec-edgar-mcp", "full_fetched_at": "2026-10-12T00:02:19Z", "source_note": "", "github_homepage": "https://sec-edgar-mcp.amorelli.tech/", "homepage_icon": "/site-icons/80868a294888c40f.png", "homepage_icon_for": "https://sec-edgar-mcp.amorelli.tech/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'sec-edgar-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sec-edgar-mcp", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:19Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 79.1, "trust_score_v2": 79.1, "rank_v2": 180, "rank_v2_delta": 56, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.2, "identity": 18.0, "transparency": 12.8, "maintenance": 15.2, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Jshookmcp", "repo": "vmoranv/jshookmcp", "display_repo": "", "url": "https://github.com/vmoranv/jshookmcp", "listing_class": "agent", "rank": 181, "previous_rank": 178, "rank_delta": -3, "stars": 2037, "stars_fmt": "2.0k", "forks": 459, "forks_fmt": "459", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 164, "commits_low_confidence": false, "score": 82.0, "description": "A search-first, profile-aware reverse-engineering workspace for AI agents — 735 tools across 36 domains in one MCP server.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 96, "npm_package": "@jshookmcp/jshook", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 955, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 5, "Branch-Protection": 1, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:46:52Z", "slug": "jshookmcp", "full_fetched_at": "2026-10-12T00:02:37Z", "source_note": "", "github_homepage": "https://vmoranv.github.io/jshookmcp/", "homepage_icon": "/site-icons/611d3cf16d2c6857.png", "homepage_icon_for": "https://vmoranv.github.io/jshookmcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json", "Found MCP dependency 'modelcontextprotocol' in packages/extension-sdk/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found extension-based path: docs/en/extensions/api.md", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@jshookmcp/jshook' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@jshookmcp/jshook", "version": "0.4.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:37Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 79.1, "trust_score_v2": 79.1, "rank_v2": 181, "rank_v2_delta": 5, "trust_v2_adjustment": 4.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 18.0, "transparency": 12.2, "maintenance": 19.9, "adoption": 11.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CrowdStrike Falcon MCP Server", "repo": "CrowdStrike/falcon-mcp", "display_repo": "", "url": "https://github.com/CrowdStrike/falcon-mcp", "listing_class": "agent", "rank": 182, "previous_rank": 174, "rank_delta": -8, "stars": 268, "stars_fmt": "268", "forks": 92, "forks_fmt": "92", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 4, "commits_low_confidence": true, "score": 56.9, "description": "Connect AI agents to CrowdStrike Falcon for automated security analysis and threat hunting", "language": "Python", "open_issues": 24, "category": "MCP Servers", "category_rank": 97, "npm_package": "", "crate_package": "", "pypi_package": "falcon-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9740, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 9, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:03:08Z", "slug": "crowdstrike-falcon-mcp-server", "full_fetched_at": "2026-10-12T12:02:59Z", "source_note": "", "github_homepage": "https://developer.crowdstrike.com/falcon-mcp/overview/", "homepage_icon": "/site-icons/e78b9e6f71699bdd.png", "homepage_icon_for": "https://developer.crowdstrike.com/falcon-mcp/overview/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Google Gemini dependency 'google-cloud-aiplatform' in examples/adk/falcon_agent/requirements.txt", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'falcon-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "falcon-mcp", "version": "0.19.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:59Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.0, "trust_score_v2": 79.0, "rank_v2": 182, "rank_v2_delta": -55, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.9, "identity": 18.0, "transparency": 14.9, "maintenance": 13.1, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "CLI-Anything", "repo": "HKUDS/CLI-Anything", "display_repo": "", "url": "https://github.com/HKUDS/CLI-Anything", "listing_class": "agent", "rank": 183, "previous_rank": 180, "rank_delta": -3, "stars": 51978, "stars_fmt": "52.0k", "forks": 4735, "forks_fmt": "4.7k", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 8, "commits_low_confidence": false, "score": 79.5, "description": "\"CLI-Anything: Making ALL Software Agent-Native\" -- CLI-Hub: https://clianything.cc/", "language": "Python", "open_issues": 69, "category": "Protocols & Tool Integration", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "cli-anything-hub", "docker_image": "", "vscode_extension": "", "weekly_downloads": 976, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.66, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:18:06Z", "slug": "cli-anything", "full_fetched_at": "2026-10-12T04:02:44Z", "source_note": "", "github_homepage": "https://clianything.cc/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (cli-anything-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cli-anything-hub' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cli-anything-hub", "version": "0.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:44Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 79.0, "trust_score_v2": 79.0, "rank_v2": 183, "rank_v2_delta": -3, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 11.8, "maintenance": 14.5, "adoption": 15.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Dsh Agent Teams", "repo": "NanmiCoder/dsh-agent-teams", "display_repo": "", "url": "https://github.com/NanmiCoder/dsh-agent-teams", "listing_class": "skill", "rank": 19, "previous_rank": 19, "rank_delta": 0, "stars": 2059, "stars_fmt": "2.1k", "forks": 183, "forks_fmt": "183", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 68, "commits_low_confidence": false, "score": 78.2, "description": "DeepSeek Harness 的 Agent Teams 多智能体协作插件，支持多个 AI Agent 组成团队，协同完成复杂任务，实现任务分配、并行执行、成员通信与团队协作。 AgentTeams plugin for DeepSeek Harness", "language": "JavaScript", "open_issues": 34, "category": "Agent Skills", "category_rank": 19, "npm_package": "@nanmicoder/dsh-agent-teams", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 13273, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:51:08Z", "slug": "dsh-agent-teams", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in package.json", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .dsh/skills/plugin-upgrade/examples/legacy-plugin/README.en.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@nanmicoder/dsh-agent-teams' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@nanmicoder/dsh-agent-teams", "version": "0.1.22" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 79.0, "trust_score_v2": 79.0, "rank_v2": 19, "rank_v2_delta": 162, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 18.0, "transparency": 11.5, "maintenance": 19.3, "adoption": 13.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Aiven MCP", "repo": "Aiven-Open/mcp-aiven", "display_repo": "", "url": "https://github.com/Aiven-Open/mcp-aiven", "listing_class": "agent", "rank": 184, "previous_rank": 184, "rank_delta": 0, "stars": 28, "stars_fmt": "28", "forks": 23, "forks_fmt": "23", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 52.7, "description": "Model Context Protocol server for Aiven", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 98, "npm_package": "mcp-aiven", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 493, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:30:14Z", "slug": "aiven-mcp", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AIVEN_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-aiven' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-aiven", "version": "1.17.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 78.9, "trust_score_v2": 78.9, "rank_v2": 184, "rank_v2_delta": 28, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.7, "identity": 18.0, "transparency": 14.1, "maintenance": 14.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MediaWiki MCP Server", "repo": "ProfessionalWiki/MediaWiki-MCP-Server", "display_repo": "", "url": "https://github.com/ProfessionalWiki/MediaWiki-MCP-Server", "listing_class": "agent", "rank": 185, "previous_rank": 182, "rank_delta": -3, "stars": 136, "stars_fmt": "136", "forks": 41, "forks_fmt": "41", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 37, "commits_low_confidence": false, "score": 65.0, "description": "Model Context Protocol (MCP) Server to connect your AI with any MediaWiki", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 99, "npm_package": "@professional-wiki/mediawiki-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 922, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T12:02:51Z", "slug": "mediawiki-mcp-server", "full_fetched_at": "2026-10-11T20:02:13Z", "source_note": "", "github_homepage": "https://professional.wiki/en/mediawiki-mcp-server", "homepage_icon": "/site-icons/d1ff26a58b7de265.png", "homepage_icon_for": "https://professional.wiki/en/mediawiki-mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/mediawiki-mcp-server/.claude-plugin/plugin.json", "Found MCP-related server path: plugins/mediawiki-mcp-server/.codex-plugin/mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@professional-wiki/mediawiki-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@professional-wiki/mediawiki-mcp-server", "version": "0.19.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:13Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.9, "trust_score_v2": 78.9, "rank_v2": 185, "rank_v2_delta": 47, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.1, "identity": 18.0, "transparency": 12.8, "maintenance": 18.2, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Langflow", "repo": "langflow-ai/langflow", "display_repo": "", "url": "https://github.com/langflow-ai/langflow", "listing_class": "agent", "rank": 186, "previous_rank": 181, "rank_delta": -5, "stars": 155540, "stars_fmt": "155.5k", "forks": 10241, "forks_fmt": "10.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 141, "commits_low_confidence": false, "score": 98.6, "description": "Langflow is a powerful tool for building and deploying AI-powered agents and workflows.", "language": "Python", "open_issues": 208, "category": "Workflow Platforms", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "langflow", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9746, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:53:10Z", "slug": "langflow", "full_fetched_at": "2026-10-12T04:02:53Z", "source_note": "", "github_homepage": "http://www.langflow.org", "homepage_icon": "/site-icons/54976657ce0691be.png", "homepage_icon_for": "http://www.langflow.org", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/backend/base/langflow/agentic/mcp/server.py", "Found MCP-related server path: src/backend/base/langflow/alembic/versions/247308ce2598_add_mcp_server_table.py", "Found MCP-related server docs path: docs/docs/Agents/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Postgres dependency 'postgres' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: docs/src/plugins/rehypeWbrUnderscore.js", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'puppeteer' in docs/package.json", "Found database dependency 'postgres' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'langflow' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "langflow", "version": "1.12.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:53Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.8, "trust_score_v2": 78.8, "rank_v2": 186, "rank_v2_delta": 32, "trust_v2_adjustment": 5.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 10.8, "transparency": 13.2, "maintenance": 20.0, "adoption": 17.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "shadcn-ui MCP Server", "repo": "Jpisnice/shadcn-ui-mcp-server", "display_repo": "", "url": "https://github.com/Jpisnice/shadcn-ui-mcp-server", "listing_class": "agent", "rank": 187, "previous_rank": 194, "rank_delta": 7, "stars": 3041, "stars_fmt": "3.0k", "forks": 313, "forks_fmt": "313", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 14, "commits_low_confidence": false, "score": 71.0, "description": "A mcp server to allow LLMS gain context about shadcn ui component structure,usage and installation,compaitable with react,svelte 5,vue & React Native", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 100, "npm_package": "@jpisnice/shadcn-ui-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6059, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 6, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-09T17:00:43Z", "slug": "shadcn-ui-mcp-server", "full_fetched_at": "2026-10-12T16:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server.log", "Found MCP-related server path: shadcn-ui-mcp-server.mcpb", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GITHUB_PERSONAL_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .codex-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@jpisnice/shadcn-ui-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@jpisnice/shadcn-ui-mcp-server", "version": "3.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.7, "trust_score_v2": 78.7, "rank_v2": 187, "rank_v2_delta": 23, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.5, "identity": 18.0, "transparency": 12.0, "maintenance": 16.1, "adoption": 13.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Opik", "repo": "comet-ml/opik", "display_repo": "", "url": "https://github.com/comet-ml/opik", "listing_class": "agent", "rank": 188, "previous_rank": 187, "rank_delta": -1, "stars": 22528, "stars_fmt": "22.5k", "forks": 1848, "forks_fmt": "1.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 460, "commits_low_confidence": false, "score": 91.3, "description": "Debug, evaluate, and monitor your LLM applications, RAG systems, and agentic workflows with comprehensive tracing, automated evaluations, and production-ready dashboards.", "language": "Python", "open_issues": 79, "category": "Observability & Evaluation", "category_rank": 7, "npm_package": "opik", "crate_package": "", "pypi_package": "opik", "docker_image": "", "vscode_extension": "", "weekly_downloads": 445562, "dl_source": "pypi", "hn_mentions_30d": 177, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 0.93, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "opik", "full_fetched_at": "2026-10-12T04:02:41Z", "source_note": "", "github_homepage": "https://www.comet.com/docs/opik/", "homepage_icon": "/site-icons/44bb46abcf220196.png", "homepage_icon_for": "https://www.comet.com/docs/opik/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .agents/mcp.json", "Found MCP-related server path: apps/opik-documentation/documentation/fern/docs-v2/cost_intelligence/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in sdks/python/setup.py", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in tests_load/requirements.txt", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in sdks/python/setup.py", "README/docs also mention Multi-provider (LiteLLM)" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: apps/opik-backend/src/test/java/com/comet/opik/extensions/DropwizardAppExtensionProvider.java", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'opik' points to the tracked repo", "pypi package 'opik' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "opik", "version": "2.2.96" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:41Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 78.6, "trust_score_v2": 78.6, "rank_v2": 188, "rank_v2_delta": -30, "trust_v2_adjustment": 1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 18.0, "transparency": 8.5, "maintenance": 20.0, "adoption": 18.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Opentargets MCP", "repo": "nickzren/opentargets-mcp", "display_repo": "", "url": "https://github.com/nickzren/opentargets-mcp", "listing_class": "agent", "rank": 189, "previous_rank": 185, "rank_delta": -4, "stars": 19, "stars_fmt": "19", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 60, "commits_low_confidence": false, "score": 59.2, "description": "MCP server for Open Targets data", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 101, "npm_package": "", "crate_package": "", "pypi_package": "opentargets-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 266, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.03, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T02:01:15Z", "slug": "opentargets-mcp", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'opentargets-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "opentargets-mcp", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.5, "trust_score_v2": 78.5, "rank_v2": 189, "rank_v2_delta": 58, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.4, "identity": 18.0, "transparency": 13.8, "maintenance": 18.9, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Anki MCP Server", "repo": "ankimcp/anki-mcp-server", "display_repo": "", "url": "https://github.com/ankimcp/anki-mcp-server", "listing_class": "agent", "rank": 190, "previous_rank": 186, "rank_delta": -4, "stars": 515, "stars_fmt": "515", "forks": 38, "forks_fmt": "38", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 14, "commits_low_confidence": false, "score": 63.4, "description": "A Model Context Protocol (MCP) server that enables AI assistants to interact with Anki, the spaced repetition flashcard application.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 102, "npm_package": "@ankimcp/anki-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1638, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-09-28T18:44:46Z", "slug": "anki-mcp-server", "full_fetched_at": "2026-10-12T08:02:44Z", "source_note": "", "github_homepage": "https://ankimcp.ai", "homepage_icon": "/site-icons/852086411fde689a.png", "homepage_icon_for": "https://ankimcp.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ANKI_CONNECT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@ankimcp/anki-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@ankimcp/anki-mcp-server", "version": "0.27.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:44Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.5, "trust_score_v2": 78.5, "rank_v2": 190, "rank_v2_delta": 31, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.2, "identity": 18.0, "transparency": 12.9, "maintenance": 16.6, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Genexus18MCP", "repo": "lennix1337/Genexus18MCP", "display_repo": "", "url": "https://github.com/lennix1337/Genexus18MCP", "listing_class": "agent", "rank": 191, "previous_rank": 188, "rank_delta": -3, "stars": 37, "stars_fmt": "37", "forks": 27, "forks_fmt": "27", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 386, "commits_low_confidence": false, "score": 66.2, "description": "GeneXus MCP server with native SDK support for GeneXus 16–18 plus basic legacy compatibility for GeneXus 8, 9, 10.1–10.3, and 15 via reflection/COM drivers.", "language": "C#", "open_issues": 7, "category": "MCP Servers", "category_rank": 103, "npm_package": "genexus-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1708, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:55:09Z", "slug": "genexus18mcp", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'genexus-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "genexus-mcp", "version": "3.14.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:49Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.4, "trust_score_v2": 78.4, "rank_v2": 191, "rank_v2_delta": 59, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 18.0, "transparency": 12.3, "maintenance": 20.0, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Better Harness", "repo": "QoderAI/better-harness", "display_repo": "", "url": "https://github.com/QoderAI/better-harness", "listing_class": "skill", "rank": 20, "previous_rank": 20, "rank_delta": 0, "stars": 2374, "stars_fmt": "2.4k", "forks": 192, "forks_fmt": "192", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 60, "commits_low_confidence": false, "score": 78.2, "description": "An open-source Harness Engineering platform for coding agents—define harnesses as code, run controlled experiments, inspect evidence, and compare outcomes. Turn task evidence into actionable team and organization insights.", "language": "JavaScript", "open_issues": 6, "category": "Agent Skills", "category_rank": 20, "npm_package": "@qoder-ai/better-harness", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 514, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:11:24Z", "slug": "better-harness", "full_fetched_at": "2026-10-12T00:02:03Z", "source_note": "", "github_homepage": "https://qoderai.github.io/better-harness/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@qoder-ai/better-harness' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@qoder-ai/better-harness", "version": "0.6.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.4, "trust_score_v2": 78.4, "rank_v2": 20, "rank_v2_delta": 175, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.6, "identity": 18.0, "transparency": 12.3, "maintenance": 19.1, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LiteLLM", "repo": "BerriAI/litellm", "display_repo": "", "url": "https://github.com/BerriAI/litellm", "listing_class": "agent", "rank": 192, "previous_rank": 189, "rank_delta": -3, "stars": 61066, "stars_fmt": "61.1k", "forks": 12251, "forks_fmt": "12.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 5285, "commits_low_confidence": false, "score": 97.7, "description": "The fastest, litest AI Gateway. Rust core with Python SDK. Call 100+ LLM APIs in OpenAI (or native) format with cost tracking, guardrails, load balancing, and logging [Bedrock, Azure, OpenAI, Anthropic, OpenAI, VertexAI, vLLM, Nvidia NIM]", "language": "Python", "open_issues": 1822, "category": "LLM Gateways & Infra", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "litellm", "docker_image": "", "vscode_extension": "", "weekly_downloads": 21592037, "dl_source": "pypi", "hn_mentions_30d": 6, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6, "scorecard_checks": { "Code-Review": 10, "Maintained": 10, "Dependency-Update-Tool": 10, "Security-Policy": 10, "Packaging": -1, "Dangerous-Workflow": 10, "CII-Best-Practices": 0, "Token-Permissions": 0, "License": 9, "Binary-Artifacts": 0, "Signed-Releases": -1, "Pinned-Dependencies": 6, "Fuzzing": 0, "Vulnerabilities": 0, "SAST": 10, "Branch-Protection": 4, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:19Z", "slug": "litellm", "full_fetched_at": "2026-10-12T04:02:22Z", "source_note": "", "github_homepage": "https://docs.litellm.ai/docs/", "homepage_icon": "/site-icons/63d330b7976b6b09.png", "homepage_icon_for": "https://docs.litellm.ai/docs/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: litellm-proxy-extras/litellm_proxy_extras/migrations/20250507161527_add_health_check_fields_to_mcp_servers/migration.sql", "Found MCP-related server path: litellm-proxy-extras/litellm_proxy_extras/migrations/20250707212517_add_mcp_info_column_mcp_servers/migration.sql", "Found MCP-related server docs path: terraform/provider/docs/data-sources/mcp_server.md" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: enterprise/litellm_enterprise/enterprise_callbacks/secrets_plugins/__init__.py", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'litellm' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "litellm", "version": "1.105.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:22Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 78.3, "trust_score_v2": 78.3, "rank_v2": 192, "rank_v2_delta": -36, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent360 Browser MCP", "repo": "Agent360dk/browser-mcp", "display_repo": "", "url": "https://github.com/Agent360dk/browser-mcp", "listing_class": "agent", "rank": 193, "previous_rank": 192, "rank_delta": -1, "stars": 54, "stars_fmt": "54", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 476, "commits_low_confidence": false, "score": 66.1, "description": "The browser tool that can stop and ask you. A 2FA code, a CAPTCHA, a choice only you can make: it asks on your screen, then carries on in the same signed-in Chrome. 40 tools, MCP clients that run local servers, MIT.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 104, "npm_package": "@agent360/browser-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1684, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:07:54Z", "slug": "agent360-browser-mcp", "full_fetched_at": "2026-10-12T08:02:34Z", "source_note": "", "github_homepage": "https://browsermcp.dev", "homepage_icon": "/site-icons/6c4e7bb0a2c6a405.png", "homepage_icon_for": "https://browsermcp.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: content/browsermcp-compare-mcp-servers.md", "Found MCP-related server path: content/browsermcp-learn-what-is-an-mcp-server.md", "Found MCP-related server docs path: docs/compare/browser-automation-mcp-servers/index.html" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'BROWSER_MCP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@agent360/browser-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@agent360/browser-mcp", "version": "1.30.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:34Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.3, "trust_score_v2": 78.3, "rank_v2": 193, "rank_v2_delta": 35, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 18.0, "transparency": 12.8, "maintenance": 20.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DollhouseMCP", "repo": "DollhouseMCP/mcp-server", "display_repo": "", "url": "https://github.com/DollhouseMCP/mcp-server", "listing_class": "agent", "rank": 194, "previous_rank": 190, "rank_delta": -4, "stars": 45, "stars_fmt": "45", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 43, "commits_low_confidence": false, "score": 61.1, "description": "A Free, Open Source MCP server for dynamic custom persona management with public a GitHub collection of personas, skills, templates, and other elements for AI models.", "language": "TypeScript", "open_issues": 978, "category": "MCP Servers", "category_rank": 105, "npm_package": "@dollhousemcp/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 210, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T15:47:30Z", "slug": "dollhousemcp", "full_fetched_at": "2026-10-12T12:03:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@dollhousemcp/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@dollhousemcp/mcp-server", "version": "2.0.43" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 78.2, "trust_score_v2": 78.2, "rank_v2": 194, "rank_v2_delta": 61, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.5, "identity": 18.0, "transparency": 13.1, "maintenance": 18.5, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ckan MCP Server", "repo": "ondata/ckan-mcp-server", "display_repo": "", "url": "https://github.com/ondata/ckan-mcp-server", "listing_class": "agent", "rank": 195, "previous_rank": 193, "rank_delta": -2, "stars": 61, "stars_fmt": "61", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 103, "commits_low_confidence": false, "score": 66.4, "description": "MCP server for querying CKAN open data portals (package search, DataStore SQL, organizations, groups, tags)", "language": "TypeScript", "open_issues": 9, "category": "MCP Servers", "category_rank": 106, "npm_package": "@aborruso/ckan-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 415, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.11, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-26T15:06:37Z", "slug": "ckan-mcp-server", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://ondata.github.io/ckan-mcp-server/", "homepage_icon": "/site-icons/d1e45ad91149888c.png", "homepage_icon_for": "https://ondata.github.io/ckan-mcp-server/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: website/public/mcp_server_demo.gif", "Found MCP-related server docs path: docs/guide/mcp_server_demo.gif", "Found MCP-related server docs path: docs/guide/perplexity/images/ckan_mcp_server.JPG" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@aborruso/ckan-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@aborruso/ckan-mcp-server", "version": "0.4.129" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.2, "trust_score_v2": 78.2, "rank_v2": 195, "rank_v2_delta": 59, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.9, "identity": 18.0, "transparency": 12.5, "maintenance": 20.0, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Waza", "repo": "tw93/Waza", "display_repo": "", "url": "https://github.com/tw93/Waza", "listing_class": "skill", "rank": 21, "previous_rank": 21, "rank_delta": 0, "stars": 7276, "stars_fmt": "7.3k", "forks": 421, "forks_fmt": "421", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 68, "commits_low_confidence": false, "score": 83.3, "description": "🥷 Engineering habits you already know, turned into skills AI assistants can run.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 21, "npm_package": "@tw93/waza", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 149, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T18:01:30Z", "slug": "waza", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@tw93/waza' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@tw93/waza", "version": "3.39.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:29Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.2, "trust_score_v2": 78.2, "rank_v2": 21, "rank_v2_delta": 178, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 18.0, "transparency": 12.0, "maintenance": 19.3, "adoption": 12.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Codex Tldraw MCP", "repo": "jananadiw/codex-tldraw-mcp", "display_repo": "", "url": "https://github.com/jananadiw/codex-tldraw-mcp", "listing_class": "agent", "rank": 196, "previous_rank": 204, "rank_delta": 8, "stars": 25, "stars_fmt": "25", "forks": 0, "forks_fmt": "0", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 14, "commits_low_confidence": false, "score": 48.1, "description": "Local Codex MCP server for scanning repositories and writing tldraw product workflow diagrams.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 107, "npm_package": "codex-tldraw-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 299, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 3, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:02:26Z", "slug": "codex-tldraw-mcp", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'codex-tldraw-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "codex-tldraw-mcp", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:32Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.1, "trust_score_v2": 78.1, "rank_v2": 196, "rank_v2_delta": 55, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.5, "identity": 18.0, "transparency": 12.6, "maintenance": 16.6, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "BLS OEWS", "repo": "1102tools-dev/federal-contracting-mcps", "display_repo": "", "url": "https://github.com/1102tools-dev/federal-contracting-mcps", "listing_class": "agent", "rank": 197, "previous_rank": 205, "rank_delta": 8, "stars": 24, "stars_fmt": "24", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 729, "commits_low_confidence": false, "score": 62.8, "description": "Free, open-source MCP servers for federal contracting: SAM.gov, USAspending, GSA CALC+, eCFR, Federal Register, and more. 5,571 collected regression tests. In the Claude and ChatGPT directories.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 108, "npm_package": "", "crate_package": "", "pypi_package": "bls-oews-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 568, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.43, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:10:47Z", "slug": "bls-oews", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "https://1102tools.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'bls-oews-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "bls-oews-mcp", "version": "1.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:16Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 78.0, "trust_score_v2": 78.0, "rank_v2": 197, "rank_v2_delta": 61, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.9, "identity": 18.0, "transparency": 12.1, "maintenance": 20.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Genieacs MCP", "repo": "GeiserX/genieacs-mcp", "display_repo": "", "url": "https://github.com/GeiserX/genieacs-mcp", "listing_class": "agent", "rank": 198, "previous_rank": 195, "rank_delta": -3, "stars": 18, "stars_fmt": "18", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 16, "commits_low_confidence": false, "score": 50.3, "description": "MCP Server for GenieACS written in Go", "language": "Go", "open_issues": 0, "category": "MCP Servers", "category_rank": 109, "npm_package": "genieacs-mcp", "crate_package": "", "pypi_package": "", "docker_image": "drumsergio/genieacs-mcp:v0.0.11", "vscode_extension": "", "weekly_downloads": 8350, "dl_source": "npm+docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-12T00:25:58Z", "slug": "genieacs-mcp", "full_fetched_at": "2026-10-12T16:02:09Z", "source_note": "", "github_homepage": "https://geiserx.github.io/genieacs-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'genieacs-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "genieacs-mcp", "version": "0.3.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:09Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 77.9, "trust_score_v2": 77.9, "rank_v2": 198, "rank_v2_delta": 64, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.4, "identity": 18.0, "transparency": 12.8, "maintenance": 16.4, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "E2B", "repo": "e2b-dev/e2b", "display_repo": "", "url": "https://github.com/e2b-dev/E2B", "listing_class": "agent", "rank": 199, "previous_rank": 200, "rank_delta": 1, "stars": 14298, "stars_fmt": "14.3k", "forks": 1103, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 54, "commits_low_confidence": false, "score": 85.7, "description": "Open-source, secure environment with real-world tools for enterprise-grade agents.", "language": "Python", "open_issues": 36, "category": "Sandboxes & Runtimes", "category_rank": 2, "npm_package": "@e2b/sdk", "crate_package": "", "pypi_package": "e2b", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1666339, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 0.76, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-04T04:00:07Z", "slug": "e2b", "full_fetched_at": "2026-10-12T04:02:41Z", "source_note": "", "github_homepage": "https://docs.e2b.dev/?utm_source=github&utm_medium=referral&utm_campaign=repo_website&utm_content=e2b", "homepage_icon": "/site-icons/d0f9d3066902092e.png", "homepage_icon_for": "https://docs.e2b.dev/?utm_source=github&utm_medium=referral&utm_campaign=repo_website&utm_content=e2b", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: spec/mcp-server.json" ] }, "external_service_dependencies": { "providers": [ "E2B" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found E2B dependency 'e2b' in packages/cli/package.json", "Found E2B credential/config marker 'E2B_API_KEY'", "README/docs also mention E2B" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@e2b/sdk' points to the tracked repo", "pypi package 'e2b' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@e2b/sdk", "version": "2.5.0" }, { "ecosystem": "PyPI", "name": "e2b", "version": "2.55.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:41Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 77.6, "trust_score_v2": 77.6, "rank_v2": 199, "rank_v2_delta": -1, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.3, "identity": 10.8, "transparency": 14.3, "maintenance": 18.9, "adoption": 18.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cua", "repo": "trycua/cua", "display_repo": "", "url": "https://github.com/trycua/cua", "listing_class": "agent", "rank": 200, "previous_rank": 201, "rank_delta": 1, "stars": 29482, "stars_fmt": "29.5k", "forks": 2099, "forks_fmt": "2.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 657, "commits_low_confidence": false, "score": 92.2, "description": "Scale computer-use 2.0 with open-source drivers, cross-OS fleets, and benchmarks for training, evaluation, and data generation.", "language": "Rust", "open_issues": 593, "category": "Browser & Computer Use", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "cua", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5043, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 3, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:27:03Z", "slug": "cua", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "https://cua.ai", "homepage_icon": "/site-icons/76187b432a159031.png", "homepage_icon_for": "https://cua.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/docs-mcp-server-build-push.yml", "Found MCP-related server path: libs/cua-driver/compat-fixtures/mcp.json", "Found MCP-related server docs path: docs/content/docs/cua-cli/guides/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: libs/cua-driver/hyprland-plugin/CMakeLists.txt", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cua' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cua", "version": "0.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:39Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 77.6, "trust_score_v2": 77.6, "rank_v2": 200, "rank_v2_delta": 49, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 13.5, "maintenance": 20.0, "adoption": 15.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MikroMCP", "repo": "AliKarami/MikroMCP", "display_repo": "", "url": "https://github.com/AliKarami/MikroMCP", "listing_class": "agent", "rank": 201, "previous_rank": 197, "rank_delta": -4, "stars": 75, "stars_fmt": "75", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 23, "commits_low_confidence": false, "score": 56.7, "description": "Production-grade MCP server for MikroTik RouterOS with secure AI-native network automation.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 110, "npm_package": "mikromcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 258, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.74, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:32:56Z", "slug": "mikromcp", "full_fetched_at": "2026-10-12T12:02:31Z", "source_note": "", "github_homepage": "https://mikromcp.com/", "homepage_icon": "/site-icons/accddadfd736d24d.png", "homepage_icon_for": "https://mikromcp.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: test/unit/mcp/server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mikromcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mikromcp", "version": "1.13.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 77.6, "trust_score_v2": 77.6, "rank_v2": 201, "rank_v2_delta": 66, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.6, "identity": 18.0, "transparency": 12.2, "maintenance": 17.1, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Testrail MCP Server", "repo": "uarlouski/testrail-mcp-server", "display_repo": "", "url": "https://github.com/uarlouski/testrail-mcp-server", "listing_class": "agent", "rank": 202, "previous_rank": 199, "rank_delta": -3, "stars": 42, "stars_fmt": "42", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 26, "commits_low_confidence": false, "score": 56.3, "description": "AI-native MCP server connecting Claude, Cursor, Windsurf, and other AI assistants to TestRail — manage test cases, runs, and results through natural-language conversation, with typed schemas built for LLMs.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 111, "npm_package": "@uarlouski/testrail-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1633, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:42:45Z", "slug": "testrail-mcp-server", "full_fetched_at": "2026-10-12T00:02:34Z", "source_note": "", "github_homepage": "https://uarlouski.github.io/testrail-mcp-server/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'TESTRAIL_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@uarlouski/testrail-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@uarlouski/testrail-mcp-server", "version": "3.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:34Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 77.6, "trust_score_v2": 77.6, "rank_v2": 202, "rank_v2_delta": 42, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.1, "identity": 18.0, "transparency": 11.6, "maintenance": 17.7, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "The MCP server for GoReleaser", "repo": "goreleaser/mcp", "display_repo": "", "url": "https://github.com/goreleaser/mcp", "listing_class": "agent", "rank": 203, "previous_rank": 198, "rank_delta": -5, "stars": 21, "stars_fmt": "21", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 5, "commits_low_confidence": true, "score": 46.0, "description": "The GoReleaser MCP", "language": "Go", "open_issues": 0, "category": "MCP Servers", "category_rank": 112, "npm_package": "@goreleaser/mcp", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/goreleaser/mcp:0.5.1", "vscode_extension": "", "weekly_downloads": 92, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-02T06:45:05Z", "slug": "the-mcp-server-for-goreleaser", "full_fetched_at": "2026-10-12T16:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@goreleaser/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@goreleaser/mcp", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:12Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 77.5, "trust_score_v2": 77.5, "rank_v2": 203, "rank_v2_delta": 65, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.5, "identity": 18.0, "transparency": 13.9, "maintenance": 13.3, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Telegram (mcp-telegram)", "repo": "mcp-telegram/mcp-telegram", "display_repo": "", "url": "https://github.com/mcp-telegram/mcp-telegram", "listing_class": "agent", "rank": 204, "previous_rank": 202, "rank_delta": -2, "stars": 47, "stars_fmt": "47", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 28, "commits_low_confidence": false, "score": 58.4, "description": "Telegram MCP server: connect your personal Telegram account to Claude, ChatGPT, Cursor and any MCP client. 182 tools over MTProto. Self-host with npx or Docker, or use the hosted version.", "language": "TypeScript", "open_issues": 16, "category": "MCP Servers", "category_rank": 113, "npm_package": "@overpod/mcp-telegram", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1653, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-12T07:11:54Z", "slug": "telegram-mcp-telegram", "full_fetched_at": "2026-10-11T20:02:14Z", "source_note": "", "github_homepage": "https://mcp-telegram.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@overpod/mcp-telegram' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@overpod/mcp-telegram", "version": "1.43.4" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:14Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 77.4, "trust_score_v2": 77.4, "rank_v2": 204, "rank_v2_delta": 65, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.1, "identity": 18.0, "transparency": 12.6, "maintenance": 17.4, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Apple Books", "repo": "vgnshiyer/apple-books-mcp", "display_repo": "", "url": "https://github.com/vgnshiyer/apple-books-mcp", "listing_class": "agent", "rank": 205, "previous_rank": 206, "rank_delta": 1, "stars": 61, "stars_fmt": "61", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 78, "commits_low_confidence": false, "score": 63.9, "description": "Apple Books MCP Server", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 114, "npm_package": "", "crate_package": "", "pypi_package": "apple-books-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1700, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.14, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-09T10:15:47Z", "slug": "apple-books", "full_fetched_at": "2026-10-12T00:02:34Z", "source_note": "", "github_homepage": "https://vgnshiyer.me/AppleBooksMcp", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'apple-books-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "apple-books-mcp", "version": "0.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:34Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 77.1, "trust_score_v2": 77.1, "rank_v2": 205, "rank_v2_delta": -22, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.6, "identity": 18.0, "transparency": 13.5, "maintenance": 19.4, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Godot MCP Runtime", "repo": "Erodenn/godot-mcp-runtime", "display_repo": "", "url": "https://github.com/Erodenn/godot-mcp-runtime", "listing_class": "agent", "rank": 206, "previous_rank": 196, "rank_delta": -10, "stars": 84, "stars_fmt": "84", "forks": 18, "forks_fmt": "18", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 48, "commits_low_confidence": false, "score": 63.2, "description": "A lightweight, zero-footprint TypeScript MCP server that lets AI assistants drive the Godot 4.x game engine.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 115, "npm_package": "godot-mcp-runtime", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 644, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:09:22Z", "slug": "godot-mcp-runtime", "full_fetched_at": "2026-10-12T16:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'godot-mcp-runtime' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "godot-mcp-runtime", "version": "3.8.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:54Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 77.0, "trust_score_v2": 77.0, "rank_v2": 206, "rank_v2_delta": 69, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.6, "identity": 18.0, "transparency": 12.5, "maintenance": 18.5, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Latitude", "repo": "latitude-dev/latitude-llm", "display_repo": "", "url": "https://github.com/latitude-dev/latitude-llm", "listing_class": "agent", "rank": 207, "previous_rank": 209, "rank_delta": 2, "stars": 4719, "stars_fmt": "4.7k", "forks": 400, "forks_fmt": "400", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 129, "commits_low_confidence": false, "score": 84.1, "description": "Open-source observability for AI agents. Find where your agents fail, dispatch your coding agent to fix it, and verify the fix against real traces.", "language": "TypeScript", "open_issues": 3, "category": "Observability & Evaluation", "category_rank": 8, "npm_package": "@latitude-data/telemetry", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5212, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.91, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "latitude", "full_fetched_at": "2026-10-12T12:02:43Z", "source_note": "", "github_homepage": "https://latitude.so", "homepage_icon": "/site-icons/c0b954967374ebc8.png", "homepage_icon_for": "https://latitude.so", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: apps/api/mcp.json", "Found MCP-related server path: apps/api/src/mcp/server.ts", "Found MCP-related server test path: apps/api/src/mcp/server.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'LATITUDE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/web/vite-plugins/pdfjs-assets.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@latitude-data/telemetry' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@latitude-data/telemetry", "version": "4.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:43Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 77.0, "trust_score_v2": 77.0, "rank_v2": 207, "rank_v2_delta": 46, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 18.0, "transparency": 8.5, "maintenance": 20.0, "adoption": 13.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Gemini Watermark Remover", "repo": "GargantuaX/gemini-watermark-remover", "display_repo": "", "url": "https://github.com/GargantuaX/gemini-watermark-remover", "listing_class": "skill", "rank": 22, "previous_rank": 22, "rank_delta": 0, "stars": 5654, "stars_fmt": "5.7k", "forks": 876, "forks_fmt": "876", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 12, "commits_low_confidence": false, "score": 74.0, "description": "A high-performance, 100% client-side tool for removing Gemini AI image & video watermarks. Built with pure JavaScript using mathematically precise Reverse Alpha Blending. / 基于 JavaScript 的纯浏览器端 Gemini AI 图像和视频无损去水印工具，使用数学精确的反向 Alpha 混合算法", "language": "JavaScript", "open_issues": 14, "category": "Agent Skills", "category_rank": 22, "npm_package": "@pilio/gemini-watermark-remover", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1517, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-09T10:11:46Z", "slug": "gemini-watermark-remover", "full_fetched_at": "2026-10-12T16:02:18Z", "source_note": "", "github_homepage": "https://pilio.ai/gemini-watermark-remover", "homepage_icon": "/site-icons/407bfabcd21eec35.png", "homepage_icon_for": "https://pilio.ai/gemini-watermark-remover", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@pilio/gemini-watermark-remover' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@pilio/gemini-watermark-remover", "version": "1.0.46" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:18Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.9, "trust_score_v2": 76.9, "rank_v2": 22, "rank_v2_delta": 216, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.1, "identity": 18.0, "transparency": 11.7, "maintenance": 15.9, "adoption": 13.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Godot AI", "repo": "hi-godot/godot-ai", "display_repo": "", "url": "https://github.com/hi-godot/godot-ai", "listing_class": "agent", "rank": 208, "previous_rank": 210, "rank_delta": 2, "stars": 2938, "stars_fmt": "2.9k", "forks": 171, "forks_fmt": "171", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 64, "commits_low_confidence": false, "score": 78.8, "description": "Production-grade MCP server and AI tools for the Godot engine. A Snap to install. Totally free and fun.", "language": "GDScript", "open_issues": 11, "category": "MCP Servers", "category_rank": 116, "npm_package": "", "crate_package": "", "pypi_package": "godot-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 20851, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.78, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "godot-ai", "full_fetched_at": "2026-10-12T12:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugin/addons/godot_ai/utils/mcp_server_state.gd", "Found MCP-related server path: plugin/addons/godot_ai/utils/mcp_server_state.gd.uid", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugin/addons/godot_ai/LICENSE", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'godot-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "godot-ai", "version": "4.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:34Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.9, "trust_score_v2": 76.9, "rank_v2": 208, "rank_v2_delta": 62, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 18.0, "transparency": 8.5, "maintenance": 19.2, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ai Cli MCP", "repo": "mkXultra/ai-cli-mcp", "display_repo": "", "url": "https://github.com/mkXultra/ai-cli-mcp", "listing_class": "agent", "rank": 209, "previous_rank": 208, "rank_delta": -1, "stars": 27, "stars_fmt": "27", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 29, "commits_low_confidence": false, "score": 55.4, "description": "MCP server to run Claude, Codex, and Gemini CLI agents in the background from any MCP client.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 117, "npm_package": "ai-cli-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 245, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:24:19Z", "slug": "ai-cli-mcp", "full_fetched_at": "2026-10-11T20:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'ai-cli-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ai-cli-mcp", "version": "3.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:00Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.8, "trust_score_v2": 76.8, "rank_v2": 209, "rank_v2_delta": 71, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 13.3, "maintenance": 17.1, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Gemini CLI", "repo": "google-gemini/gemini-cli", "display_repo": "", "url": "https://github.com/google-gemini/gemini-cli", "listing_class": "agent", "rank": 210, "previous_rank": 213, "rank_delta": 3, "stars": 107295, "stars_fmt": "107.3k", "forks": 14702, "forks_fmt": "14.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 73, "commits_low_confidence": false, "score": 97.7, "description": "An open-source AI agent that brings the power of Gemini directly into your terminal.", "language": "TypeScript", "open_issues": 507, "category": "Coding Agents", "category_rank": 10, "npm_package": "@google/gemini-cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 454428, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 5, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T21:23:33Z", "slug": "gemini-cli", "full_fetched_at": "2026-10-12T04:02:40Z", "source_note": "", "github_homepage": "https://geminicli.com", "homepage_icon": "/site-icons/7b3cf3666a37303c.png", "homepage_icon_for": "https://geminicli.com", "public_actions": { "actions_30d": 62, "actions_30d_merged": 53, "actions_30d_by_repo": [ { "repo": "iray-tno/ankiniki", "count": 2 }, { "repo": "SviluppoItaliaDigitale/sito-misericordia-ariccia", "count": 1 }, { "repo": "SviluppoItaliaDigitale/cooprimavera", "count": 1 }, { "repo": "HarnessDesk/HarnessDesk", "count": 1 } ] }, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: integration-tests/test-mcp-server.ts", "Found MCP-related server path: packages/cli/src/commands/extensions/examples/mcp-server/.gitignore", "Found MCP-related server docs path: docs/tools/mcp-server.md" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency '@google/genai' in packages/cli/package.json", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "code", "shell" ], "confidence": "high", "evidence": [ "Found extension-based path: docs/extensions/best-practices.md", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'puppeteer' in packages/core/package.json", "Found shell dependency 'execa' in packages/core/package.json", "README/docs also mention shell capabilities", "Found code dependency 'simple-git' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@google/gemini-cli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@google/gemini-cli", "version": "0.63.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:40Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.8, "trust_score_v2": 76.8, "rank_v2": 210, "rank_v2_delta": 17, "trust_v2_adjustment": 3.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 12.5, "maintenance": 19.5, "adoption": 19.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -1.5, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Intervals Icu MCP", "repo": "hhopke/intervals-icu-mcp", "display_repo": "", "url": "https://github.com/hhopke/intervals-icu-mcp", "listing_class": "agent", "rank": 211, "previous_rank": 212, "rank_delta": 1, "stars": 94, "stars_fmt": "94", "forks": 52, "forks_fmt": "52", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 25, "commits_low_confidence": false, "score": 62.4, "description": "Read/write MCP server for Intervals.icu — training data, planning, and structured workout generation.", "language": "Python", "open_issues": 11, "category": "MCP Servers", "category_rank": 118, "npm_package": "", "crate_package": "", "pypi_package": "intervals-icu-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2128, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.48, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:17:15Z", "slug": "intervals-icu-mcp", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude/skills') in pyproject.toml", "Found credential/config marker 'INTERVALS_ICU_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'intervals-icu-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "intervals-icu-mcp", "version": "5.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:19Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.8, "trust_score_v2": 76.8, "rank_v2": 211, "rank_v2_delta": 53, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.0, "identity": 18.0, "transparency": 12.0, "maintenance": 17.6, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent Governance Toolkit", "repo": "microsoft/agent-governance-toolkit", "display_repo": "", "url": "https://github.com/microsoft/agent-governance-toolkit", "listing_class": "agent", "rank": 212, "previous_rank": 207, "rank_delta": -5, "stars": 6417, "stars_fmt": "6.4k", "forks": 1132, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 338, "commits_low_confidence": false, "score": 87.0, "description": "AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.", "language": "Python", "open_issues": 38, "category": "Agent Frameworks", "category_rank": 15, "npm_package": "@microsoft/agent-governance-opencode", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 14, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.6, "scorecard_checks": { "Dependency-Update-Tool": 10, "Maintained": 10, "Code-Review": 7, "Security-Policy": 10, "Dangerous-Workflow": 10, "Token-Permissions": 10, "CII-Best-Practices": 5, "Binary-Artifacts": 10, "Signed-Releases": 0, "License": 10, "Pinned-Dependencies": 5, "SAST": 10, "Packaging": 10, "Fuzzing": 10, "Branch-Protection": 5, "CI-Tests": 10, "Contributors": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T12:06:44Z", "slug": "agent-governance-toolkit", "full_fetched_at": "2026-10-12T12:03:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: agent-governance-antigravity-cli/assets/extensions/agt-global-policy/mcp/server.mjs", "Found MCP-related server path: agent-governance-python/agent-mesh/examples/demo_mcp_server.py", "Found MCP-related server test path: agent-governance-antigravity-cli/test/mcp-server.test.mjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in agent-governance-claude-code/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@microsoft/agent-governance-opencode' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@microsoft/agent-governance-opencode", "version": "5.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.7, "trust_score_v2": 76.7, "rank_v2": 212, "rank_v2_delta": 62, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.5, "identity": 10.8, "transparency": 15.0, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Growthbook MCP", "repo": "growthbook/growthbook-mcp", "display_repo": "", "url": "https://github.com/growthbook/growthbook-mcp", "listing_class": "agent", "rank": 213, "previous_rank": 211, "rank_delta": -2, "stars": 24, "stars_fmt": "24", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 18, "commits_low_confidence": false, "score": 55.2, "description": "Official GrowthBook MCP server for creating flags, getting experiments, and more.", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 119, "npm_package": "@growthbook/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5689, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-11T16:37:07Z", "slug": "growthbook-mcp", "full_fetched_at": "2026-10-12T16:02:14Z", "source_note": "", "github_homepage": "https://docs.growthbook.io/integrations/mcp", "homepage_icon": "/site-icons/cacf638e21ae131d.png", "homepage_icon_for": "https://docs.growthbook.io/integrations/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@growthbook/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@growthbook/mcp", "version": "2.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:14Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.7, "trust_score_v2": 76.7, "rank_v2": 213, "rank_v2_delta": 46, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.8, "identity": 18.0, "transparency": 13.0, "maintenance": 16.8, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Headroom", "repo": "headroomlabs-ai/headroom", "display_repo": "", "url": "https://github.com/headroomlabs-ai/headroom", "listing_class": "agent", "rank": 214, "previous_rank": 215, "rank_delta": 1, "stars": 75123, "stars_fmt": "75.1k", "forks": 5826, "forks_fmt": "5.8k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 482, "commits_low_confidence": false, "score": 96.7, "description": "Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 20% fewer tokens for coding agents, 60-95% fewer tokens for JSON, same answers. Library, proxy, MCP server.", "language": "Python", "open_issues": 211, "category": "LLM Gateways & Infra", "category_rank": 4, "npm_package": "headroom-ai", "crate_package": "", "pypi_package": "headroom-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 97689, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:45:04Z", "slug": "headroom", "full_fetched_at": "2026-10-12T04:02:43Z", "source_note": "", "github_homepage": "https://docs.headroomlabs.ai/docs", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: benchmarks/tool_search_vs_native/mcp_server.py", "Found MCP-related server path: examples/mcp_demo/mock_mcp_servers.py", "Found MCP-related server test path: tests/test_ccr_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Multi-provider (LiteLLM)", "OpenAI", "Qdrant" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'qdrant' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'headroom-ai' does not expose a source repo URL", "pypi package 'headroom-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "headroom-ai", "version": "0.40.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:43Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.6, "trust_score_v2": 76.6, "rank_v2": 214, "rank_v2_delta": -45, "trust_v2_adjustment": 0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 10.8, "transparency": 14.0, "maintenance": 19.9, "adoption": 18.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Google Genkit", "repo": "genkit-ai/genkit", "display_repo": "", "url": "https://github.com/genkit-ai/genkit", "listing_class": "agent", "rank": 215, "previous_rank": 216, "rank_delta": 1, "stars": 6509, "stars_fmt": "6.5k", "forks": 862, "forks_fmt": "862", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 183, "commits_low_confidence": false, "score": 86.6, "description": "Open-source framework for building agentic apps in JavaScript, Go, Dart, and Python, built and used in production by Google", "language": "TypeScript", "open_issues": 548, "category": "Agent Frameworks", "category_rank": 16, "npm_package": "genkit", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 188246, "dl_source": "npm", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:31:47Z", "slug": "google-genkit", "full_fetched_at": "2026-10-12T04:02:37Z", "source_note": "", "github_homepage": "https://genkit.dev", "homepage_icon": "/site-icons/7a1f4cec55490129.png", "homepage_icon_for": "https://genkit.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: genkit-tools/cli/src/mcp/server.ts", "Found MCP-related server path: go/plugins/mcp/fixtures/basic_server/basic_server.go", "Found MCP-related server test path: js/plugins/mcp/tests/server_test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: genkit-tools/common/src/plugin/config.ts", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'puppeteer' in tests/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'genkit' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "genkit", "version": "1.42.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:37Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.6, "trust_score_v2": 76.6, "rank_v2": 215, "rank_v2_delta": 15, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 16.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Guardrails AI", "repo": "guardrails-ai/guardrails", "display_repo": "", "url": "https://github.com/guardrails-ai/guardrails", "listing_class": "agent", "rank": 216, "previous_rank": 217, "rank_delta": 1, "stars": 7511, "stars_fmt": "7.5k", "forks": 718, "forks_fmt": "718", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 0, "commits_low_confidence": true, "score": 61.2, "description": "Adding guardrails to large language models.", "language": "Python", "open_issues": 28, "category": "Security & Guardrails", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "guardrails-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 24906, "dl_source": "pypi", "hn_mentions_30d": 18, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:17:45Z", "slug": "guardrails-ai", "full_fetched_at": "2026-10-12T04:02:39Z", "source_note": "", "github_homepage": "https://www.guardrailsai.com/docs", "homepage_icon": "/site-icons/8df828f3ba55b686.png", "homepage_icon_for": "https://www.guardrailsai.com/docs", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'guardrails-ai' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.6, "trust_score_v2": 76.6, "rank_v2": 216, "rank_v2_delta": -84, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.0, "identity": 18.0, "transparency": 13.6, "maintenance": 11.8, "adoption": 15.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "build123d MCP", "repo": "pzfreo/build123d-mcp", "display_repo": "", "url": "https://github.com/pzfreo/build123d-mcp", "listing_class": "agent", "rank": 217, "previous_rank": 214, "rank_delta": -3, "stars": 112, "stars_fmt": "112", "forks": 14, "forks_fmt": "14", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 43, "commits_low_confidence": false, "score": 60.9, "description": "MCP server for build123d to improve AI cognition when creating 3D CAD models", "language": "Python", "open_issues": 59, "category": "MCP Servers", "category_rank": 120, "npm_package": "", "crate_package": "", "pypi_package": "build123d-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1464, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.3, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:16:33Z", "slug": "build123d-mcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'build123d-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "build123d-mcp", "version": "0.3.90" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.6, "trust_score_v2": 76.6, "rank_v2": 217, "rank_v2_delta": 72, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.1, "identity": 18.0, "transparency": 12.0, "maintenance": 17.4, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Mem", "repo": "thedotmack/claude-mem", "display_repo": "", "url": "https://github.com/thedotmack/claude-mem", "listing_class": "skill", "rank": 23, "previous_rank": 23, "rank_delta": 0, "stars": 99999, "stars_fmt": "100.0k", "forks": 8772, "forks_fmt": "8.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 612, "commits_low_confidence": false, "score": 98.3, "description": "Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More", "language": "TypeScript", "open_issues": 33, "category": "Agent Skills", "category_rank": 23, "npm_package": "claude-mem", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 16041, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.65, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:36:19Z", "slug": "claude-mem", "full_fetched_at": "2026-10-12T00:02:30Z", "source_note": "", "github_homepage": "https://claude-mem.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: claude-mem-cursor/mcp.json", "Found MCP-related server path: claude-mem-grok-bot/mcp.json", "Found MCP-related server test path: tests/server/mcp/recall-mcp-server.test.ts", "Found MCP-related server test path: tests/servers/mcp-server-name-safety.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'claude-mem' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "claude-mem", "version": "13.35.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:30Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.5, "trust_score_v2": 76.5, "rank_v2": 23, "rank_v2_delta": 254, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 17.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Gsheets", "repo": "freema/mcp-gsheets", "display_repo": "", "url": "https://github.com/freema/mcp-gsheets", "listing_class": "agent", "rank": 218, "previous_rank": 244, "rank_delta": 26, "stars": 102, "stars_fmt": "102", "forks": 23, "forks_fmt": "23", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 4, "commits_low_confidence": false, "score": 51.1, "description": "MCP server for Google Sheets - Read, write and manipulate spreadsheets through Claude Desktop", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 121, "npm_package": "mcp-gsheets", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2381, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:28:44Z", "slug": "mcp-gsheets", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude/gsheets/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/claude/gsheets/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-gsheets' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-gsheets", "version": "1.10.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:05Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.5, "trust_score_v2": 76.5, "rank_v2": 218, "rank_v2_delta": 63, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.5, "identity": 18.0, "transparency": 12.7, "maintenance": 14.3, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Search1API", "repo": "superagents-lab/search1api-mcp", "display_repo": "", "url": "https://github.com/superagents-lab/search1api-mcp", "listing_class": "agent", "rank": 219, "previous_rank": 225, "rank_delta": 6, "stars": 173, "stars_fmt": "173", "forks": 38, "forks_fmt": "38", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 11, "commits_low_confidence": false, "score": 59.3, "description": "Official Search1API MCP server for web search, news, crawling, sitemaps, and trends—hosted with OAuth 2.1 or local via npm.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 122, "npm_package": "search1api-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 330, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-09T03:01:58Z", "slug": "search1api", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "https://s1.dev/docs/integrations/mcp", "homepage_icon": "/site-icons/fd72f53f879670a8.png", "homepage_icon_for": "https://s1.dev/docs/integrations/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (claude-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'search1api-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "search1api-mcp", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:26Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.4, "trust_score_v2": 76.4, "rank_v2": 219, "rank_v2_delta": 65, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.8, "identity": 18.0, "transparency": 12.9, "maintenance": 16.3, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Automox MCP Server", "repo": "AutomoxCommunity/automox-mcp", "display_repo": "", "url": "https://github.com/AutomoxCommunity/automox-mcp", "listing_class": "agent", "rank": 220, "previous_rank": 221, "rank_delta": 1, "stars": 14, "stars_fmt": "14", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 0, "commits_low_confidence": true, "score": 35.6, "description": "An MCP server implementation for Automox", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 123, "npm_package": "", "crate_package": "", "pypi_package": "automox-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 175, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:04:22Z", "slug": "automox-mcp-server", "full_fetched_at": "2026-10-12T12:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AUTOMOX_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'automox-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "automox-mcp", "version": "2.2.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:37Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.2, "trust_score_v2": 76.2, "rank_v2": 220, "rank_v2_delta": 52, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 21.2, "identity": 18.0, "transparency": 14.4, "maintenance": 11.8, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Marketplaces MCP (RU) — Wildberries & Ozon", "repo": "ilyautov/marketplaces-mcp-ru", "display_repo": "", "url": "https://github.com/ilyautov/marketplaces-mcp-ru", "listing_class": "agent", "rank": 221, "previous_rank": 219, "rank_delta": -2, "stars": 45, "stars_fmt": "45", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 18, "commits_low_confidence": false, "score": 55.2, "description": "MCP-сервер для кабинетов Wildberries, Ozon, Яндекс Маркета и Авито: продажи, заказы, остатки, цены, финансы, отзывы через API напрямую, без браузера. 1022 метода schema-driven, safety-гейт на запись. | MCP server for Wildberries, Ozon, Yandex Market and Avito seller APIs. Open-source MIT.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 124, "npm_package": "", "crate_package": "", "pypi_package": "marketplaces-mcp-ru", "docker_image": "", "vscode_extension": "", "weekly_downloads": 478, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.18, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T19:05:59Z", "slug": "marketplaces-mcp-ru-wildberries-ozon", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "https://marketplaces-mcp-ru.aifrontier.tech/", "homepage_icon": "/site-icons/55df71b526ffc469.png", "homepage_icon_for": "https://marketplaces-mcp-ru.aifrontier.tech/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker '22OZON_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/icon.png", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'marketplaces-mcp-ru' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "marketplaces-mcp-ru", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:24Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.1, "trust_score_v2": 76.1, "rank_v2": 221, "rank_v2_delta": 40, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.9, "identity": 18.0, "transparency": 13.6, "maintenance": 16.8, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Lotus Wisdom", "repo": "linxule/lotus-wisdom-mcp", "display_repo": "", "url": "https://github.com/linxule/lotus-wisdom-mcp", "listing_class": "agent", "rank": 222, "previous_rank": 222, "rank_delta": 0, "stars": 35, "stars_fmt": "35", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 18, "commits_low_confidence": false, "score": 54.2, "description": "Contemplative reasoning MCP server — Lotus Sutra wisdom framework with interactive ext-apps journey visualization.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 125, "npm_package": "lotus-wisdom-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 70, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.16, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-11T03:39:00Z", "slug": "lotus-wisdom", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency 'modelcontextprotocol' in app/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'lotus-wisdom-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "lotus-wisdom-mcp", "version": "0.8.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:52Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.1, "trust_score_v2": 76.1, "rank_v2": 222, "rank_v2_delta": 77, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 13.5, "maintenance": 16.7, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pi MCP Adapter", "repo": "nicobailon/pi-mcp-adapter", "display_repo": "", "url": "https://github.com/nicobailon/pi-mcp-adapter", "listing_class": "agent", "rank": 223, "previous_rank": 224, "rank_delta": 1, "stars": 1588, "stars_fmt": "1.6k", "forks": 387, "forks_fmt": "387", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 183, "commits_low_confidence": false, "score": 80.9, "description": "Token-efficient MCP adapter for Pi coding agent", "language": "TypeScript", "open_issues": 0, "category": "Protocols & Tool Integration", "category_rank": 11, "npm_package": "pi-mcp-adapter", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 383132, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-09-28T18:49:11Z", "slug": "pi-mcp-adapter", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: __tests__/fixtures/delayed-mcp-server.mjs", "Found MCP dependency 'modelcontextprotocol' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in examples/interactive-visualizer/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'pi-mcp-adapter' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "pi-mcp-adapter", "version": "5.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:04Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.1, "trust_score_v2": 76.1, "rank_v2": 223, "rank_v2_delta": 74, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.3, "identity": 10.8, "transparency": 13.0, "maintenance": 19.9, "adoption": 15.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qdrant", "repo": "qdrant/qdrant", "display_repo": "", "url": "https://github.com/qdrant/qdrant", "listing_class": "agent", "rank": 224, "previous_rank": 227, "rank_delta": 3, "stars": 35048, "stars_fmt": "35.0k", "forks": 2734, "forks_fmt": "2.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 218, "commits_low_confidence": false, "score": 93.3, "description": "Qdrant - High-performance, massive-scale Vector Database and Vector Search Engine for the next generation of AI. Also available in the cloud https://cloud.qdrant.io/", "language": "Rust", "open_issues": 483, "category": "Memory & Knowledge", "category_rank": 11, "npm_package": "", "crate_package": "qdrant", "pypi_package": "qdrant-client", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3156032, "dl_source": "crates.io+pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:35:11Z", "slug": "qdrant", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://qdrant.tech", "homepage_icon": "/site-icons/eac0e9fb637c0931.png", "homepage_icon_for": "https://qdrant.tech", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Qdrant" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Qdrant dependency 'qdrant' in tests/pyproject.toml", "README/docs also mention Qdrant" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'qdrant' in tests/pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "pypi package 'qdrant-client' points to qdrant/qdrant-client (same owner as qdrant/qdrant, not treated as drift)", "crates.io package 'qdrant' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "qdrant-client", "version": "1.19.1" }, { "ecosystem": "crates.io", "name": "qdrant", "version": "0.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:28Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.1, "trust_score_v2": 76.1, "rank_v2": 224, "rank_v2_delta": -23, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 19.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Evidently", "repo": "evidentlyai/evidently", "display_repo": "", "url": "https://github.com/evidentlyai/evidently", "listing_class": "agent", "rank": 225, "previous_rank": 223, "rank_delta": -2, "stars": 7982, "stars_fmt": "8.0k", "forks": 949, "forks_fmt": "949", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 0, "commits_low_confidence": false, "score": 60.4, "description": "Evidently is ​​an open-source ML and LLM observability framework. Evaluate, test, and monitor any AI-powered system or data pipeline. From tabular data to Gen AI. 100+ metrics.", "language": "Jupyter Notebook", "open_issues": 246, "category": "Observability & Evaluation", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "evidently", "docker_image": "", "vscode_extension": "", "weekly_downloads": 182671, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.89, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:13:22Z", "slug": "evidently", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'evidently' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "evidently", "version": "0.7.23" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:29Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 76.1, "trust_score_v2": 76.1, "rank_v2": 225, "rank_v2_delta": 10, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.2, "identity": 18.0, "transparency": 11.4, "maintenance": 11.1, "adoption": 16.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Code Review Graph", "repo": "tirth8205/code-review-graph", "display_repo": "", "url": "https://github.com/tirth8205/code-review-graph", "listing_class": "skill", "rank": 24, "previous_rank": 24, "rank_delta": 0, "stars": 32081, "stars_fmt": "32.1k", "forks": 2936, "forks_fmt": "2.9k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 190, "commits_low_confidence": false, "score": 92.4, "description": "Local-first code intelligence graph for MCP and CLI. Builds a persistent map of your codebase so AI coding tools read only what matters, with benchmarked context reductions on reviews and large-repo workflows.", "language": "Python", "open_issues": 102, "category": "Agent Skills", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "code-review-graph", "docker_image": "", "vscode_extension": "", "weekly_downloads": 74948, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.39, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T01:46:49Z", "slug": "code-review-graph", "full_fetched_at": "2026-10-12T00:02:31Z", "source_note": "", "github_homepage": "https://code-review-graph.com", "homepage_icon": "/site-icons/a27808e377d9183f.png", "homepage_icon_for": "https://code-review-graph.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'code-review-graph' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "code-review-graph", "version": "2.3.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.0, "trust_score_v2": 76.0, "rank_v2": 24, "rank_v2_delta": 239, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 14.0, "maintenance": 19.6, "adoption": 17.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Monarch MCP Server", "repo": "jamiew/monarch-mcp", "display_repo": "", "url": "https://github.com/jamiew/monarch-mcp", "listing_class": "agent", "rank": 226, "previous_rank": 226, "rank_delta": 0, "stars": 25, "stars_fmt": "25", "forks": 10, "forks_fmt": "10", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 14, "commits_low_confidence": false, "score": 51.2, "description": "Modern MCP server for accessing Monarch Money financial data using AI agents, like Claude. Token-efficient, smart tool design, and uses latest MCP protocol features", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 126, "npm_package": "", "crate_package": "", "pypi_package": "monarch-mcp-jamiew", "docker_image": "", "vscode_extension": "", "weekly_downloads": 168, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.63, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-09-30T19:11:09Z", "slug": "monarch-mcp-server", "full_fetched_at": "2026-10-12T16:02:31Z", "source_note": "", "github_homepage": "https://jamiew.github.io/monarch-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/test_fastmcp.py", "Found MCP-related server test path: tests/test_validation_fastmcp.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'monarch-mcp-jamiew' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "monarch-mcp-jamiew", "version": "0.5.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 76.0, "trust_score_v2": 76.0, "rank_v2": 226, "rank_v2_delta": 75, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.0, "identity": 18.0, "transparency": 12.8, "maintenance": 15.8, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Arize Phoenix", "repo": "Arize-AI/phoenix", "display_repo": "", "url": "https://github.com/Arize-ai/phoenix", "listing_class": "agent", "rank": 227, "previous_rank": 229, "rank_delta": 2, "stars": 11808, "stars_fmt": "11.8k", "forks": 1200, "forks_fmt": "1.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 267, "commits_low_confidence": false, "score": 88.7, "description": "AI Observability & Evaluation", "language": "Python", "open_issues": 944, "category": "Observability & Evaluation", "category_rank": 10, "npm_package": "phoenix-js", "crate_package": "", "pypi_package": "arize-phoenix", "docker_image": "", "vscode_extension": "", "weekly_downloads": 153423, "dl_source": "npm+pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": false, "pypi_provenance": true, "signed_commits_ratio": 0.81, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "arize-phoenix", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://arize.com/docs/phoenix", "homepage_icon": "/site-icons/a49ce5c38e3f40c0.png", "homepage_icon_for": "https://arize.com/docs/phoenix", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor-plugin/mcp.json", "Found MCP-related server path: plugins/codex/arize-phoenix/mcp.json", "Found MCP-related server docs path: docs/phoenix/sdk-api-reference/typescript/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "E2B", "Google Gemini", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Amazon Bedrock dependency 'bedrock' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'phoenix-js' does not expose a source repo URL", "pypi package 'arize-phoenix' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "arize-phoenix", "version": "20.21.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:24Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 76.0, "trust_score_v2": 76.0, "rank_v2": 227, "rank_v2_delta": -37, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 18.0, "transparency": 8.5, "maintenance": 20.0, "adoption": 16.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Postman MCP Server", "repo": "postmanlabs/postman-mcp-server", "display_repo": "", "url": "https://github.com/postmanlabs/postman-mcp-server", "listing_class": "agent", "rank": 228, "previous_rank": 230, "rank_delta": 2, "stars": 317, "stars_fmt": "317", "forks": 87, "forks_fmt": "87", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 3, "commits_low_confidence": false, "score": 55.0, "description": "Postman MCP Server — connect AI agents (Claude Code, Cursor, VS Code Copilot, Gemini CLI) to your Postman collections, OpenAPI specs, and environments via Model Context Protocol (MCP)", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 127, "npm_package": "@postman/postman-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4331, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:56:09Z", "slug": "postman-mcp-server", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://www.postman.com/product/mcp-server/", "homepage_icon": "/site-icons/72bae7da12d54709.png", "homepage_icon_for": "https://www.postman.com/product/mcp-server/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in dist/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'POSTMAN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@postman/postman-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@postman/postman-mcp-server", "version": "2.13.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 75.9, "trust_score_v2": 75.9, "rank_v2": 228, "rank_v2_delta": 48, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.5, "identity": 18.0, "transparency": 12.8, "maintenance": 13.7, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "State Memory MCP", "repo": "putervision/state-memory-mcp", "display_repo": "", "url": "https://github.com/putervision/state-memory-mcp", "listing_class": "agent", "rank": 229, "previous_rank": 228, "rank_delta": -1, "stars": 49, "stars_fmt": "49", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 22, "commits_low_confidence": false, "score": 53.8, "description": "Persistent, branch-aware workflow state memory MCP server for AI coding assistants. Tracks tasks, accepted decisions, and active blockers to prevent session context bloat and speed up development.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 128, "npm_package": "@putervision/state-memory-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9404, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T18:06:30Z", "slug": "state-memory-mcp", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://statememorymcp.com", "homepage_icon": "/site-icons/9f070a16b55122ef.png", "homepage_icon_for": "https://statememorymcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server docs path: docs/.well-known/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@putervision/state-memory-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@putervision/state-memory-mcp", "version": "1.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.9, "trust_score_v2": 75.9, "rank_v2": 229, "rank_v2_delta": 76, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.5, "identity": 18.0, "transparency": 12.2, "maintenance": 16.8, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "agentmemory", "repo": "rohitg00/agentmemory", "display_repo": "", "url": "https://github.com/rohitg00/agentmemory", "listing_class": "agent", "rank": 230, "previous_rank": 233, "rank_delta": 3, "stars": 29347, "stars_fmt": "29.3k", "forks": 2576, "forks_fmt": "2.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 75, "commits_low_confidence": false, "score": 91.2, "description": "#1 Persistent memory for AI coding agents based on real-world benchmarks", "language": "TypeScript", "open_issues": 271, "category": "Memory & Knowledge", "category_rank": 12, "npm_package": "@agentmemory/agentmemory", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 15834, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.88, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T01:35:34Z", "slug": "agentmemory", "full_fetched_at": "2026-10-12T08:02:33Z", "source_note": "", "github_homepage": "https://agent-memory.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugin/cursor/mcp.json", "Found MCP-related server path: src/mcp/server.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "OpenRouter", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@agentmemory/agentmemory' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@agentmemory/agentmemory", "version": "0.9.30" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:33Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 75.8, "trust_score_v2": 75.8, "rank_v2": 230, "rank_v2_delta": 4, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 14.0, "maintenance": 19.5, "adoption": 16.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Code Index MCP", "repo": "Regsorm/code-index-mcp", "display_repo": "", "url": "https://github.com/Regsorm/code-index-mcp", "listing_class": "agent", "rank": 231, "previous_rank": 239, "rank_delta": 8, "stars": 141, "stars_fmt": "141", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 98, "commits_low_confidence": false, "score": 68.9, "description": "Поиск по коду для ИИ-агентов: 32 инструмента MCP, индекс на SQLite, один бинарник без зависимостей. Разбирает выгрузки 1С:Предприятие — Конфигуратор и EDT; конфигурация на 88 тыс. файлов индексируется за 6 минут, ответ на запрос — 10 мс. Code index MCP server: tree-sitter AST for 14 languages, 20…", "language": "Rust", "open_issues": 1, "category": "MCP Servers", "category_rank": 129, "npm_package": "@regsorm/code-index-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 258, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-06T22:18:53Z", "slug": "code-index-mcp", "full_fetched_at": "2026-10-12T00:02:21Z", "source_note": "", "github_homepage": "https://infostart.ru/1c/tools/2677918/", "homepage_icon": "/site-icons/f56938de977be92d.png", "homepage_icon_for": "https://infostart.ru/1c/tools/2677918/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@regsorm/code-index-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@regsorm/code-index-mcp", "version": "1.8.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:21Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.8, "trust_score_v2": 75.8, "rank_v2": 231, "rank_v2_delta": 77, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 18.0, "transparency": 11.5, "maintenance": 20.0, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Everything File Search", "repo": "elis132/everything-mcp", "display_repo": "", "url": "https://github.com/elis132/everything-mcp", "listing_class": "agent", "rank": 232, "previous_rank": 232, "rank_delta": 0, "stars": 26, "stars_fmt": "26", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 12, "commits_low_confidence": false, "score": 49.7, "description": "The definitive MCP server for voidtools Everything - lightning-fast file search for AI agents.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 130, "npm_package": "", "crate_package": "", "pypi_package": "everything-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 122, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.704, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T18:00:39Z", "slug": "everything-file-search", "full_fetched_at": "2026-10-12T16:01:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'everything-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "everything-mcp", "version": "1.0.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:51Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.7, "trust_score_v2": 75.7, "rank_v2": 232, "rank_v2_delta": 70, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.3, "identity": 18.0, "transparency": 12.8, "maintenance": 15.7, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Deep Agents", "repo": "langchain-ai/deepagents", "display_repo": "", "url": "https://github.com/langchain-ai/deepagents", "listing_class": "agent", "rank": 233, "previous_rank": 220, "rank_delta": -13, "stars": 30157, "stars_fmt": "30.2k", "forks": 4229, "forks_fmt": "4.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 431, "commits_low_confidence": false, "score": 93.8, "description": "The batteries-included agent harness.", "language": "Python", "open_issues": 154, "category": "Agent Frameworks", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "deepagents", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1643990, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 5, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-12T00:16:15Z", "slug": "deep-agents", "full_fetched_at": "2026-10-12T04:02:50Z", "source_note": "", "github_homepage": "https://docs.langchain.com/deepagents", "homepage_icon": "/site-icons/443e5689cc74d832.png", "homepage_icon_for": "https://docs.langchain.com/deepagents", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: libs/code/deepagents_code/tui/modals/mcp_servers.py", "Found MCP-related server path: libs/code/deepagents_code/tui/modals/mcp_servers.tcss", "Found MCP dependency 'fastmcp' in libs/code/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "DeepSeek", "Google Gemini", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "Postgres", "Tavily" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in libs/code/pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in libs/code/pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in libs/code/pyproject.toml", "Found Mistral AI dependency 'mistralai' in libs/code/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found extension-based path: libs/code/deepagents_code/extensions/__init__.py", "Found search dependency 'tavily' in libs/code/pyproject.toml", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'deepagents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "deepagents", "version": "0.7.23" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:50Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.7, "trust_score_v2": 75.7, "rank_v2": 233, "rank_v2_delta": -14, "trust_v2_adjustment": 2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 19.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DSPy", "repo": "stanfordnlp/dspy", "display_repo": "", "url": "https://github.com/stanfordnlp/dspy", "listing_class": "agent", "rank": 234, "previous_rank": 235, "rank_delta": 1, "stars": 38599, "stars_fmt": "38.6k", "forks": 3414, "forks_fmt": "3.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 59, "commits_low_confidence": false, "score": 91.1, "description": "DSPy: The framework for programming—not prompting—language models", "language": "Python", "open_issues": 364, "category": "Agent Frameworks", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "dspy", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1196298, "dl_source": "pypi", "hn_mentions_30d": 67, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:47:22Z", "slug": "dspy", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://dspy.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: tests/utils/resources/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)", "OpenAI", "Weaviate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Weaviate dependency 'weaviate' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'weaviate' in pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'dspy' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "dspy", "version": "3.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:30Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.6, "trust_score_v2": 75.6, "rank_v2": 234, "rank_v2_delta": -84, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.9, "identity": 10.8, "transparency": 14.5, "maintenance": 19.1, "adoption": 19.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Adr Analysis Server", "repo": "tosin2013/mcp-adr-analysis-server", "display_repo": "", "url": "https://github.com/tosin2013/mcp-adr-analysis-server", "listing_class": "agent", "rank": 235, "previous_rank": 234, "rank_delta": -1, "stars": 35, "stars_fmt": "35", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 54, "commits_low_confidence": false, "score": 60.9, "description": "Your ADRs are lying to you. MCP server with live drift detection, content safety, and decision memory — validates architectural decisions against your actual code.", "language": "TypeScript", "open_issues": 12, "category": "MCP Servers", "category_rank": 131, "npm_package": "mcp-adr-analysis-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 258, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-10T01:37:56Z", "slug": "mcp-adr-analysis-server", "full_fetched_at": "2026-10-12T00:02:31Z", "source_note": "", "github_homepage": "https://tosin2013.github.io/mcp-adr-analysis-server/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/mcp-server-validation.lock.yml", "Found MCP-related server path: .github/workflows/mcp-server-validation.md", "Found MCP-related server test path: tests/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "OpenRouter", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found Postgres dependency 'pg' in sample-project/package.json", "Found Redis dependency 'redis' in sample-project/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/document-specialist/.cursor-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'pg' in sample-project/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-adr-analysis-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-adr-analysis-server", "version": "2.14.14" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.6, "trust_score_v2": 75.6, "rank_v2": 235, "rank_v2_delta": 5, "trust_v2_adjustment": 2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.0, "identity": 18.0, "transparency": 13.0, "maintenance": 18.7, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Komodo MCP Server", "repo": "MP-Tool/komodo-mcp-server", "display_repo": "", "url": "https://github.com/MP-Tool/komodo-mcp-server", "listing_class": "agent", "rank": 236, "previous_rank": 236, "rank_delta": 0, "stars": 43, "stars_fmt": "43", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 0, "commits_low_confidence": true, "score": 39.4, "description": "Model Context Protocol Server for Komodo 🦎 - Enables AI assistants to interact with Docker containers, deployments, stacks, and servers managed by Komodo.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 132, "npm_package": "komodo-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/mp-tool/komodo-mcp-server:1.4.1", "vscode_extension": "", "weekly_downloads": 149, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.948, "scorecard_score": 6.4, "scorecard_checks": { "Code-Review": 0, "Security-Policy": 10, "Maintained": 0, "Dependency-Update-Tool": 10, "Dangerous-Workflow": 10, "Token-Permissions": 10, "Binary-Artifacts": 10, "CII-Best-Practices": 2, "Signed-Releases": 10, "Vulnerabilities": 0, "Pinned-Dependencies": 8, "SAST": 10, "Branch-Protection": 3, "License": 10, "Packaging": 10, "Fuzzing": 0, "Contributors": 0, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-11T20:03:59Z", "slug": "komodo-mcp-server", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'KOMODO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'komodo-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "komodo-mcp-server", "version": "1.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 75.4, "trust_score_v2": 75.4, "rank_v2": 236, "rank_v2_delta": 58, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 20.2, "identity": 18.0, "transparency": 13.9, "maintenance": 11.5, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "iOS Simulator MCP", "repo": "joshuayoes/ios-simulator-mcp", "display_repo": "", "url": "https://github.com/joshuayoes/ios-simulator-mcp", "listing_class": "agent", "rank": 237, "previous_rank": 243, "rank_delta": 6, "stars": 2191, "stars_fmt": "2.2k", "forks": 98, "forks_fmt": "98", "last_push": "2026-08-13", "days_ago": 60, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.1, "description": "MCP server for interacting with the iOS simulator", "language": "JavaScript", "open_issues": 16, "category": "MCP Servers", "category_rank": 133, "npm_package": "ios-simulator-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6507, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.92, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T10:05:13Z", "slug": "ios-simulator-mcp", "full_fetched_at": "2026-10-12T16:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'ios-simulator-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ios-simulator-mcp", "version": "2.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:34Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.4, "trust_score_v2": 75.4, "rank_v2": 237, "rank_v2_delta": 84, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.9, "identity": 18.0, "transparency": 12.4, "maintenance": 8.0, "adoption": 13.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Native DevTools", "repo": "vectora-foundry/native-devtools-mcp", "display_repo": "", "url": "https://github.com/vectora-foundry/native-devtools-mcp", "listing_class": "agent", "rank": 238, "previous_rank": 237, "rank_delta": -1, "stars": 136, "stars_fmt": "136", "forks": 17, "forks_fmt": "17", "last_push": "2026-09-24", "days_ago": 18, "weekly_commits": 42, "commits_low_confidence": false, "score": 61.5, "description": "MCP server for computer use & browser automation - screenshot, OCR, click, type, find_text, Chrome/Electron CDP, template matching. macOS, Windows & Android. Works with Claude, Cursor, and any MCP client.", "language": "Rust", "open_issues": 2, "category": "MCP Servers", "category_rank": 134, "npm_package": "native-devtools-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 112, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-11T21:04:40Z", "slug": "native-devtools", "full_fetched_at": "2026-10-12T00:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'native-devtools-mcp' points to sh3ll3x3c/native-devtools-mcp, which GitHub redirects to the tracked repo after a rename/transfer (not treated as drift)" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.4, "trust_score_v2": 75.4, "rank_v2": 238, "rank_v2_delta": -13, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.0, "identity": 18.0, "transparency": 12.2, "maintenance": 17.3, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Datawrapper", "repo": "palewire/datawrapper-mcp", "display_repo": "", "url": "https://github.com/palewire/datawrapper-mcp", "listing_class": "agent", "rank": 239, "previous_rank": 191, "rank_delta": -48, "stars": 57, "stars_fmt": "57", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 9, "commits_low_confidence": false, "score": 51.8, "description": "A Model Context Protocol (MCP) server and app for creating Datawrapper charts using AI assistants.", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 135, "npm_package": "", "crate_package": "", "pypi_package": "datawrapper-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 126, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-10T08:02:03Z", "slug": "datawrapper", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in deployment/requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'DATAWRAPPER_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'datawrapper-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "datawrapper-mcp", "version": "0.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:09Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.3, "trust_score_v2": 75.3, "rank_v2": 239, "rank_v2_delta": 6, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.2, "identity": 18.0, "transparency": 13.1, "maintenance": 15.3, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ghostfolio MCP", "repo": "mhajder/ghostfolio-mcp", "display_repo": "", "url": "https://github.com/mhajder/ghostfolio-mcp", "listing_class": "agent", "rank": 240, "previous_rank": 264, "rank_delta": 24, "stars": 22, "stars_fmt": "22", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 49.6, "description": "MCP server for Ghostfolio management", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 136, "npm_package": "", "crate_package": "", "pypi_package": "ghostfolio-mcp", "docker_image": "ghcr.io/mhajder/ghostfolio-mcp:1.5.0", "vscode_extension": "", "weekly_downloads": 89, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 6, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:40:44Z", "slug": "ghostfolio-mcp", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GHOSTFOLIO_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ghostfolio-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ghostfolio-mcp", "version": "1.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:55Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 75.2, "trust_score_v2": 75.2, "rank_v2": 240, "rank_v2_delta": 56, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.2, "identity": 18.0, "transparency": 13.1, "maintenance": 14.0, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Scrcpy MCP", "repo": "JuanCF/scrcpy-mcp", "display_repo": "", "url": "https://github.com/JuanCF/scrcpy-mcp", "listing_class": "agent", "rank": 241, "previous_rank": 240, "rank_delta": -1, "stars": 117, "stars_fmt": "117", "forks": 18, "forks_fmt": "18", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 4, "commits_low_confidence": false, "score": 49.4, "description": "MCP server for Android device control via ADB and scrcpy — gives AI agents vision and control over Android devices", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 137, "npm_package": "scrcpy-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 266, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:15:22Z", "slug": "scrcpy-mcp", "full_fetched_at": "2026-10-12T16:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'scrcpy-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "scrcpy-mcp", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.2, "trust_score_v2": 75.2, "rank_v2": 241, "rank_v2_delta": 83, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.1, "identity": 18.0, "transparency": 12.4, "maintenance": 13.5, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ITASCA MCP Server", "repo": "yusong652/itasca-mcp", "display_repo": "", "url": "https://github.com/yusong652/itasca-mcp", "listing_class": "agent", "rank": 242, "previous_rank": 242, "rank_delta": 0, "stars": 213, "stars_fmt": "213", "forks": 19, "forks_fmt": "19", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 58, "commits_low_confidence": false, "score": 66.1, "description": "MCP server connecting AI agents to ITASCA engines (PFC, FLAC, 3DEC, MPoint, MassFlow) — run geotechnical & geomechanics simulations through natural conversation", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 138, "npm_package": "", "crate_package": "", "pypi_package": "itasca-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1461, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.65, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T23:01:55Z", "slug": "itasca-mcp-server", "full_fetched_at": "2026-10-12T04:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'itasca-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "itasca-mcp", "version": "0.10.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:11Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.2, "trust_score_v2": 75.2, "rank_v2": 242, "rank_v2_delta": -11, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.2, "identity": 18.0, "transparency": 11.6, "maintenance": 18.6, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Browser4", "repo": "platonai/Browser4", "display_repo": "", "url": "https://github.com/platonai/Browser4", "listing_class": "agent", "rank": 243, "previous_rank": 246, "rank_delta": 3, "stars": 1152, "stars_fmt": "1.2k", "forks": 152, "forks_fmt": "152", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 234, "commits_low_confidence": false, "score": 78.6, "description": "Browser4 — an AI-native browser engine for autonomous agents, intelligent extraction, and large-scale web automation.", "language": "Kotlin", "open_issues": 24, "category": "Browser & Computer Use", "category_rank": 11, "npm_package": "browser4-cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 935, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:01:09Z", "slug": "browser4", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://browser4.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: browser4-agentic/src/main/kotlin/ai/platon/pulsar/agentic/mcp/server/Browser4MCPServer.kt", "Found MCP-related server path: browser4-agentic/src/main/kotlin/ai/platon/pulsar/agentic/mcp/server/Browser4MCPServerRunner.kt", "Found MCP-related server test path: browser4-agentic/src/test/kotlin/ai/platon/pulsar/agentic/mcp/server/Browser4MCPServerAliasesTest.kt" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in browser4-agentic/src/main/resources/skills/mcp-builder/scripts/requirements.txt", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: browser4-boot/src/main/kotlin/ai/platon/pulsar/boot/plugin/BrowserPluginAutoConfiguration.kt", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'browser4-cli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "browser4-cli", "version": "4.13.27" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 75.1, "trust_score_v2": 75.1, "rank_v2": 243, "rank_v2_delta": -32, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 18.0, "transparency": 11.9, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Atlassian Dc MCP", "repo": "b1ff/atlassian-dc-mcp", "display_repo": "", "url": "https://github.com/b1ff/atlassian-dc-mcp", "listing_class": "agent", "rank": 244, "previous_rank": 241, "rank_delta": -3, "stars": 103, "stars_fmt": "103", "forks": 46, "forks_fmt": "46", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 18, "commits_low_confidence": false, "score": 60.5, "description": "MCP servers for the Atlassian products (Bitbucket, Confluence, JIRA) of the Data Center version", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 139, "npm_package": "@atlassian-dc-mcp/bitbucket", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3476, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:18:11Z", "slug": "atlassian-dc-mcp", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/jira/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/common/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'JIRA_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@atlassian-dc-mcp/bitbucket' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@atlassian-dc-mcp/bitbucket", "version": "0.37.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:44Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.1, "trust_score_v2": 75.1, "rank_v2": 244, "rank_v2_delta": 54, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.9, "identity": 18.0, "transparency": 11.7, "maintenance": 16.9, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FAISS", "repo": "facebookresearch/faiss", "display_repo": "", "url": "https://github.com/facebookresearch/faiss", "listing_class": "agent", "rank": 245, "previous_rank": 248, "rank_delta": 3, "stars": 41134, "stars_fmt": "41.1k", "forks": 4550, "forks_fmt": "4.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 61, "commits_low_confidence": false, "score": 92.1, "description": "A library for efficient similarity search and clustering of dense vectors.", "language": "C++", "open_issues": 230, "category": "Memory & Knowledge", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "faiss-cpu", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2917021, "dl_source": "pypi", "hn_mentions_30d": 35, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 6.1, "scorecard_checks": { "Code-Review": 9, "Maintained": 10, "CII-Best-Practices": 0, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "Token-Permissions": 0, "SAST": 0, "License": 10, "Fuzzing": 0, "Signed-Releases": -1, "Pinned-Dependencies": 3, "Branch-Protection": 3, "Packaging": 10, "Security-Policy": 9 }, "scorecard_scanned_at": "2026-10-12T04:06:26Z", "slug": "faiss", "full_fetched_at": "2026-10-12T04:02:34Z", "source_note": "", "github_homepage": "https://faiss.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'faiss-cpu' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "faiss-cpu", "version": "1.15.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:34Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.0, "trust_score_v2": 75.0, "rank_v2": 245, "rank_v2_delta": 28, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 13.7, "maintenance": 19.2, "adoption": 19.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenHands", "repo": "OpenHands/OpenHands", "display_repo": "", "url": "https://github.com/OpenHands/OpenHands", "listing_class": "agent", "rank": 246, "previous_rank": 245, "rank_delta": -1, "stars": 90716, "stars_fmt": "90.7k", "forks": 12011, "forks_fmt": "12.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 367, "commits_low_confidence": false, "score": 98.7, "description": "🙌 OpenHands: AI-Driven Development", "language": "TypeScript", "open_issues": 489, "category": "Coding Agents", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "openhands-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 189499, "dl_source": "pypi", "hn_mentions_30d": 5, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:45:37Z", "slug": "openhands", "full_fetched_at": "2026-10-12T08:02:27Z", "source_note": "", "github_homepage": "https://openhands.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": { "actions_30d": 85, "actions_30d_merged": 68, "actions_30d_by_repo": [ { "repo": "safwt771754091s-crypto/alfaeq_yemen_new", "count": 3 }, { "repo": "ali-ulu/huqan", "count": 1 }, { "repo": "goumies-creative/laivel-up", "count": 1 } ] }, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .agents/skills/verify-openhands/references/feature-map/F17-mcp-servers.md", "Found MCP-related server path: src/api/mcp-health/probe-mcp-server-health.ts", "Found MCP-related server test path: __tests__/api/mcp-health/probe-mcp-server-health.test.ts", "Found MCP-related server test path: __tests__/components/features/mcp-page/mcp-server-health.test.tsx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'LOCAL_BACKEND_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: __tests__/components/features/plugins/add-plugin-modal.test.tsx" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'openhands-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openhands-ai", "version": "1.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:27Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 1.0, "signal_types": 5, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.0, "trust_score_v2": 75.0, "rank_v2": 246, "rank_v2_delta": 6, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 18.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Funplay Cocos MCP", "repo": "FunplayAI/funplay-cocos-mcp", "display_repo": "", "url": "https://github.com/FunplayAI/funplay-cocos-mcp", "listing_class": "agent", "rank": 247, "previous_rank": 238, "rank_delta": -9, "stars": 332, "stars_fmt": "332", "forks": 42, "forks_fmt": "42", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 10, "commits_low_confidence": false, "score": 60.4, "description": "The Most Advanced MCP Server for Cocos Creator Editor with `execute_javascript`, prompts/resources, screenshots, asset dependency validation, tool profiles, one-click client configuration, and editor automation.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 140, "npm_package": "funplay-cocos-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 597, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:02:36Z", "slug": "funplay-cocos-mcp", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'funplay-cocos-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "funplay-cocos-mcp", "version": "0.6.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:05Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.0, "trust_score_v2": 75.0, "rank_v2": 247, "rank_v2_delta": 82, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 18.0, "transparency": 12.1, "maintenance": 16.0, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Docspace MCP", "repo": "ONLYOFFICE/docspace-mcp", "display_repo": "", "url": "https://github.com/ONLYOFFICE/docspace-mcp", "listing_class": "agent", "rank": 248, "previous_rank": 249, "rank_delta": 1, "stars": 32, "stars_fmt": "32", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 81, "commits_low_confidence": false, "score": 62.8, "description": "DocSpace MCP Server", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 141, "npm_package": "@onlyoffice/docspace-mcp", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/onlyoffice/docspace-mcp:3.2.0", "vscode_extension": "", "weekly_downloads": 35642, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:05:18Z", "slug": "docspace-mcp", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: lib/mcp/server.ts", "Found MCP-related server path: lib/mcp/sse-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DOCSPACE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@onlyoffice/docspace-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@onlyoffice/docspace-mcp", "version": "3.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 75.0, "trust_score_v2": 75.0, "rank_v2": 248, "rank_v2_delta": 52, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.5, "identity": 18.0, "transparency": 11.2, "maintenance": 19.6, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Openmed", "repo": "maziyarpanahi/openmed", "display_repo": "", "url": "https://github.com/maziyarpanahi/openmed", "listing_class": "skill", "rank": 25, "previous_rank": 25, "rank_delta": 0, "stars": 5604, "stars_fmt": "5.6k", "forks": 715, "forks_fmt": "715", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1083, "commits_low_confidence": false, "score": 85.8, "description": "Local-first healthcare AI: clinical NER and HIPAA PII de-identification on hardware you control. 2,200+ medical models, 35 model-backed PII languages, and Python, MLX, Android and browser runtimes. Apache-2.0 SDK.", "language": "Python", "open_issues": 398, "category": "Agent Skills", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "openmed", "docker_image": "", "vscode_extension": "", "weekly_downloads": 470930, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.96, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T06:00:45Z", "slug": "openmed", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "https://openmed.life/", "homepage_icon": "/site-icons/7c120eeb63459357.png", "homepage_icon_for": "https://openmed.life/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: openmed/mcp/server.py", "Found MCP-related server test path: tests/unit/mcp/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Postgres dependency 'pg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'pg' in pyproject.toml", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'openmed' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openmed", "version": "3.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:55Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 74.9, "trust_score_v2": 74.9, "rank_v2": 25, "rank_v2_delta": 188, "trust_v2_adjustment": 1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.8, "maintenance": 20.0, "adoption": 16.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zenrows MCP", "repo": "ZenRows/zenrows-mcp", "display_repo": "", "url": "https://github.com/ZenRows/zenrows-mcp", "listing_class": "agent", "rank": 249, "previous_rank": 256, "rank_delta": 7, "stars": 19, "stars_fmt": "19", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 22, "commits_low_confidence": false, "score": 53.4, "description": "Official ZenRows MCP integration", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 142, "npm_package": "@zenrows/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1060, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.23, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:47:48Z", "slug": "zenrows-mcp", "full_fetched_at": "2026-10-12T04:02:33Z", "source_note": "", "github_homepage": "https://www.zenrows.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@zenrows/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@zenrows/mcp", "version": "2.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:33Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.9, "trust_score_v2": 74.9, "rank_v2": 249, "rank_v2_delta": 57, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.7, "identity": 18.0, "transparency": 12.6, "maintenance": 17.4, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pyod", "repo": "yzhao062/pyod", "display_repo": "", "url": "https://github.com/yzhao062/pyod", "listing_class": "agent", "rank": 250, "previous_rank": 285, "rank_delta": 35, "stars": 10029, "stars_fmt": "10.0k", "forks": 1513, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 25, "commits_low_confidence": false, "score": 81.4, "description": "A Python library for anomaly detection across tabular, time series, graph, text, image, and audio data. 60+ detectors, benchmark-backed ADEngine orchestration, and an agentic workflow for AI agents.", "language": "Python", "open_issues": 192, "category": "Agent Frameworks", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "pyod", "docker_image": "", "vscode_extension": "", "weekly_downloads": 600471, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.48, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-11T10:33:49Z", "slug": "pyod", "full_fetched_at": "2026-10-12T12:02:31Z", "source_note": "", "github_homepage": "https://pyod.dev/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: pyod/mcp_server.py", "Found MCP-related server test path: pyod/test/test_mcp_server_import.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'pyod' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pyod", "version": "3.6.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-2-Clause", "license_type": "open", "license_override": "", "trust_score": 74.8, "trust_score_v2": 74.8, "rank_v2": 250, "rank_v2_delta": 88, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 13.4, "maintenance": 17.6, "adoption": 17.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FHIR MCP Server", "repo": "wso2/fhir-mcp-server", "display_repo": "", "url": "https://github.com/wso2/fhir-mcp-server", "listing_class": "agent", "rank": 251, "previous_rank": 313, "rank_delta": 62, "stars": 137, "stars_fmt": "137", "forks": 57, "forks_fmt": "57", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 5, "commits_low_confidence": false, "score": 55.7, "description": "FHIR MCP Server – helping you expose any FHIR Server or API as a MCP Server.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 143, "npm_package": "", "crate_package": "", "pypi_package": "fhir-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 218, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.67, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:34:43Z", "slug": "fhir-mcp-server", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/publish-fhir-mcp-server.yml", "Found MCP-related server path: src/fhir_mcp_server/__init__.py", "Found MCP dependency 'modelcontextprotocol' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FHIR_SERVER_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'fhir-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "fhir-mcp-server", "version": "0.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:40Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 74.8, "trust_score_v2": 74.8, "rank_v2": 251, "rank_v2_delta": 58, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.2, "identity": 18.0, "transparency": 12.2, "maintenance": 15.1, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AirMCP", "repo": "heznpc/AirMCP", "display_repo": "", "url": "https://github.com/heznpc/AirMCP", "listing_class": "agent", "rank": 252, "previous_rank": 231, "rank_delta": -21, "stars": 18, "stars_fmt": "18", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 9, "commits_low_confidence": true, "score": 47.0, "description": "Governed MCP runtime for the Apple ecosystem — verified control over Notes, Mail, Calendar, Shortcuts, and more.", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 144, "npm_package": "airmcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 126, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.66, "scorecard_score": 6.3, "scorecard_checks": { "Dependency-Update-Tool": 10, "Code-Review": 0, "Security-Policy": 10, "Maintained": 10, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "Token-Permissions": 0, "CII-Best-Practices": 0, "Pinned-Dependencies": 9, "Packaging": 10, "Vulnerabilities": 2, "Fuzzing": 0, "Branch-Protection": -1, "SAST": 10, "License": 10, "Signed-Releases": 0, "Contributors": 10, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T16:04:23Z", "slug": "airmcp", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "https://heznpc.github.io/AirMCP/", "homepage_icon": "/site-icons/c6c6d259dd6836ac.png", "homepage_icon_for": "https://heznpc.github.io/AirMCP/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'AIRMCP_HTTP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'airmcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "airmcp", "version": "2.16.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:19Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.7, "trust_score_v2": 74.7, "rank_v2": 252, "rank_v2_delta": 51, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.7, "identity": 18.0, "transparency": 13.9, "maintenance": 13.5, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Superset", "repo": "bintocher/mcp-superset", "display_repo": "", "url": "https://github.com/bintocher/mcp-superset", "listing_class": "agent", "rank": 253, "previous_rank": 250, "rank_delta": -3, "stars": 60, "stars_fmt": "60", "forks": 15, "forks_fmt": "15", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 45.5, "description": "MCP server for managing Apache Superset — 128+ tools for dashboards, charts, datasets, SQL Lab, access control", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 145, "npm_package": "", "crate_package": "", "pypi_package": "mcp-superset", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1286, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.485, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:20:52Z", "slug": "mcp-superset", "full_fetched_at": "2026-10-12T12:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-superset' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-superset", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:43Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.7, "trust_score_v2": 74.7, "rank_v2": 253, "rank_v2_delta": 92, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.4, "identity": 18.0, "transparency": 12.9, "maintenance": 13.0, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "RAGFlow", "repo": "infiniflow/ragflow", "display_repo": "", "url": "https://github.com/infiniflow/ragflow", "listing_class": "agent", "rank": 254, "previous_rank": 255, "rank_delta": 1, "stars": 92069, "stars_fmt": "92.1k", "forks": 10962, "forks_fmt": "11.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 830, "commits_low_confidence": false, "score": 98.6, "description": "RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs", "language": "Go", "open_issues": 993, "category": "Memory & Knowledge", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "infiniflow/ragflow", "vscode_extension": "", "weekly_downloads": 3887572, "dl_source": "docker", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T13:48:11Z", "slug": "ragflow", "full_fetched_at": "2026-10-12T04:02:45Z", "source_note": "", "github_homepage": "https://ragflow.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: internal/handler/mcp_server.go", "Found MCP-related server path: internal/handler/mcp_server_test.go", "Found MCP-related server docs path: docs/develop/mcp/connect_external_mcp_servers.md", "Found MCP-related server docs path: docs/develop/mcp/launch_mcp_server.md" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in web/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: tools/chatgpt-on-wechat/plugins/README.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 74.7, "trust_score_v2": 74.7, "rank_v2": 254, "rank_v2_delta": -70, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mcpcap", "repo": "mcpcap/mcpcap", "display_repo": "", "url": "https://github.com/mcpcap/mcpcap", "listing_class": "agent", "rank": 255, "previous_rank": 254, "rank_delta": -1, "stars": 51, "stars_fmt": "51", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 5, "commits_low_confidence": true, "score": 49.7, "description": "Network analysis for the AI age", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 146, "npm_package": "", "crate_package": "", "pypi_package": "mcpcap", "docker_image": "", "vscode_extension": "", "weekly_downloads": 131, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.88, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 2, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T19:49:06Z", "slug": "mcpcap", "full_fetched_at": "2026-10-11T20:01:58Z", "source_note": "", "github_homepage": "https://mcpcap.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCPCAP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcpcap' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcpcap", "version": "0.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:58Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.6, "trust_score_v2": 74.6, "rank_v2": 255, "rank_v2_delta": 58, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.5, "identity": 18.0, "transparency": 13.0, "maintenance": 13.2, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP AutoMem", "repo": "verygoodplugins/mcp-automem", "display_repo": "", "url": "https://github.com/verygoodplugins/mcp-automem", "listing_class": "agent", "rank": 256, "previous_rank": 251, "rank_delta": -5, "stars": 65, "stars_fmt": "65", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 40.8, "description": "MCP client for AutoMem — give Claude, Cursor, Codex, and other MCP tools durable graph+vector memory across conversations.", "language": "TypeScript", "open_issues": 15, "category": "MCP Servers", "category_rank": 147, "npm_package": "@verygoodplugins/mcp-automem", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 257, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:34:36Z", "slug": "mcp-automem", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "https://automem.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/host-smoke/mcp-server-contract.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@verygoodplugins/mcp-automem' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@verygoodplugins/mcp-automem", "version": "0.16.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:19Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.6, "trust_score_v2": 74.6, "rank_v2": 256, "rank_v2_delta": 79, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 12.8, "maintenance": 11.6, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Server Trello", "repo": "delorenj/mcp-server-trello", "display_repo": "", "url": "https://github.com/delorenj/mcp-server-trello", "listing_class": "agent", "rank": 257, "previous_rank": 252, "rank_delta": -5, "stars": 445, "stars_fmt": "445", "forks": 147, "forks_fmt": "147", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 1, "commits_low_confidence": false, "score": 52.3, "description": "A Model Context Protocol (MCP) server that provides tools for interacting with Trello boards.", "language": "TypeScript", "open_issues": 21, "category": "MCP Servers", "category_rank": 148, "npm_package": "@delorenj/mcp-server-trello", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1987, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.44, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:21:54Z", "slug": "mcp-server-trello", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .agents/skills/mcp-server-trello-craft-doctrine/.source.yaml", "Found MCP-related server path: .agents/skills/mcp-server-trello-craft-doctrine/SKILL.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@delorenj/mcp-server-trello' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@delorenj/mcp-server-trello", "version": "1.8.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.6, "trust_score_v2": 74.6, "rank_v2": 257, "rank_v2_delta": 55, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.1, "identity": 18.0, "transparency": 12.8, "maintenance": 11.9, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP FreeScout", "repo": "verygoodplugins/mcp-freescout", "display_repo": "", "url": "https://github.com/verygoodplugins/mcp-freescout", "listing_class": "agent", "rank": 258, "previous_rank": 253, "rank_delta": -5, "stars": 29, "stars_fmt": "29", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 0, "commits_low_confidence": true, "score": 39.1, "description": "An MCP (Model Context Protocol) server for FreeScout helpdesk ticket management and workflow automation. This server provides tools to interact with FreeScout tickets, analyze issues, manage responses, and integrate with Git workflows.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 149, "npm_package": "@verygoodplugins/mcp-freescout", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 227, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-04T19:15:19Z", "slug": "mcp-freescout", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: src/__tests__/mcp-server.test.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FREESCOUT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@verygoodplugins/mcp-freescout' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@verygoodplugins/mcp-freescout", "version": "3.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:32Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 74.5, "trust_score_v2": 74.5, "rank_v2": 258, "rank_v2_delta": 59, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.8, "identity": 18.0, "transparency": 14.3, "maintenance": 11.7, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Configcat MCP Server", "repo": "configcat/mcp-server", "display_repo": "", "url": "https://github.com/configcat/mcp-server", "listing_class": "agent", "rank": 259, "previous_rank": 306, "rank_delta": 47, "stars": 17, "stars_fmt": "17", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 2, "commits_low_confidence": true, "score": 40.9, "description": "Official ConfigCat Model Context Protocol (MCP) Server ", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 150, "npm_package": "@configcat/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 461, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.455, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:56:06Z", "slug": "configcat-mcp-server", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://configcat.com/docs/advanced/mcp-server/", "homepage_icon": "/site-icons/00f2299ee634e9a8.png", "homepage_icon_for": "https://configcat.com/docs/advanced/mcp-server/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@configcat/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@configcat/mcp-server", "version": "0.1.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:54Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.5, "trust_score_v2": 74.5, "rank_v2": 259, "rank_v2_delta": 94, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.4, "identity": 18.0, "transparency": 13.7, "maintenance": 12.8, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ServiceNow MCP Server", "repo": "jschuller/mcp-server-servicenow", "display_repo": "", "url": "https://github.com/jschuller/mcp-server-servicenow", "listing_class": "agent", "rank": 260, "previous_rank": 454, "rank_delta": 194, "stars": 24, "stars_fmt": "24", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 29, "commits_low_confidence": false, "score": 56.8, "description": "ServiceNow MCP server for Claude Code, GitHub Copilot, Codex and any MCP client: Table API, CMDB, schema, aggregates and update sets, plus four guided skills. Read-only identities see read-only tools; OAuth client credentials for headless use. Free, MIT, works on a free developer instance.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 151, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-servicenow", "docker_image": "", "vscode_extension": "", "weekly_downloads": 390, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.027, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:01:42Z", "slug": "servicenow-mcp-server", "full_fetched_at": "2026-10-12T16:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-server-servicenow' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-servicenow", "version": "0.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:34Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.5, "trust_score_v2": 74.5, "rank_v2": 260, "rank_v2_delta": 79, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.6, "identity": 18.0, "transparency": 12.6, "maintenance": 17.8, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cronometer Api MCP", "repo": "rwestergren/cronometer-api-mcp", "display_repo": "", "url": "https://github.com/rwestergren/cronometer-api-mcp", "listing_class": "agent", "rank": 261, "previous_rank": 267, "rank_delta": 6, "stars": 61, "stars_fmt": "61", "forks": 32, "forks_fmt": "32", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 12, "commits_low_confidence": false, "score": 56.8, "description": "MCP server for Cronometer nutrition tracking via the mobile REST API", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 152, "npm_package": "", "crate_package": "", "pypi_package": "cronometer-api-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 571, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.894, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:25:46Z", "slug": "cronometer-api-mcp", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'cronometer-api-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cronometer-api-mcp", "version": "0.2.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:38Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.5, "trust_score_v2": 74.5, "rank_v2": 261, "rank_v2_delta": -13, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.7, "identity": 18.0, "transparency": 12.4, "maintenance": 16.4, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP After Effects", "repo": "kumoproductions/mcp-aftereffects", "display_repo": "", "url": "https://github.com/kumoproductions/mcp-aftereffects", "listing_class": "agent", "rank": 262, "previous_rank": 257, "rank_delta": -5, "stars": 107, "stars_fmt": "107", "forks": 7, "forks_fmt": "7", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 4, "commits_low_confidence": false, "score": 48.3, "description": "TypeScript MCP server for Adobe After Effects (Windows & macOS) — project/comp/layer introspection, atomic undo-grouped operations, JSON project export/import, and single-frame rendering via file IPC.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 153, "npm_package": "@kumoproductions/mcp-aftereffects", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1680, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:07:02Z", "slug": "mcp-after-effects", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@kumoproductions/mcp-aftereffects' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@kumoproductions/mcp-aftereffects", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:21Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.4, "trust_score_v2": 74.4, "rank_v2": 262, "rank_v2_delta": 95, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.2, "identity": 18.0, "transparency": 11.1, "maintenance": 13.9, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Chrome DevTools MCP", "repo": "ChromeDevTools/chrome-devtools-mcp", "display_repo": "", "url": "https://github.com/ChromeDevTools/chrome-devtools-mcp", "listing_class": "agent", "rank": 263, "previous_rank": 259, "rank_delta": -4, "stars": 53349, "stars_fmt": "53.3k", "forks": 6332, "forks_fmt": "6.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 118, "commits_low_confidence": false, "score": 96.1, "description": "Chrome DevTools for coding agents", "language": "TypeScript", "open_issues": 168, "category": "Protocols & Tool Integration", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 8.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:53:52Z", "slug": "chrome-devtools-mcp", "full_fetched_at": "2026-10-12T04:02:21Z", "source_note": "", "github_homepage": "https://developer.chrome.com/docs/devtools/agents", "homepage_icon": "/site-icons/f35755423a19541c.png", "homepage_icon_for": "https://developer.chrome.com/docs/devtools/agents", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "Found browser dependency 'puppeteer' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 74.3, "trust_score_v2": 74.3, "rank_v2": 263, "rank_v2_delta": -40, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.6, "identity": 10.8, "transparency": 15.7, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dynatrace MCP", "repo": "dynatrace-oss/dynatrace-mcp", "display_repo": "", "url": "https://github.com/dynatrace-oss/dynatrace-mcp", "listing_class": "agent", "rank": 264, "previous_rank": 260, "rank_delta": -4, "stars": 137, "stars_fmt": "137", "forks": 27, "forks_fmt": "27", "last_push": "2026-08-26", "days_ago": 47, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.0, "description": "MCP server for Dynatrace Observability", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 154, "npm_package": "@dynatrace-oss/dynatrace-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 16795, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 5.1, "scorecard_checks": { "CI-Tests": -1, "Maintained": 10, "Security-Policy": 10, "Dangerous-Workflow": 10, "Code-Review": 0, "Token-Permissions": 0, "SAST": 0, "Binary-Artifacts": 10, "License": 10, "CII-Best-Practices": 0, "Pinned-Dependencies": 2, "Packaging": 10, "Fuzzing": 0, "Branch-Protection": -1, "Vulnerabilities": 0, "Signed-Releases": 0, "Dependency-Update-Tool": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T12:06:43Z", "slug": "dynatrace-mcp", "full_fetched_at": "2026-10-12T12:03:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'DT_PLATFORM_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@dynatrace-oss/dynatrace-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@dynatrace-oss/dynatrace-mcp-server", "version": "2.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:06Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "dynatrace-oss/dynatrace-mcp", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.3, "trust_score_v2": 74.3, "rank_v2": 264, "rank_v2_delta": 58, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.8, "identity": 18.0, "transparency": 12.8, "maintenance": 8.9, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Computer Use Linux", "repo": "agent-sh/computer-use-linux", "display_repo": "", "url": "https://github.com/agent-sh/computer-use-linux", "listing_class": "skill", "rank": 26, "previous_rank": 27, "rank_delta": 1, "stars": 683, "stars_fmt": "683", "forks": 77, "forks_fmt": "77", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 63, "commits_low_confidence": false, "score": 73.2, "description": "Linux desktop control over MCP — AT-SPI, GNOME Shell, Wayland portals, ydotool", "language": "Rust", "open_issues": 0, "category": "Agent Skills", "category_rank": 26, "npm_package": "@agent-sh/computer-use-linux", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1813, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.86, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 7, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-10T23:11:37Z", "slug": "computer-use-linux", "full_fetched_at": "2026-10-12T08:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: pi/test/fixtures/mcp-server.mjs", "Found MCP dependency 'modelcontextprotocol' in pi/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in scripts/zod-check/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/computer-use-linux/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@agent-sh/computer-use-linux' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@agent-sh/computer-use-linux", "version": "0.7.15" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:36Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.2, "trust_score_v2": 74.2, "rank_v2": 26, "rank_v2_delta": 325, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 10.8, "transparency": 14.4, "maintenance": 19.1, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ouroboros (Agent OS)", "repo": "Q00/ouroboros", "display_repo": "", "url": "https://github.com/Q00/ouroboros", "listing_class": "agent", "rank": 265, "previous_rank": 263, "rank_delta": -2, "stars": 6207, "stars_fmt": "6.2k", "forks": 627, "forks_fmt": "627", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 95, "commits_low_confidence": false, "score": 85.5, "description": "Agent OS: the agent gets smarter on its own. We just hold the line: Interview-gated, staged evaluation, budgeted evolution loop. MCP server, 14 runtimes: Claude Code, Codex CLI, Gemini CLI, OpenCode, Copilot, Kiro and more.", "language": "Python", "open_issues": 71, "category": "Coding Agents", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "ouroboros-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 10272, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:59:45Z", "slug": "ouroboros-agent-os", "full_fetched_at": "2026-10-12T00:01:58Z", "source_note": "", "github_homepage": "https://ouroboros.page/", "homepage_icon": "/site-icons/526df1bc4556d86f.png", "homepage_icon_for": "https://ouroboros.page/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/ouroboros/mcp/tools/job_observer.py", "Found MCP-related server test path: tests/integration/mcp/bridge/test_bridge_server_to_server.py", "Found MCP-related server test path: tests/integration/mcp/test_server_adapter.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/ouroboros/cli/commands/setup.py", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'gemini-cli' in src/ouroboros/cli/commands/setup.py", "README/docs also mention Google Gemini", "Found OpenRouter dependency 'openrouter' in src/ouroboros/cli/commands/setup.py" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found shell dependency 'subprocess' in src/ouroboros/cli/commands/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ouroboros-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ouroboros-ai", "version": "0.55.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:58Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.2, "trust_score_v2": 74.2, "rank_v2": 265, "rank_v2_delta": 13, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 19.9, "adoption": 14.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Memsearch", "repo": "zilliztech/memsearch", "display_repo": "", "url": "https://github.com/zilliztech/memsearch", "listing_class": "skill", "rank": 27, "previous_rank": 26, "rank_delta": -1, "stars": 2738, "stars_fmt": "2.7k", "forks": 267, "forks_fmt": "267", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 10, "commits_low_confidence": false, "score": 69.5, "description": "A persistent, unified memory layer for all your AI agents (e.g. Claude Code, Codex, DSH), backed by Markdown and Milvus.", "language": "Python", "open_issues": 50, "category": "Agent Skills", "category_rank": 27, "npm_package": "", "crate_package": "", "pypi_package": "memsearch", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3378, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.87, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-25T07:13:13Z", "slug": "memsearch", "full_fetched_at": "2026-10-12T04:02:23Z", "source_note": "", "github_homepage": "https://zilliztech.github.io/memsearch/", "homepage_icon": "/site-icons/7016edde3e7baadd.png", "homepage_icon_for": "https://zilliztech.github.io/memsearch/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Mistral AI", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'memsearch' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "memsearch", "version": "0.4.21" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:23Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.2, "trust_score_v2": 74.2, "rank_v2": 27, "rank_v2_delta": 121, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.9, "identity": 18.0, "transparency": 12.6, "maintenance": 16.0, "adoption": 13.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "reMarkable MCP Server", "repo": "SamMorrowDrums/remarkable-mcp", "display_repo": "", "url": "https://github.com/SamMorrowDrums/remarkable-mcp", "listing_class": "agent", "rank": 266, "previous_rank": 261, "rank_delta": -5, "stars": 245, "stars_fmt": "245", "forks": 52, "forks_fmt": "52", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 5, "commits_low_confidence": true, "score": 56.4, "description": "MCP server for accessing reMarkable tablet data - sync files, extract text from highlights, and browse your reMarkable cloud", "language": "Python", "open_issues": 12, "category": "MCP Servers", "category_rank": 155, "npm_package": "", "crate_package": "", "pypi_package": "remarkable-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 415, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.42, "scorecard_score": 6.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:19:15Z", "slug": "remarkable-mcp-server", "full_fetched_at": "2026-10-12T00:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker '22GOOGLE_VISION_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'remarkable-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "remarkable-mcp", "version": "2.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:04Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.1, "trust_score_v2": 74.1, "rank_v2": 266, "rank_v2_delta": -29, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.2, "identity": 18.0, "transparency": 14.4, "maintenance": 13.3, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenShell", "repo": "NVIDIA/OpenShell", "display_repo": "", "url": "https://github.com/NVIDIA/OpenShell", "listing_class": "agent", "rank": 267, "previous_rank": 266, "rank_delta": -1, "stars": 15944, "stars_fmt": "15.9k", "forks": 1770, "forks_fmt": "1.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 321, "commits_low_confidence": false, "score": 90.3, "description": "OpenShell is the safe, private runtime for autonomous AI agents.", "language": "Rust", "open_issues": 399, "category": "Sandboxes & Runtimes", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "openshell", "docker_image": "", "vscode_extension": "", "weekly_downloads": 104605, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T03:58:59Z", "slug": "openshell", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "https://docs.nvidia.com/openshell/latest/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: crates/openshell-driver-vm/src/extensions/mod.rs", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'openshell' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openshell", "version": "0.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:24Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 74.1, "trust_score_v2": 74.1, "rank_v2": 267, "rank_v2_delta": -73, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 10.8, "transparency": 14.0, "maintenance": 20.0, "adoption": 16.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Rubber Duck", "repo": "nesquikm/mcp-rubber-duck", "display_repo": "", "url": "https://github.com/nesquikm/mcp-rubber-duck", "listing_class": "agent", "rank": 268, "previous_rank": 262, "rank_delta": -6, "stars": 179, "stars_fmt": "179", "forks": 25, "forks_fmt": "25", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 6, "commits_low_confidence": true, "score": 55.2, "description": "An MCP server that acts as a bridge to query multiple OpenAI-compatible LLMs with MCP tool access. Just like rubber duck debugging, explain your problems to various AI \"ducks\" who can actually research and get different perspectives!", "language": "TypeScript", "open_issues": 28, "category": "MCP Servers", "category_rank": 156, "npm_package": "mcp-rubber-duck", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 539, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:13:33Z", "slug": "mcp-rubber-duck", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .claude/skills/setup-mcp-server/SKILL.md", "Found MCP-related server path: .claude/skills/setup-mcp-server/references/provider-env-vars.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "Groq", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini", "Found Groq credential/config marker 'GROQ_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/guardrails/plugins/base-plugin.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-rubber-duck' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-rubber-duck", "version": "1.20.9" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 74.1, "trust_score_v2": 74.1, "rank_v2": 268, "rank_v2_delta": 25, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.3, "identity": 18.0, "transparency": 13.5, "maintenance": 13.5, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Composio", "repo": "composiohq/composio", "display_repo": "", "url": "https://github.com/ComposioHQ/composio", "listing_class": "agent", "rank": 269, "previous_rank": 247, "rank_delta": -22, "stars": 30506, "stars_fmt": "30.5k", "forks": 4850, "forks_fmt": "4.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 416, "commits_low_confidence": false, "score": 94.0, "description": "Composio powers 1000+ toolkits, tool search, context management, authentication, and a sandboxed workbench to help you build AI agents that turn intent into action.", "language": "TypeScript", "open_issues": 49, "category": "Protocols & Tool Integration", "category_rank": 13, "npm_package": "composio-core", "crate_package": "", "pypi_package": "composio-core", "docker_image": "", "vscode_extension": "", "weekly_downloads": 54564, "dl_source": "npm+pypi", "hn_mentions_30d": 59, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 0.54, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 2, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:59:26Z", "slug": "composio", "full_fetched_at": "2026-10-12T04:02:32Z", "source_note": "", "github_homepage": "https://docs.composio.dev", "homepage_icon": "/site-icons/ca6c373b820a3037.png", "homepage_icon_for": "https://docs.composio.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: docs/content/docs/migration-guide/mcp-servers-to-sessions.mdx", "Found MCP-related server docs path: docs/public/images/troubleshooting/troubleshooting-mcp-server-url.png" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in python/setup.py", "README/docs also mention OpenAI", "Found credential/config marker 'COMPOSIO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: ts/e2e-tests/cli/setup-plugins/e2e.test.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'composio-core' does not expose a source repo URL", "pypi package 'composio-core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "composio-core", "version": "0.7.21" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:32Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.9, "trust_score_v2": 73.9, "rank_v2": 269, "rank_v2_delta": -40, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 14.2, "maintenance": 20.0, "adoption": 17.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Marlinjai Email MCP", "repo": "marlinjai/email-mcp", "display_repo": "", "url": "https://github.com/marlinjai/email-mcp", "listing_class": "agent", "rank": 270, "previous_rank": 270, "rank_delta": 0, "stars": 24, "stars_fmt": "24", "forks": 18, "forks_fmt": "18", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 26, "commits_low_confidence": false, "score": 56.9, "description": "Unified MCP server for email access across Gmail, Outlook, iCloud, and IMAP", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 157, "npm_package": "@marlinjai/email-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 582, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.31, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:54:57Z", "slug": "marlinjai-email-mcp", "full_fetched_at": "2026-10-11T20:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@marlinjai/email-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@marlinjai/email-mcp", "version": "1.10.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:54Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.9, "trust_score_v2": 73.9, "rank_v2": 270, "rank_v2_delta": 103, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 11.6, "maintenance": 17.6, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Satelliteoflove Godot MCP", "repo": "satelliteoflove/godot-mcp", "display_repo": "", "url": "https://github.com/satelliteoflove/godot-mcp", "listing_class": "agent", "rank": 271, "previous_rank": 268, "rank_delta": -3, "stars": 173, "stars_fmt": "173", "forks": 21, "forks_fmt": "21", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 1, "commits_low_confidence": false, "score": 47.2, "description": "Give your AI assistant eyes and hands in the Godot editor: scene editing, input injection, deterministic playtesting, and live game state for agents", "language": "GDScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 158, "npm_package": "@satelliteoflove/godot-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 609, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:52:30Z", "slug": "satelliteoflove-godot-mcp", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in server/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@satelliteoflove/godot-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@satelliteoflove/godot-mcp", "version": "4.1.11" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:08Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.8, "trust_score_v2": 73.8, "rank_v2": 271, "rank_v2_delta": 39, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.0, "identity": 18.0, "transparency": 12.2, "maintenance": 12.5, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Honcho", "repo": "plastic-labs/honcho", "display_repo": "", "url": "https://github.com/plastic-labs/honcho", "listing_class": "agent", "rank": 272, "previous_rank": 275, "rank_delta": 3, "stars": 7581, "stars_fmt": "7.6k", "forks": 932, "forks_fmt": "932", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 89, "commits_low_confidence": false, "score": 86.5, "description": " Memory library for building stateful agents", "language": "Python", "open_issues": 102, "category": "Memory & Knowledge", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "honcho-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 109616, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.95, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:44:52Z", "slug": "honcho", "full_fetched_at": "2026-10-11T20:02:13Z", "source_note": "", "github_homepage": "https://honcho.dev/docs", "homepage_icon": "/site-icons/4149d9d085cfa43e.png", "homepage_icon_for": "https://honcho.dev/docs", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pg' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'honcho-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "honcho-ai", "version": "2.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:13Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 73.7, "trust_score_v2": 73.7, "rank_v2": 272, "rank_v2_delta": -52, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 10.8, "transparency": 14.0, "maintenance": 19.8, "adoption": 16.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Livetennisapi MCP", "repo": "livetennisapi/livetennisapi-mcp", "display_repo": "", "url": "https://github.com/livetennisapi/livetennisapi-mcp", "listing_class": "agent", "rank": 273, "previous_rank": 271, "rank_delta": -2, "stars": 152, "stars_fmt": "152", "forks": 53, "forks_fmt": "53", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 9, "commits_low_confidence": true, "score": 58.7, "description": "MCP server for the Live Tennis API — give Claude, Cursor and other LLM agents real-time tennis scores, odds and model win-probability", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 159, "npm_package": "livetennisapi-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 82, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.081, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-03T13:15:41Z", "slug": "livetennisapi-mcp", "full_fetched_at": "2026-10-10T20:01:54Z", "source_note": "", "github_homepage": "https://docs.livetennisapi.com", "homepage_icon": "/site-icons/d22bd85115c0b8ef.png", "homepage_icon_for": "https://docs.livetennisapi.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'livetennisapi-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "livetennisapi-mcp", "version": "1.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-10T20:01:54Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.7, "trust_score_v2": 73.7, "rank_v2": 273, "rank_v2_delta": 97, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.0, "identity": 18.0, "transparency": 13.3, "maintenance": 13.9, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Jira Stdio", "repo": "freema/mcp-jira-stdio", "display_repo": "", "url": "https://github.com/freema/mcp-jira-stdio", "listing_class": "agent", "rank": 274, "previous_rank": 272, "rank_delta": -2, "stars": 14, "stars_fmt": "14", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 6, "commits_low_confidence": false, "score": 45.9, "description": "MCP server for Jira integration with stdio transport. Issue management, project tracking, and workflow automation via Model Context Protocol.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 160, "npm_package": "mcp-jira-stdio", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1275, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.78, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:03:07Z", "slug": "mcp-jira-stdio", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude/jira/.claude-plugin/plugin.json)", "Found credential/config marker 'JIRA_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/claude/jira/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-jira-stdio' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-jira-stdio", "version": "1.12.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:05Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.7, "trust_score_v2": 73.7, "rank_v2": 274, "rank_v2_delta": 56, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.0, "identity": 18.0, "transparency": 12.3, "maintenance": 14.7, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ZulipChat MCP Server", "repo": "akougkas/zulipchat-mcp", "display_repo": "", "url": "https://github.com/akougkas/zulipchat-mcp", "listing_class": "agent", "rank": 275, "previous_rank": 276, "rank_delta": 1, "stars": 32, "stars_fmt": "32", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 20, "commits_low_confidence": false, "score": 56.0, "description": "ZulipChat MCP Server - A Model Context Protocol server that bridges AI agents with Zulip Chat. Built with FastMCP for lightning-fast performance, featuring comprehensive chat management and intelligent summarization. Transform your Zulip workspace into an AI-powered collaboration hub!", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 161, "npm_package": "", "crate_package": "", "pypi_package": "zulipchat-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 601, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.1, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-01T21:08:30Z", "slug": "zulipchat-mcp-server", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: integrations/cursor/mcp.json", "Found MCP-related server path: integrations/portable/mcp.json", "Found MCP-related server test path: tests/test_fastmcp_tasks.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: integrations/claude-code/plugin/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'zulipchat-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "zulipchat-mcp", "version": "0.7.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.6, "trust_score_v2": 73.6, "rank_v2": 275, "rank_v2_delta": 58, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.9, "identity": 18.0, "transparency": 12.5, "maintenance": 17.1, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Freshcontext MCP", "repo": "PrinceGabriel-lgtm/freshcontext-mcp", "display_repo": "", "url": "https://github.com/PrinceGabriel-lgtm/freshcontext-mcp", "listing_class": "agent", "rank": 276, "previous_rank": 269, "rank_delta": -7, "stars": 12, "stars_fmt": "12", "forks": 3, "forks_fmt": "3", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 41, "commits_low_confidence": false, "score": 53.0, "description": "No longer developed. Last release 0.5.3 (MIT). FreshContext services: https://freshcontext.dev", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 162, "npm_package": "freshcontext-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 142, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:19:56Z", "slug": "freshcontext-mcp", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://freshcontext.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in worker/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'freshcontext-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "freshcontext-mcp", "version": "0.5.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.6, "trust_score_v2": 73.6, "rank_v2": 276, "rank_v2_delta": 98, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.6, "identity": 18.0, "transparency": 12.1, "maintenance": 17.7, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Reddit MCP Server", "repo": "jordanburke/reddit-mcp-server", "display_repo": "", "url": "https://github.com/jordanburke/reddit-mcp-server", "listing_class": "agent", "rank": 277, "previous_rank": 258, "rank_delta": -19, "stars": 287, "stars_fmt": "287", "forks": 49, "forks_fmt": "49", "last_push": "2026-09-27", "days_ago": 15, "weekly_commits": 20, "commits_low_confidence": false, "score": 62.3, "description": "⚙️ A Model Context Protocol (MCP) that provides tools for fetching and creating Reddit content", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 163, "npm_package": "reddit-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 618, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 1, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T22:58:12Z", "slug": "reddit-mcp-server", "full_fetched_at": "2026-10-12T16:02:33Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/reddit-mcp-server-icon.png", "Found MCP-related server path: assets/reddit-mcp-server-icon.svg", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OAUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'reddit-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "reddit-mcp-server", "version": "1.6.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:33Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.6, "trust_score_v2": 73.6, "rank_v2": 277, "rank_v2_delta": 70, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 18.0, "transparency": 11.7, "maintenance": 16.3, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Server Tauri", "repo": "hypothesi/mcp-server-tauri", "display_repo": "", "url": "https://github.com/hypothesi/mcp-server-tauri", "listing_class": "agent", "rank": 278, "previous_rank": 281, "rank_delta": 3, "stars": 317, "stars_fmt": "317", "forks": 45, "forks_fmt": "45", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 5, "commits_low_confidence": true, "score": 57.1, "description": "A Model Context Protocol (MCP) server and plugin for Tauri v2 development", "language": "TypeScript", "open_issues": 11, "category": "MCP Servers", "category_rank": 164, "npm_package": "@hypothesi/tauri-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3318, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T18:58:15Z", "slug": "mcp-server-tauri", "full_fetched_at": "2026-10-12T16:02:33Z", "source_note": "", "github_homepage": "https://hypothesi.github.io/mcp-server-tauri/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/cli/src/types/hypothesi-tauri-mcp-server.d.ts", "Found MCP-related server path: packages/mcp-server/CHANGELOG.md", "Found MCP-related server test path: packages/mcp-server/tests/e2e/dom-snapshot.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in packages/cli/package.json", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found shell dependency 'execa' in packages/mcp-server/package.json", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@hypothesi/tauri-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@hypothesi/tauri-mcp-server", "version": "0.13.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:33Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.6, "trust_score_v2": 73.6, "rank_v2": 278, "rank_v2_delta": 64, "trust_v2_adjustment": 4.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.5, "identity": 18.0, "transparency": 11.1, "maintenance": 13.4, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Yantrikdb MCP", "repo": "yantrikos/yantrikdb-mcp", "display_repo": "", "url": "https://github.com/yantrikos/yantrikdb-mcp", "listing_class": "agent", "rank": 279, "previous_rank": 278, "rank_delta": -1, "stars": 25, "stars_fmt": "25", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 15, "commits_low_confidence": false, "score": 51.7, "description": "Persistent cognitive memory for AI agents — drop-in MCP server for Claude Code, Cursor, and Windsurf with temporal decay, contradiction detection, a knowledge graph, and autonomous consolidation, backed by the YantrikDB Rust engine.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 165, "npm_package": "", "crate_package": "", "pypi_package": "yantrikdb-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 186, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.39, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T22:36:28Z", "slug": "yantrikdb-mcp", "full_fetched_at": "2026-10-12T04:02:15Z", "source_note": "", "github_homepage": "https://yantrikdb.com", "homepage_icon": "/site-icons/afcf463bd6d5ae87.png", "homepage_icon_for": "https://yantrikdb.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'YANTRIKDB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'yantrikdb-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "yantrikdb-mcp", "version": "0.24.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:15Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.4, "trust_score_v2": 73.4, "rank_v2": 279, "rank_v2_delta": 64, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.5, "identity": 18.0, "transparency": 12.6, "maintenance": 16.2, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "UK Legal Research", "repo": "paulieb89/uk-legal-mcp", "display_repo": "", "url": "https://github.com/paulieb89/uk-legal-mcp", "listing_class": "agent", "rank": 280, "previous_rank": 273, "rank_delta": -7, "stars": 18, "stars_fmt": "18", "forks": 5, "forks_fmt": "5", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 22, "commits_low_confidence": false, "score": 49.4, "description": "UK legal research MCP server — case law, legislation, Hansard, bills, committees, HMRC, OSCOLA citations.", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 166, "npm_package": "", "crate_package": "", "pypi_package": "uk-legal-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 36, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:54:05Z", "slug": "uk-legal-research", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://bouch.dev/guides/add-mcp-server", "homepage_icon": "/site-icons/337c5be98c474254.png", "homepage_icon_for": "https://bouch.dev/guides/add-mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'uk-legal-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "uk-legal-mcp", "version": "0.7.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.4, "trust_score_v2": 73.4, "rank_v2": 280, "rank_v2_delta": 113, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.0, "identity": 18.0, "transparency": 11.6, "maintenance": 15.6, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Arm MCP Server", "repo": "arm/mcp", "display_repo": "", "url": "https://github.com/arm/mcp", "listing_class": "agent", "rank": 281, "previous_rank": 282, "rank_delta": 1, "stars": 91, "stars_fmt": "91", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 94, "commits_low_confidence": false, "score": 67.6, "description": "Arm's MCP server", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 167, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/armlimited/arm-mcp:2.4.0", "vscode_extension": "", "weekly_downloads": 34528, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.55, "scorecard_score": 9.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 2, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T21:03:16Z", "slug": "arm-mcp-server", "full_fetched_at": "2026-10-12T08:02:45Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in mcp-local/pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in mcp-local/pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 73.3, "trust_score_v2": 73.3, "rank_v2": 281, "rank_v2_delta": -15, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 10.8, "transparency": 16.1, "maintenance": 19.9, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Zuul", "repo": "imatza-rh/mcp-zuul", "display_repo": "", "url": "https://github.com/imatza-rh/mcp-zuul", "listing_class": "agent", "rank": 282, "previous_rank": 277, "rank_delta": -5, "stars": 21, "stars_fmt": "21", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 5, "commits_low_confidence": true, "score": 46.9, "description": "MCP server for Zuul CI - debug build failures, search logs, manage pipelines, and monitor jobs from Claude, Cursor, or any MCP client", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 168, "npm_package": "", "crate_package": "", "pypi_package": "mcp-zuul", "docker_image": "", "vscode_extension": "", "weekly_downloads": 87, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.23, "scorecard_score": 6.6, "scorecard_checks": { "Dependency-Update-Tool": 10, "Maintained": 10, "Code-Review": 0, "Binary-Artifacts": 10, "Token-Permissions": 0, "Security-Policy": 10, "Dangerous-Workflow": 10, "Vulnerabilities": 10, "CII-Best-Practices": 0, "License": 10, "Pinned-Dependencies": 8, "Signed-Releases": 0, "Fuzzing": 0, "Packaging": 10, "SAST": 10, "Branch-Protection": -1, "Contributors": 3, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T16:04:26Z", "slug": "mcp-zuul", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'ZUUL_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-zuul' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-zuul", "version": "0.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:24Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 73.3, "trust_score_v2": 73.3, "rank_v2": 282, "rank_v2_delta": 77, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.9, "identity": 18.0, "transparency": 14.1, "maintenance": 13.5, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Saga MCP", "repo": "spranab/saga-mcp", "display_repo": "", "url": "https://github.com/spranab/saga-mcp", "listing_class": "agent", "rank": 283, "previous_rank": 279, "rank_delta": -4, "stars": 39, "stars_fmt": "39", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 12, "commits_low_confidence": false, "score": 52.5, "description": "Your agent loses the plan between sessions, so saga-mcp gives it a SQLite-backed tracker for projects, epics, tasks, subtasks, dependencies, and notes: 41 MCP tools, an activity log, and a one-call dashboard, with no accounts and no external services.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 169, "npm_package": "saga-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 155, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.246, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-11T16:46:10Z", "slug": "saga-mcp", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'saga-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "saga-mcp", "version": "1.19.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:17Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.3, "trust_score_v2": 73.3, "rank_v2": 283, "rank_v2_delta": 115, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.2, "identity": 18.0, "transparency": 12.2, "maintenance": 16.1, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Letta", "repo": "letta-ai/letta", "display_repo": "", "url": "https://github.com/letta-ai/letta", "listing_class": "agent", "rank": 284, "previous_rank": 284, "rank_delta": 0, "stars": 25114, "stars_fmt": "25.1k", "forks": 2641, "forks_fmt": "2.6k", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 63.0, "description": "Platform for stateful agents: AI with advanced memory that can learn and self-improve over time.", "language": "", "open_issues": 0, "category": "Memory & Knowledge", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "letta", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4449, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.13, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T17:10:51Z", "slug": "letta", "full_fetched_at": "2026-10-12T04:02:49Z", "source_note": "", "github_homepage": "https://docs.letta.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'letta' points to letta-ai/letta-code (same owner as letta-ai/letta, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "letta", "version": "0.34.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:49Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 73.2, "trust_score_v2": 73.2, "rank_v2": 284, "rank_v2_delta": -51, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.0, "identity": 18.0, "transparency": 13.9, "maintenance": 9.9, "adoption": 15.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Proxmox VE MCP Server", "repo": "Samik081/mcp-pve", "display_repo": "", "url": "https://github.com/Samik081/mcp-pve", "listing_class": "agent", "rank": 285, "previous_rank": 280, "rank_delta": -5, "stars": 24, "stars_fmt": "24", "forks": 4, "forks_fmt": "4", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 5, "commits_low_confidence": false, "score": 44.7, "description": "Manage Proxmox VE through AI assistants", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 170, "npm_package": "@samik081/mcp-pve", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/samik081/mcp-pve:0.7.0", "vscode_extension": "", "weekly_downloads": 118, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:19:10Z", "slug": "proxmox-ve-mcp-server", "full_fetched_at": "2026-10-12T00:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@samik081/mcp-pve' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@samik081/mcp-pve", "version": "0.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:05Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.2, "trust_score_v2": 73.2, "rank_v2": 285, "rank_v2_delta": 117, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.2, "identity": 18.0, "transparency": 11.7, "maintenance": 14.2, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "GraphRAG", "repo": "microsoft/graphrag", "display_repo": "", "url": "https://github.com/microsoft/graphrag", "listing_class": "agent", "rank": 286, "previous_rank": 289, "rank_delta": 3, "stars": 36298, "stars_fmt": "36.3k", "forks": 3843, "forks_fmt": "3.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 6, "commits_low_confidence": true, "score": 79.6, "description": "A modular graph-based Retrieval-Augmented Generation (RAG) system", "language": "Python", "open_issues": 20, "category": "Memory & Knowledge", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "graphrag", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12016, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T12:00:46Z", "slug": "graphrag", "full_fetched_at": "2026-10-12T08:02:08Z", "source_note": "", "github_homepage": "https://microsoft.github.io/graphrag/", "homepage_icon": "/site-icons/0f4faba7b9be9191.png", "homepage_icon_for": "https://microsoft.github.io/graphrag/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in packages/graphrag-llm/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'graphrag' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "graphrag", "version": "3.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:08Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.1, "trust_score_v2": 73.1, "rank_v2": 286, "rank_v2_delta": 41, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.8, "identity": 10.8, "transparency": 14.4, "maintenance": 13.7, "adoption": 16.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Weaviate", "repo": "weaviate/weaviate", "display_repo": "", "url": "https://github.com/weaviate/weaviate", "listing_class": "agent", "rank": 287, "previous_rank": 283, "rank_delta": -4, "stars": 16876, "stars_fmt": "16.9k", "forks": 1421, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1255, "commits_low_confidence": false, "score": 90.1, "description": "Weaviate is an open-source vector database that stores both objects and vectors, allowing for the combination of vector search with structured filtering with the fault tolerance and scalability of a cloud-native database​.", "language": "Go", "open_issues": 487, "category": "Memory & Knowledge", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "weaviate-client", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1590192, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.32, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-12T00:23:01Z", "slug": "weaviate", "full_fetched_at": "2026-10-12T12:02:23Z", "source_note": "", "github_homepage": "https://weaviate.io/developers/weaviate/", "homepage_icon": "/site-icons/852fd02e7e792a19.png", "homepage_icon_for": "https://weaviate.io/developers/weaviate/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: adapters/handlers/mcp/server.go", "Found MCP-related server path: adapters/handlers/mcp/server_test.go" ] }, "external_service_dependencies": { "providers": [ "Weaviate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Weaviate dependency 'weaviate' in test/acceptance_with_python/requirements.txt", "README/docs also mention Weaviate" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'weaviate' in test/acceptance_with_python/requirements.txt", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'weaviate-client' points to weaviate/weaviate-python-client (same owner as weaviate/weaviate, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "weaviate-client", "version": "4.23.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:23Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 73.1, "trust_score_v2": 73.1, "rank_v2": 287, "rank_v2_delta": -63, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 14.2, "maintenance": 20.0, "adoption": 18.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Quicken Mac MCP", "repo": "dweekly/quicken-mac-mcp", "display_repo": "", "url": "https://github.com/dweekly/quicken-mac-mcp", "listing_class": "agent", "rank": 288, "previous_rank": 286, "rank_delta": -2, "stars": 44, "stars_fmt": "44", "forks": 8, "forks_fmt": "8", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.9, "description": "MCP server providing read-only access to Quicken For Mac financial data via Claude", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 171, "npm_package": "quicken-mac-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 76, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.929, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T13:26:56Z", "slug": "quicken-mac-mcp", "full_fetched_at": "2026-10-12T12:03:08Z", "source_note": "", "github_homepage": "https://dweekly.github.io/quicken-mac-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugin/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'quicken-mac-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "quicken-mac-mcp", "version": "1.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:08Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.1, "trust_score_v2": 73.1, "rank_v2": 288, "rank_v2_delta": 106, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.5, "identity": 18.0, "transparency": 13.5, "maintenance": 9.9, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Feynman", "repo": "Companion-Inc/feynman", "display_repo": "", "url": "https://github.com/Companion-Inc/feynman", "listing_class": "agent", "rank": 289, "previous_rank": 292, "rank_delta": 3, "stars": 9946, "stars_fmt": "9.9k", "forks": 1097, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 259, "commits_low_confidence": false, "score": 88.1, "description": "The open source AI research agent.", "language": "TypeScript", "open_issues": 0, "category": "Research & Data", "category_rank": 6, "npm_package": "@companion-ai/feynman", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 18177, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "feynman", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "https://feynman.is", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in website/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OPENALEX_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: extensions/research-tools.ts" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@companion-ai/feynman' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@companion-ai/feynman", "version": "0.5.38" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:39Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 73.0, "trust_score_v2": 73.0, "rank_v2": 289, "rank_v2_delta": -2, "trust_v2_adjustment": 2.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 18.0, "transparency": 8.5, "maintenance": 20.0, "adoption": 15.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AWS MCP Servers", "repo": "awslabs/mcp", "display_repo": "", "url": "https://github.com/awslabs/mcp", "listing_class": "agent", "rank": 290, "previous_rank": 287, "rank_delta": -3, "stars": 9773, "stars_fmt": "9.8k", "forks": 1805, "forks_fmt": "1.8k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 58, "commits_low_confidence": false, "score": 85.8, "description": "Open source MCP Servers for AWS", "language": "Python", "open_issues": 148, "category": "MCP Servers", "category_rank": 172, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 9.1, "scorecard_checks": { "Maintained": 10, "Code-Review": 10, "CII-Best-Practices": 5, "Dangerous-Workflow": 10, "License": 10, "Binary-Artifacts": 10, "Token-Permissions": 10, "Fuzzing": 0, "Pinned-Dependencies": 10, "Signed-Releases": -1, "Packaging": 10, "Branch-Protection": 10, "Security-Policy": 10, "SAST": 9 }, "scorecard_scanned_at": "2026-10-12T04:06:17Z", "slug": "aws-mcp-servers", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "https://awslabs.github.io/mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/ISSUE_TEMPLATE/support_awslabs_mcp_servers.yml", "Found MCP-related server path: docusaurus/i18n/ja/docusaurus-plugin-content-docs/current/samples/stepfunctions-tool-mcp-server.md", "Found MCP-related server docs path: docs/images/root-readme/configure-mcp-servers.png" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in src/ecs-mcp-server/pyproject.toml", "Found Amazon Bedrock credential/config marker 'AWS_ACCESS_KEY_ID'", "README/docs also mention Amazon Bedrock" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 72.9, "trust_score_v2": 72.9, "rank_v2": 290, "rank_v2_delta": -30, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.4, "identity": 10.8, "transparency": 16.2, "maintenance": 18.9, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Swarms", "repo": "kyegomez/swarms", "display_repo": "", "url": "https://github.com/kyegomez/swarms", "listing_class": "agent", "rank": 291, "previous_rank": 291, "rank_delta": 0, "stars": 7248, "stars_fmt": "7.2k", "forks": 1041, "forks_fmt": "1.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 111, "commits_low_confidence": false, "score": 87.2, "description": "The Enterprise-Grade Multi-Agent Orchestration Framework. Website: https://swarms.ai", "language": "Python", "open_issues": 143, "category": "Multi-Agent Systems", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "swarms", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1541, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 5, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:04:54Z", "slug": "swarms", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "https://docs.swarms.world", "homepage_icon": "/site-icons/0f20af4fbac19cb4.png", "homepage_icon_for": "https://docs.swarms.world", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/mcp/agents/04_multi_server_agent.py", "Found MCP-related server path: examples/mcp/agents/FREE_MCP_SERVERS.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Groq", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Groq credential/config marker 'GROQ_API_KEY'", "README/docs also mention Groq" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "high", "evidence": [ "Found marketplace path: examples/single_agent/integrations/marketplace/marketplace_prompt_example.py", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'swarms' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "swarms", "version": "16.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:51Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 72.9, "trust_score_v2": 72.9, "rank_v2": 291, "rank_v2_delta": 1, "trust_v2_adjustment": 2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 20.0, "adoption": 13.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -1.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Figma Ui MCP", "repo": "TranHoaiHung/figma-ui-mcp", "display_repo": "", "url": "https://github.com/TranHoaiHung/figma-ui-mcp", "listing_class": "agent", "rank": 292, "previous_rank": 288, "rank_delta": -4, "stars": 263, "stars_fmt": "263", "forks": 47, "forks_fmt": "47", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 14, "commits_low_confidence": false, "score": 61.9, "description": "AI can draw UI directly on the Figma canvas via JavaScript, and read existing designs back as structured data. Works with Claude Code, Cursor, VS Code, and Windsurf. No API KEY required.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 173, "npm_package": "figma-ui-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 248, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T09:48:48Z", "slug": "figma-ui-mcp", "full_fetched_at": "2026-10-12T00:02:28Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugin/code.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'figma-ui-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "figma-ui-mcp", "version": "2.5.29" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:28Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.9, "trust_score_v2": 72.9, "rank_v2": 292, "rank_v2_delta": 109, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 18.0, "transparency": 11.6, "maintenance": 16.6, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "NeMo Guardrails", "repo": "NVIDIA-NeMo/Guardrails", "display_repo": "", "url": "https://github.com/NVIDIA-NeMo/Guardrails", "listing_class": "agent", "rank": 293, "previous_rank": 295, "rank_delta": 2, "stars": 7280, "stars_fmt": "7.3k", "forks": 865, "forks_fmt": "865", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 23, "commits_low_confidence": false, "score": 79.1, "description": "NeMo Guardrails is an open-source toolkit for easily adding programmable guardrails to LLM-based conversational systems.", "language": "Python", "open_issues": 154, "category": "Security & Guardrails", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "nemoguardrails", "docker_image": "", "vscode_extension": "", "weekly_downloads": 131825, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:08:31Z", "slug": "nemo-guardrails", "full_fetched_at": "2026-10-12T08:02:34Z", "source_note": "", "github_homepage": "https://docs.nvidia.com/nemo/guardrails/latest/index.html", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'nemoguardrails' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 72.8, "trust_score_v2": 72.8, "rank_v2": 293, "rank_v2_delta": -54, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.9, "identity": 10.8, "transparency": 14.5, "maintenance": 17.5, "adoption": 16.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zigbee2MQTT MCP", "repo": "alexpfau/zigbee2mqtt-mcp", "display_repo": "", "url": "https://github.com/alexpfau/zigbee2mqtt-mcp", "listing_class": "agent", "rank": 294, "previous_rank": 296, "rank_delta": 2, "stars": 31, "stars_fmt": "31", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 3, "commits_low_confidence": true, "score": 42.3, "description": "MCP server for administering a Zigbee2MQTT estate: health reporting, mesh diagnostics, OTA updates, pairing, binding and device options over the MQTT bridge API.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 174, "npm_package": "zigbee2mqtt-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 79, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:51:10Z", "slug": "zigbee2mqtt-mcp", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'zigbee2mqtt-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "zigbee2mqtt-mcp", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:37Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.8, "trust_score_v2": 72.8, "rank_v2": 294, "rank_v2_delta": 121, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 14.1, "maintenance": 12.9, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "StackQL MCP Server", "repo": "stackql/stackql", "display_repo": "", "url": "https://github.com/stackql/stackql", "listing_class": "agent", "rank": 295, "previous_rank": 298, "rank_delta": 3, "stars": 1069, "stars_fmt": "1.1k", "forks": 87, "forks_fmt": "87", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 38, "commits_low_confidence": false, "score": 72.0, "description": "Query, provision and operate Cloud, SaaS, API and Model Context Protocol (MCP) resources through a unified SQL-based framework for humans and AI agents.", "language": "Go", "open_issues": 115, "category": "MCP Servers", "category_rank": 175, "npm_package": "@stackql/mcp-server", "crate_package": "", "pypi_package": "stackql-mcp-server", "docker_image": "docker.io/stackql/stackql-mcp:0.10.591", "vscode_extension": "", "weekly_downloads": 3925, "dl_source": "docker+pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 0.98, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:07:39Z", "slug": "stackql-mcp-server", "full_fetched_at": "2026-10-12T00:02:22Z", "source_note": "", "github_homepage": "https://stackql.io/", "homepage_icon": "/site-icons/8e9abc7be555455f.png", "homepage_icon_for": "https://stackql.io/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server path: cicd/mcp-wringer/mcp-server.mjs" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in test/pyproject.toml", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@stackql/mcp-server' points to the tracked repo", "pypi package 'stackql-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@stackql/mcp-server", "version": "0.12.778" }, { "ecosystem": "PyPI", "name": "stackql-mcp-server", "version": "0.12.778" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:22Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.8, "trust_score_v2": 72.8, "rank_v2": 295, "rank_v2_delta": 110, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.3, "identity": 10.8, "transparency": 13.5, "maintenance": 18.4, "adoption": 12.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Sonilo Music & Sound Effects", "repo": "sonilo-ai/sonilo-mcp", "display_repo": "", "url": "https://github.com/sonilo-ai/sonilo-mcp", "listing_class": "agent", "rank": 296, "previous_rank": 293, "rank_delta": -3, "stars": 53, "stars_fmt": "53", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-19", "days_ago": 23, "weekly_commits": 7, "commits_low_confidence": false, "score": 45.7, "description": "", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 176, "npm_package": "", "crate_package": "", "pypi_package": "sonilo-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 171, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.41, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:33:00Z", "slug": "sonilo-music-sound-effects", "full_fetched_at": "2026-10-12T00:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SONILO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'sonilo-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sonilo-mcp", "version": "0.27.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:13Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.8, "trust_score_v2": 72.8, "rank_v2": 296, "rank_v2_delta": 84, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.8, "identity": 18.0, "transparency": 12.8, "maintenance": 14.1, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "YouTube Research MCP", "repo": "coyaSONG/youtube-mcp-server", "display_repo": "", "url": "https://github.com/coyaSONG/youtube-mcp-server", "listing_class": "agent", "rank": 297, "previous_rank": 294, "rank_delta": -3, "stars": 25, "stars_fmt": "25", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 24, "commits_low_confidence": false, "score": 55.8, "description": "Citation-ready YouTube research for AI agents — transcript search, exact timestamp links, cross-video evidence, and channel intelligence over MCP", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 177, "npm_package": "@coyasong/youtube-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 80, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.383, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 1, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:13:16Z", "slug": "youtube-research-mcp", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'YOUTUBE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@coyasong/youtube-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@coyasong/youtube-mcp-server", "version": "2.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:57Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.7, "trust_score_v2": 72.7, "rank_v2": 297, "rank_v2_delta": 86, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.4, "identity": 18.0, "transparency": 11.9, "maintenance": 17.5, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "EduBase MCP", "repo": "EduBase/MCP", "display_repo": "", "url": "https://github.com/EduBase/MCP", "listing_class": "agent", "rank": 298, "previous_rank": 265, "rank_delta": -33, "stars": 28, "stars_fmt": "28", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 51.6, "description": "The EduBase MCP server enables Claude and other LLMs to interact with EduBase's comprehensive e-learning platform through the Model Context Protocol (MCP).", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 178, "npm_package": "@edubase/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 132, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.72, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:01:32Z", "slug": "edubase-mcp", "full_fetched_at": "2026-10-12T16:01:50Z", "source_note": "", "github_homepage": "https://developer.edubase.net", "homepage_icon": "/site-icons/afe281dfac22e8cb.png", "homepage_icon_for": "https://developer.edubase.net", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'EDUBASE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@edubase/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@edubase/mcp", "version": "2.0.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:50Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.6, "trust_score_v2": 72.6, "rank_v2": 298, "rank_v2_delta": 90, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.9, "identity": 18.0, "transparency": 12.4, "maintenance": 14.0, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Tura", "repo": "Tura-AI/tura", "display_repo": "", "url": "https://github.com/Tura-AI/tura", "listing_class": "agent", "rank": 299, "previous_rank": 274, "rank_delta": -25, "stars": 654, "stars_fmt": "654", "forks": 36, "forks_fmt": "36", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 11, "commits_low_confidence": false, "score": 62.0, "description": "Build agent that uses 80% less token and delivers better results.", "language": "Rust", "open_issues": 2, "category": "Coding Agents", "category_rank": 13, "npm_package": "tura-ai", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 50, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.23, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:30:20Z", "slug": "tura", "full_fetched_at": "2026-10-12T00:02:41Z", "source_note": "", "github_homepage": "https://turaai.net/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'tura-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "tura-ai", "version": "0.1.37" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:41Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 72.6, "trust_score_v2": 72.6, "rank_v2": 299, "rank_v2_delta": 49, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 11.9, "maintenance": 16.0, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Sap Gui", "repo": "kts982/mcp-sap-gui", "display_repo": "", "url": "https://github.com/kts982/mcp-sap-gui", "listing_class": "agent", "rank": 300, "previous_rank": 299, "rank_delta": -1, "stars": 36, "stars_fmt": "36", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 32, "commits_low_confidence": false, "score": 58.5, "description": "MCP server for SAP GUI for Windows automation via the SAP GUI Scripting API.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 179, "npm_package": "", "crate_package": "", "pypi_package": "mcp-sap-gui", "docker_image": "", "vscode_extension": "", "weekly_downloads": 349, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.06, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:17:03Z", "slug": "mcp-sap-gui", "full_fetched_at": "2026-10-11T16:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-sap-gui' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-sap-gui", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:20Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.5, "trust_score_v2": 72.5, "rank_v2": 300, "rank_v2_delta": -10, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.4, "identity": 18.0, "transparency": 13.0, "maintenance": 17.9, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BeeAI Framework", "repo": "i-am-bee/beeai-framework", "display_repo": "", "url": "https://github.com/i-am-bee/beeai-framework", "listing_class": "agent", "rank": 301, "previous_rank": 305, "rank_delta": 4, "stars": 3431, "stars_fmt": "3.4k", "forks": 517, "forks_fmt": "517", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 76, "commits_low_confidence": false, "score": 82.3, "description": "Build production-ready AI agents in both Python and Typescript.", "language": "Python", "open_issues": 7, "category": "Agent Frameworks", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "beeai-framework", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6390, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 2, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:34:44Z", "slug": "beeai-framework", "full_fetched_at": "2026-10-12T04:02:46Z", "source_note": "", "github_homepage": "http://framework.beeai.dev", "homepage_icon": "/site-icons/8abbe804c607f343.png", "homepage_icon_for": "http://framework.beeai.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: python/beeai_framework/adapters/mcp/serve/server.py", "Found MCP-related server path: python/examples/serve/extend_mcp_server.py", "Found MCP dependency '@modelcontextprotocol/sdk' in typescript/package.json" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "Qdrant" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in typescript/package.json", "Found Anthropic dependency 'anthropic' in typescript/package.json", "Found Groq dependency 'groq' in typescript/package.json", "Found Multi-provider (LiteLLM) dependency 'litellm' in python/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in python/pyproject.toml", "Found Qdrant dependency 'qdrant' in typescript/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: docs/plugins/remark-auto-import.mjs", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'qdrant' in typescript/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'beeai-framework' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "beeai-framework", "version": "0.1.85" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:46Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 72.4, "trust_score_v2": 72.4, "rank_v2": 301, "rank_v2_delta": 15, "trust_v2_adjustment": 2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 19.5, "adoption": 13.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Deepseek MCP Server", "repo": "arikusi/deepseek-mcp-server", "display_repo": "", "url": "https://github.com/arikusi/deepseek-mcp-server", "listing_class": "agent", "rank": 302, "previous_rank": 300, "rank_delta": -2, "stars": 21, "stars_fmt": "21", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.7, "description": "MCP server for DeepSeek V4 (v4-flash, v4-pro, 1M context): chat, reasoning, function calling, thinking mode, cost tracking. deepseek-chat/reasoner aliases supported.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 180, "npm_package": "@arikusi/deepseek-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 623, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.75, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:16:58Z", "slug": "deepseek-mcp-server", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in worker/package.json" ] }, "external_service_dependencies": { "providers": [ "DeepSeek", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@arikusi/deepseek-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@arikusi/deepseek-mcp-server", "version": "2.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:44Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.4, "trust_score_v2": 72.4, "rank_v2": 302, "rank_v2_delta": 73, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.4, "identity": 18.0, "transparency": 13.3, "maintenance": 11.3, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Tidb", "repo": "pingcap/tidb", "display_repo": "", "url": "https://github.com/pingcap/tidb", "listing_class": "agent", "rank": 303, "previous_rank": 303, "rank_delta": 0, "stars": 40640, "stars_fmt": "40.6k", "forks": 6258, "forks_fmt": "6.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 115, "commits_low_confidence": false, "score": 95.4, "description": "TiDB is built for agentic workloads that grow unpredictably, with ACID guarantees and native support for transactions, analytics, and vector search. No data silos. No noisy neighbors. No infrastructure ceiling.", "language": "Go", "open_issues": 5315, "category": "Memory & Knowledge", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 8.2, "scorecard_checks": { "Code-Review": 10, "Maintained": 10, "Dangerous-Workflow": 10, "Packaging": -1, "Security-Policy": 10, "CII-Best-Practices": 0, "Token-Permissions": 10, "License": 10, "Binary-Artifacts": 10, "Signed-Releases": -1, "Fuzzing": 10, "Branch-Protection": 3, "Pinned-Dependencies": 10, "SAST": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:07Z", "slug": "tidb", "full_fetched_at": "2026-10-12T08:02:15Z", "source_note": "", "github_homepage": "https://www.tidb.io/", "homepage_icon": "/site-icons/1b9dd23547017462.png", "homepage_icon_for": "https://www.tidb.io/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: pkg/plugin/BUILD.bazel" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 72.3, "trust_score_v2": 72.3, "rank_v2": 303, "rank_v2_delta": -62, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.2, "identity": 10.8, "transparency": 15.5, "maintenance": 20.0, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Microsoft Agent Framework", "repo": "microsoft/agent-framework", "display_repo": "", "url": "https://github.com/microsoft/agent-framework", "listing_class": "agent", "rank": 304, "previous_rank": 304, "rank_delta": 0, "stars": 14085, "stars_fmt": "14.1k", "forks": 2459, "forks_fmt": "2.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 442, "commits_low_confidence": false, "score": 90.7, "description": "A framework for building, orchestrating and deploying AI agents and multi-agent workflows with support for Python and .NET.", "language": "Python", "open_issues": 564, "category": "Agent Frameworks", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "agent-framework", "docker_image": "", "vscode_extension": "", "weekly_downloads": 46970, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-07T22:49:50Z", "slug": "microsoft-agent-framework", "full_fetched_at": "2026-10-12T08:02:10Z", "source_note": "", "github_homepage": "https://aka.ms/agent-framework", "homepage_icon": "/site-icons/f32e12cc8e0875ff.png", "homepage_icon_for": "https://aka.ms/agent-framework", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .github/actions/setup-local-mcp-server/action.yml", "Found MCP-related server path: dotnet/samples/02-agents/ModelContextProtocol/Agent_MCP_Server/Agent_MCP_Server.csproj" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: dotnet/samples/02-agents/AgentProviders/foundry/Agent_Step13_Plugins/Agent_Step13_Plugins.csproj", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'agent-framework' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agent-framework", "version": "1.21.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.3, "trust_score_v2": 72.3, "rank_v2": 304, "rank_v2_delta": -62, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 20.0, "adoption": 16.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Interactive Leetcode MCP", "repo": "SPerekrestova/interactive-leetcode-mcp", "display_repo": "", "url": "https://github.com/SPerekrestova/interactive-leetcode-mcp", "listing_class": "agent", "rank": 305, "previous_rank": 307, "rank_delta": 2, "stars": 12, "stars_fmt": "12", "forks": 3, "forks_fmt": "3", "last_push": "2026-09-15", "days_ago": 27, "weekly_commits": 6, "commits_low_confidence": false, "score": 41.4, "description": "An MCP server enabling guided DSA learning with AI on leetcode.com", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 181, "npm_package": "@sperekrestova/interactive-leetcode-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 60, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.6, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:18:44Z", "slug": "interactive-leetcode-mcp", "full_fetched_at": "2026-10-12T00:02:15Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server-instructions.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@sperekrestova/interactive-leetcode-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@sperekrestova/interactive-leetcode-mcp", "version": "3.2.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:15Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.3, "trust_score_v2": 72.3, "rank_v2": 305, "rank_v2_delta": 118, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.0, "identity": 18.0, "transparency": 12.9, "maintenance": 13.6, "adoption": 5.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Agent SDK", "repo": "anthropics/claude-agent-sdk-python", "display_repo": "", "url": "https://github.com/anthropics/claude-agent-sdk-python", "listing_class": "agent", "rank": 306, "previous_rank": 301, "rank_delta": -5, "stars": 8254, "stars_fmt": "8.3k", "forks": 1336, "forks_fmt": "1.3k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 66, "commits_low_confidence": false, "score": 85.5, "description": "", "language": "Python", "open_issues": 218, "category": "Agent Frameworks", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "claude-agent-sdk", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7647837, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.16, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:52:15Z", "slug": "claude-agent-sdk", "full_fetched_at": "2026-10-12T04:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Postgres dependency 'asyncpg' in pyproject.toml", "Found Redis dependency 'redis' in pyproject.toml", "Ships a Claude Code plugin manifest (examples/plugins/demo-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: examples/plugins/demo-plugin/.claude-plugin/plugin.json", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'claude-agent-sdk' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "claude-agent-sdk", "version": "0.2.165" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:14Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.3, "trust_score_v2": 72.3, "rank_v2": 306, "rank_v2_delta": 50, "trust_v2_adjustment": 3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 12.8, "maintenance": 19.1, "adoption": 18.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Icon Composer MCP", "repo": "ethbak/icon-composer-mcp", "display_repo": "", "url": "https://github.com/ethbak/icon-composer-mcp", "listing_class": "agent", "rank": 307, "previous_rank": 302, "rank_delta": -5, "stars": 57, "stars_fmt": "57", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 5, "commits_low_confidence": false, "score": 46.3, "description": "Apple Icon Composer CLI & MCP server: create and manipulate .icon bundles and images with Liquid Glass rendering", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 182, "npm_package": "icon-composer-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 219, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.409, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:32:45Z", "slug": "icon-composer-mcp", "full_fetched_at": "2026-10-12T16:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'icon-composer-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "icon-composer-mcp", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:56Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.3, "trust_score_v2": 72.3, "rank_v2": 307, "rank_v2_delta": 133, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.5, "identity": 18.0, "transparency": 11.9, "maintenance": 14.5, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Scout MCP Local", "repo": "scoutapp/scout-mcp-local", "display_repo": "", "url": "https://github.com/scoutapp/scout-mcp-local", "listing_class": "agent", "rank": 308, "previous_rank": 308, "rank_delta": 0, "stars": 30, "stars_fmt": "30", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 2, "commits_low_confidence": true, "score": 41.0, "description": "Scout’s local MCP puts metrics, traces and errors right in your AI agent. For teams that do it all.", "language": "Python", "open_issues": 5, "category": "MCP Servers", "category_rank": 183, "npm_package": "", "crate_package": "", "pypi_package": "scout-mcp-local", "docker_image": "docker.io/scoutapp/scout-mcp-local:latest", "vscode_extension": "", "weekly_downloads": 10241, "dl_source": "docker+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.982, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:33:57Z", "slug": "scout-mcp-local", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "https://www.scoutapm.com/mcp", "homepage_icon": "/site-icons/5bdd14d56ebcdd52.png", "homepage_icon_for": "https://www.scoutapm.com/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SCOUT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'scout-mcp-local' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "scout-mcp-local", "version": "2026.9.28" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:08Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.2, "trust_score_v2": 72.2, "rank_v2": 308, "rank_v2_delta": -37, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.7, "identity": 18.0, "transparency": 12.8, "maintenance": 12.8, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Arcgentic", "repo": "Arch1eSUN/Arcgentic", "display_repo": "", "url": "https://github.com/Arch1eSUN/Arcgentic", "listing_class": "skill", "rank": 28, "previous_rank": 28, "rank_delta": 0, "stars": 286, "stars_fmt": "286", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 6, "commits_low_confidence": false, "score": 53.6, "description": "Mechanical plan/dev/self-audit/external-audit gates for AI coding agents, with a configurable role-routing topology engine, an MCP-UI live status panel, and native-tooling Claude Code V2 dispatch. Claude Code, Codex, OpenClaw, and PyPI.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 28, "npm_package": "arcgentic", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 32, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:16:20Z", "slug": "arcgentic", "full_fetched_at": "2026-10-12T08:02:45Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: toolkit/src/arcgentic/mcp/server.py", "Found MCP-related server test path: toolkit/tests/unit/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'arcgentic' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "arcgentic", "version": "2.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:45Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.2, "trust_score_v2": 72.2, "rank_v2": 28, "rank_v2_delta": 400, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.4, "identity": 18.0, "transparency": 12.5, "maintenance": 14.7, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Milvus", "repo": "milvus-io/milvus", "display_repo": "", "url": "https://github.com/milvus-io/milvus", "listing_class": "agent", "rank": 309, "previous_rank": 309, "rank_delta": 0, "stars": 46364, "stars_fmt": "46.4k", "forks": 4289, "forks_fmt": "4.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 184, "commits_low_confidence": false, "score": 94.9, "description": "Milvus is a high-performance, cloud-native vector database built for scalable vector ANN search", "language": "Go", "open_issues": 1003, "category": "Memory & Knowledge", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "pymilvus", "docker_image": "", "vscode_extension": "", "weekly_downloads": 759062, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.4, "scorecard_checks": { "Maintained": 10, "Code-Review": 9, "Dangerous-Workflow": 0, "CII-Best-Practices": 5, "Token-Permissions": 0, "Security-Policy": 0, "License": 10, "Binary-Artifacts": 9, "Branch-Protection": 3, "Signed-Releases": 0, "Fuzzing": 10, "SAST": 0, "Packaging": 10, "Pinned-Dependencies": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:11Z", "slug": "milvus", "full_fetched_at": "2026-10-12T08:02:22Z", "source_note": "", "github_homepage": "https://milvus.io", "homepage_icon": "/site-icons/db5bdbe5ff7c08c6.png", "homepage_icon_for": "https://milvus.io", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: internal/core/src/storage/plugin/PluginInterface.h", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'pymilvus' points to milvus-io/pymilvus (same owner as milvus-io/milvus, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pymilvus", "version": "3.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:22Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 72.2, "trust_score_v2": 72.2, "rank_v2": 309, "rank_v2_delta": -63, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 19.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dev Browser", "repo": "SawyerHood/dev-browser", "display_repo": "", "url": "https://github.com/SawyerHood/dev-browser", "listing_class": "skill", "rank": 29, "previous_rank": 29, "rank_delta": 0, "stars": 6660, "stars_fmt": "6.7k", "forks": 435, "forks_fmt": "435", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 55.1, "description": "A Claude Skill to give your agent the ability to use a web browser", "language": "TypeScript", "open_issues": 10, "category": "Agent Skills", "category_rank": 29, "npm_package": "dev-browser", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 15297, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T17:52:16Z", "slug": "dev-browser", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/mcp/server.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'dev-browser' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "dev-browser", "version": "0.2.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.2, "trust_score_v2": 72.2, "rank_v2": 29, "rank_v2_delta": 323, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 18.0, "transparency": 11.9, "maintenance": 9.5, "adoption": 14.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ros MCP Server", "repo": "robotmcp/ros-mcp-server", "display_repo": "", "url": "https://github.com/robotmcp/ros-mcp-server", "listing_class": "agent", "rank": 310, "previous_rank": 310, "rank_delta": 0, "stars": 1493, "stars_fmt": "1.5k", "forks": 214, "forks_fmt": "214", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 2, "commits_low_confidence": true, "score": 60.7, "description": "Connect AI models like Claude & GPT with robots using MCP and ROS.", "language": "Python", "open_issues": 25, "category": "MCP Servers", "category_rank": 184, "npm_package": "", "crate_package": "", "pypi_package": "ros-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 339, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.82, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:16:13Z", "slug": "ros-mcp-server", "full_fetched_at": "2026-10-12T00:01:57Z", "source_note": "", "github_homepage": "https://robotmcp.ai", "homepage_icon": "/site-icons/c359c55a5a3d0f30.png", "homepage_icon_for": "https://robotmcp.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: config/mcp.json", "Found MCP-related server path: launch/launch_mcp_server.sh", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'ros-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 72.2, "trust_score_v2": 72.2, "rank_v2": 310, "rank_v2_delta": -15, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.5, "identity": 18.0, "transparency": 11.8, "maintenance": 12.9, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dav MCP", "repo": "PhilflowIO/dav-mcp", "display_repo": "", "url": "https://github.com/PhilflowIO/dav-mcp", "listing_class": "agent", "rank": 311, "previous_rank": 314, "rank_delta": 3, "stars": 40, "stars_fmt": "40", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 345, "commits_low_confidence": false, "score": 65.1, "description": "Transform AI agents into orchestrating assistants managing calendars, contacts, and tasks", "language": "JavaScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 185, "npm_package": "dav-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 106, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T19:08:17Z", "slug": "dav-mcp", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in .github/mcpb/package.json", "README/docs also mention Anthropic", "Found credential/config marker 'BEARER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: claude-plugin/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'dav-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "dav-mcp", "version": "5.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.1, "trust_score_v2": 72.1, "rank_v2": 311, "rank_v2_delta": 9, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 18.0, "transparency": 11.8, "maintenance": 19.9, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Wireshark MCP", "repo": "bx33661/Wireshark-MCP", "display_repo": "", "url": "https://github.com/bx33661/Wireshark-MCP", "listing_class": "agent", "rank": 312, "previous_rank": 316, "rank_delta": 4, "stars": 296, "stars_fmt": "296", "forks": 29, "forks_fmt": "29", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.3, "description": "Wireshark-MCP，Give your AI assistant a packet analyzer. Drop a .pcap file, ask questions in plain English — get answers backed by real tshark data.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 186, "npm_package": "", "crate_package": "", "pypi_package": "wireshark-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 457, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.012, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T23:32:00Z", "slug": "wireshark-mcp", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .well-known/mcp/server.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'wireshark-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "wireshark-mcp", "version": "3.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:47Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.0, "trust_score_v2": 72.0, "rank_v2": 312, "rank_v2_delta": 137, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.2, "identity": 18.0, "transparency": 13.0, "maintenance": 11.3, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LibreChat", "repo": "LibreChat-AI/LibreChat", "display_repo": "", "url": "https://github.com/LibreChat-AI/LibreChat", "listing_class": "agent", "rank": 313, "previous_rank": 317, "rank_delta": 4, "stars": 45579, "stars_fmt": "45.6k", "forks": 9368, "forks_fmt": "9.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 576, "commits_low_confidence": false, "score": 96.5, "description": "Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, langchain, DALL-E-3, OpenAPI Actions, Functions, Secure Multi-User…", "language": "TypeScript", "open_issues": 441, "category": "UI & App Builders", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "librechat/librechat", "vscode_extension": "", "weekly_downloads": 584908, "dl_source": "docker", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.81, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:08:57Z", "slug": "librechat", "full_fetched_at": "2026-10-12T04:02:37Z", "source_note": "", "github_homepage": "https://librechat.ai/", "homepage_icon": "/site-icons/5eb7fa3cf8db8ec7.png", "homepage_icon_for": "https://librechat.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: client/src/components/MCP/MCPServerMenuItem.tsx", "Found MCP-related server path: client/src/components/MCP/MCPServerStatusIcon.spec.tsx", "Found MCP-related server test path: client/src/hooks/MCP/__tests__/useMCPServerManager.spec.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in api/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in api/package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in api/package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: client/src/components/Plugins/Store/PluginAuthForm.tsx", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'redis' in api/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.0, "trust_score_v2": 72.0, "rank_v2": 313, "rank_v2_delta": -57, "trust_v2_adjustment": -0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 12.5, "maintenance": 20.0, "adoption": 18.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DeepSeek Harness", "repo": "deepseek-ai/deepseek-harness", "display_repo": "", "url": "https://github.com/deepseek-ai/deepseek-harness", "listing_class": "agent", "rank": 314, "previous_rank": 312, "rank_delta": -2, "stars": 248120, "stars_fmt": "248.1k", "forks": 29829, "forks_fmt": "29.8k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 3951, "commits_low_confidence": false, "score": 99.6, "description": "DeepSeek Harness: Everything is a Plugin.", "language": "TypeScript", "open_issues": 0, "category": "Coding Agents", "category_rank": 14, "npm_package": "@deepseek-ai/dsh", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 355149, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:54:44Z", "slug": "deepseek-harness", "full_fetched_at": "2026-10-12T12:03:06Z", "source_note": "", "github_homepage": "https://deepseek.com/harness", "homepage_icon": "/site-icons/958fa6cc9f643823.png", "homepage_icon_for": "https://deepseek.com/harness", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: packages/mcp/mcp-client/src/server-context.ts", "Found MCP-related server test path: packages/mcp/mcp-client/tests/fixture-server.ts", "Found MCP-related server test path: packages/mcp/mcp-client/tests/fixtures/pagination-limit-server.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in benchmarks/package.json", "README/docs also mention DeepSeek", "Ships a Claude Code plugin manifest (packages/experimental/claude-code-mods/examples/blast-radius/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/web/tests/fixtures/plugins/fixture-bundle/cordis.patch.yml", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@deepseek-ai/dsh' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@deepseek-ai/dsh", "version": "0.2.0-rc.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:06Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 72.0, "trust_score_v2": 72.0, "rank_v2": 314, "rank_v2_delta": 22, "trust_v2_adjustment": 3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.4, "maintenance": 19.8, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "GPTMe", "repo": "gptme/gptme", "display_repo": "", "url": "https://github.com/gptme/gptme", "listing_class": "agent", "rank": 315, "previous_rank": 318, "rank_delta": 3, "stars": 4448, "stars_fmt": "4.4k", "forks": 451, "forks_fmt": "451", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 355, "commits_low_confidence": false, "score": 84.2, "description": "Your agent in your terminal, equipped with local tools: writes code, uses the terminal, browses the web. Make your own persistent autonomous agent on top!", "language": "Python", "open_issues": 6, "category": "Coding Agents", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "gptme", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6713, "dl_source": "pypi", "hn_mentions_30d": 6, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:19:35Z", "slug": "gptme", "full_fetched_at": "2026-10-12T04:02:46Z", "source_note": "", "github_homepage": "https://gptme.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: gptme/mcp/server.py", "Found MCP-related server docs path: docs/cli/gptme-mcp-server.rst", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Groq", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "shell" ], "confidence": "high", "evidence": [ "Found declared path: gptme/plugins/__init__.py", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities", "Found shell dependency 'subprocess' in gptme/cli/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'gptme' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "gptme", "version": "0.34.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:46Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.9, "trust_score_v2": 71.9, "rank_v2": 315, "rank_v2_delta": -36, "trust_v2_adjustment": 1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 20.0, "adoption": 13.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "db-mcp (SQLite MCP Server)", "repo": "neverinfamous/db-mcp", "display_repo": "", "url": "https://github.com/neverinfamous/db-mcp", "listing_class": "agent", "rank": 316, "previous_rank": 315, "rank_delta": -1, "stars": 11, "stars_fmt": "11", "forks": 1, "forks_fmt": "1", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.1, "description": "Secure Database MCP Server featuring a V8 Isolate Code Mode sandbox that unifies 181+ tools, delivering 70-90% token savings. Built for enterprise with HTTP/SSE transports, OAuth 2.1, dynamic filtering, granular RBAC, audit logging, deterministic error handling, Prometheus metrics, and encryption…", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 187, "npm_package": "db-mcp", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/writenotenow/db-mcp:v1.0.2", "vscode_extension": "", "weekly_downloads": 8305, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:42:49Z", "slug": "db-mcp-sqlite-mcp-server", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://search.adamic.tech/", "homepage_icon": "/site-icons/3ab96d3270c403e2.png", "homepage_icon_for": "https://search.adamic.tech/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/server/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in package.json", "Found credential/config marker 'MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'db-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "db-mcp", "version": "5.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.9, "trust_score_v2": 71.9, "rank_v2": 316, "rank_v2_delta": 87, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.7, "identity": 18.0, "transparency": 13.6, "maintenance": 11.1, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cube Sandbox", "repo": "TencentCloud/CubeSandbox", "display_repo": "", "url": "https://github.com/TencentCloud/CubeSandbox", "listing_class": "agent", "rank": 317, "previous_rank": 323, "rank_delta": 6, "stars": 12895, "stars_fmt": "12.9k", "forks": 1189, "forks_fmt": "1.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 104, "commits_low_confidence": false, "score": 89.0, "description": "Instant, Concurrent, Secure & Lightweight Sandbox for AI Agents.", "language": "Go", "open_issues": 87, "category": "Sandboxes & Runtimes", "category_rank": 4, "npm_package": "", "crate_package": "", "pypi_package": "cubesandbox", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1509, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.82, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 6, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T12:55:49Z", "slug": "cube-sandbox", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "https://cubesandbox.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: CubeMaster/pkg/volume/plugin/binary/driver.go", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cubesandbox' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cubesandbox", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:42Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 71.8, "trust_score_v2": 71.8, "rank_v2": 317, "rank_v2_delta": 49, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Flyte", "repo": "flyteorg/flyte", "display_repo": "", "url": "https://github.com/flyteorg/flyte", "listing_class": "agent", "rank": 318, "previous_rank": 320, "rank_delta": 2, "stars": 7683, "stars_fmt": "7.7k", "forks": 902, "forks_fmt": "902", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 74, "commits_low_confidence": false, "score": 85.4, "description": "Type-safe, distributed orchestration of agents, ML pipelines, and real-time inference on your k8s — in pure Python with async/await, also other languages (rust, go and ts)", "language": "Go", "open_issues": 110, "category": "Workflow Platforms", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "flytekit", "docker_image": "", "vscode_extension": "", "weekly_downloads": 115888, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Code-Review": 10, "Maintained": 10, "Dangerous-Workflow": 10, "CII-Best-Practices": 5, "Token-Permissions": 0, "Binary-Artifacts": 10, "License": 10, "Branch-Protection": 5, "Signed-Releases": -1, "Fuzzing": 0, "Security-Policy": 0, "Packaging": 10, "SAST": 0, "Pinned-Dependencies": 0 }, "scorecard_scanned_at": "2026-10-12T04:06:27Z", "slug": "flyte", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "https://flyte.org", "homepage_icon": "/site-icons/7c24b0ac7b1ca65f.png", "homepage_icon_for": "https://flyte.org", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: docker/devbox-bundled/bootstrap/internal/transform/plugins/config/cluster_resource_templates.go" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'flytekit' points to flyteorg/flytekit (same owner as flyteorg/flyte, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "flytekit", "version": "1.16.29" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 71.7, "trust_score_v2": 71.7, "rank_v2": 318, "rank_v2_delta": -61, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 19.5, "adoption": 16.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Hound MCP", "repo": "tiluckdave/hound-mcp", "display_repo": "", "url": "https://github.com/tiluckdave/hound-mcp", "listing_class": "agent", "rank": 319, "previous_rank": 290, "rank_delta": -29, "stars": 17, "stars_fmt": "17", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 0, "commits_low_confidence": true, "score": 37.9, "description": "The dependency bloodhound for AI coding agents. Free, no API keys.", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 188, "npm_package": "hound-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.6, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:05:58Z", "slug": "hound-mcp", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'hound-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "hound-mcp", "version": "0.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:26Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.7, "trust_score_v2": 71.7, "rank_v2": 319, "rank_v2_delta": 144, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.5, "identity": 18.0, "transparency": 13.3, "maintenance": 11.7, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Brightspace MCP", "repo": "JhostinAleck/brightspace-mcp", "display_repo": "", "url": "https://github.com/JhostinAleck/brightspace-mcp", "listing_class": "agent", "rank": 320, "previous_rank": 297, "rank_delta": -23, "stars": 13, "stars_fmt": "13", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 66, "commits_low_confidence": false, "score": 55.1, "description": "MCP server for D2L Brightspace with multi-strategy authentication (TOTP, OAuth, browser, etc.), retry/circuit breaker/cache tiers, and opt-in write operations.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 189, "npm_package": "brightspace-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 85, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 4.1, "scorecard_checks": { "Code-Review": 0, "Maintained": 10, "CI-Tests": -1, "Dependency-Update-Tool": 10, "Dangerous-Workflow": 10, "Token-Permissions": 0, "SAST": 0, "Binary-Artifacts": 10, "Security-Policy": 0, "CII-Best-Practices": 0, "Packaging": 10, "Pinned-Dependencies": 3, "Vulnerabilities": 0, "License": 10, "Signed-Releases": 0, "Fuzzing": 0, "Branch-Protection": 0, "Contributors": 3 }, "scorecard_scanned_at": "2026-10-12T16:04:31Z", "slug": "brightspace-mcp", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BRIGHTSPACE_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'brightspace-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "brightspace-mcp", "version": "1.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:32Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.7, "trust_score_v2": 71.7, "rank_v2": 320, "rank_v2_delta": 88, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 18.0, "transparency": 12.0, "maintenance": 18.8, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Brandsystem MCP — Brand Guidelines for AI", "repo": "Brandcode-Studio/brandsystem-mcp", "display_repo": "", "url": "https://github.com/Brandcode-Studio/brandsystem-mcp", "listing_class": "agent", "rank": 321, "previous_rank": 322, "rank_delta": 1, "stars": 15, "stars_fmt": "15", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.1, "description": "Use existing brand guidelines with AI. Turn websites, PDFs, and Figma into a portable .brand runtime through MCP.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 190, "npm_package": "@brandsystem/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 87, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.45, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:53:53Z", "slug": "brandsystem-mcp-brand-guidelines-for-ai", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "https://www.brandcode.studio/", "homepage_icon": "/site-icons/03b7bc8585de6873.png", "homepage_icon_for": "https://www.brandcode.studio/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Redis dependency 'redis' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'puppeteer' in package.json", "Found database dependency 'redis' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@brandsystem/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@brandsystem/mcp", "version": "0.16.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:57Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.6, "trust_score_v2": 71.6, "rank_v2": 321, "rank_v2_delta": 63, "trust_v2_adjustment": 3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.5, "identity": 18.0, "transparency": 14.4, "maintenance": 11.3, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Taskade MCP", "repo": "taskade/mcp", "display_repo": "", "url": "https://github.com/taskade/mcp", "listing_class": "agent", "rank": 322, "previous_rank": 319, "rank_delta": -3, "stars": 165, "stars_fmt": "165", "forks": 53, "forks_fmt": "53", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 4, "commits_low_confidence": true, "score": 54.7, "description": "🤖 Taskade MCP · Official MCP server and OpenAPI to MCP codegen. Build AI agent tools from any OpenAPI API and connect to Claude, Cursor, and more.", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 191, "npm_package": "@taskade/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 92, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.624, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 3, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:55:23Z", "slug": "taskade-mcp", "full_fetched_at": "2026-10-12T00:02:23Z", "source_note": "", "github_homepage": "https://taskade.com/blog/mcp", "homepage_icon": "/site-icons/44662796b440a574.png", "homepage_icon_for": "https://taskade.com/blog/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor-plugin/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/server/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/openapi-codegen/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'TASKADE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/mcp.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@taskade/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@taskade/mcp-server", "version": "0.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:23Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.6, "trust_score_v2": 71.6, "rank_v2": 322, "rank_v2_delta": 88, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 12.0, "maintenance": 13.2, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Polymarket Agent MCP", "repo": "demwick/polymarket-agent-mcp", "display_repo": "", "url": "https://github.com/demwick/polymarket-agent-mcp", "listing_class": "agent", "rank": 323, "previous_rank": 321, "rank_delta": -2, "stars": 16, "stars_fmt": "16", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 0, "commits_low_confidence": true, "score": 36.0, "description": "The most comprehensive MCP server for Polymarket — 48 tools spanning direct trading, market discovery, smart money tracking, copy trading, backtesting, risk management, and portfolio optimization. Works with Claude Code, Cursor, or any MCP-compatible client.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 192, "npm_package": "polymarket-agent-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.52, "scorecard_score": 5.7, "scorecard_checks": { "Dependency-Update-Tool": 10, "Security-Policy": 10, "Dangerous-Workflow": 10, "Token-Permissions": 0, "Binary-Artifacts": 10, "Code-Review": 0, "Maintained": 2, "Pinned-Dependencies": 10, "CII-Best-Practices": 5, "Packaging": 10, "Vulnerabilities": 0, "Signed-Releases": 0, "Branch-Protection": 3, "Fuzzing": 10, "License": 10, "SAST": 9, "Contributors": 0, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T12:06:40Z", "slug": "polymarket-agent-mcp", "full_fetched_at": "2026-10-12T12:03:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .well-known/mcp/server-card.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'polymarket-agent-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "polymarket-agent-mcp", "version": "1.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:02Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.4, "trust_score_v2": 71.4, "rank_v2": 323, "rank_v2_delta": 153, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.2, "identity": 18.0, "transparency": 13.3, "maintenance": 11.7, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Outline MCP Server", "repo": "Vortiago/mcp-outline", "display_repo": "", "url": "https://github.com/Vortiago/mcp-outline", "listing_class": "agent", "rank": 324, "previous_rank": 311, "rank_delta": -13, "stars": 156, "stars_fmt": "156", "forks": 45, "forks_fmt": "45", "last_push": "2026-08-05", "days_ago": 68, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.5, "description": "A Model Context Protocol (MCP) server enabling AI assistants to interact with Outline documentation services.", "language": "Python", "open_issues": 5, "category": "MCP Servers", "category_rank": 193, "npm_package": "", "crate_package": "", "pypi_package": "mcp-outline", "docker_image": "", "vscode_extension": "", "weekly_downloads": 341, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 6, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:58:59Z", "slug": "outline-mcp-server", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker '20OUTLINE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-outline' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-outline", "version": "1.10.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.4, "trust_score_v2": 71.4, "rank_v2": 324, "rank_v2_delta": 94, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.4, "identity": 18.0, "transparency": 13.2, "maintenance": 7.5, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Tau", "repo": "huggingface/tau", "display_repo": "", "url": "https://github.com/huggingface/tau", "listing_class": "agent", "rank": 325, "previous_rank": 324, "rank_delta": -1, "stars": 2954, "stars_fmt": "3.0k", "forks": 382, "forks_fmt": "382", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 35, "commits_low_confidence": false, "score": 76.4, "description": "A Python port of Pi’s minimalist coding agent.", "language": "Python", "open_issues": 58, "category": "Coding Agents", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "tau-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 915, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.84, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-11T16:39:03Z", "slug": "tau", "full_fetched_at": "2026-10-12T16:02:09Z", "source_note": "", "github_homepage": "http://twotimespi.dev/", "homepage_icon": "/site-icons/824b19b89d1e1b15.png", "homepage_icon_for": "http://twotimespi.dev/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: .tau/extensions/ask_user_question.py" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'tau-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "tau-ai", "version": "0.4.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:09Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.3, "trust_score_v2": 71.3, "rank_v2": 325, "rank_v2_delta": 47, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 10.8, "transparency": 14.3, "maintenance": 17.8, "adoption": 12.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "txtai", "repo": "neuml/txtai", "display_repo": "", "url": "https://github.com/neuml/txtai", "listing_class": "agent", "rank": 326, "previous_rank": 325, "rank_delta": -1, "stars": 13011, "stars_fmt": "13.0k", "forks": 931, "forks_fmt": "931", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 116, "commits_low_confidence": false, "score": 88.5, "description": "💡 All-in-one AI framework for semantic search, LLM orchestration and language model workflows", "language": "Python", "open_issues": 15, "category": "Memory & Knowledge", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "txtai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3504, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.6, "scorecard_score": 5, "scorecard_checks": { "Maintained": 10, "Code-Review": 5, "Dangerous-Workflow": 10, "Packaging": -1, "Token-Permissions": 0, "CII-Best-Practices": 0, "Binary-Artifacts": 10, "License": 10, "Pinned-Dependencies": 0, "Fuzzing": 0, "Signed-Releases": -1, "Branch-Protection": 0, "Security-Policy": 10, "SAST": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:05Z", "slug": "txtai", "full_fetched_at": "2026-10-12T08:02:10Z", "source_note": "", "github_homepage": "https://neuml.github.io/txtai", "homepage_icon": "/site-icons/777bb005065101c5.png", "homepage_icon_for": "https://neuml.github.io/txtai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'txtai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "txtai", "version": "9.14.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:10Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 71.3, "trust_score_v2": 71.3, "rank_v2": 326, "rank_v2_delta": 70, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 12.8, "maintenance": 19.9, "adoption": 14.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Memory Service", "repo": "doobidoo/mcp-memory-service", "display_repo": "", "url": "https://github.com/doobidoo/mcp-memory-service", "listing_class": "agent", "rank": 327, "previous_rank": 326, "rank_delta": -1, "stars": 2010, "stars_fmt": "2.0k", "forks": 347, "forks_fmt": "347", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 232, "commits_low_confidence": false, "score": 81.6, "description": "Open-source persistent memory for AI agent pipelines (LangGraph, CrewAI, AutoGen) and Claude. REST API + knowledge graph + autonomous consolidation.", "language": "Python", "open_issues": 26, "category": "MCP Servers", "category_rank": 194, "npm_package": "", "crate_package": "", "pypi_package": "mcp-memory-service", "docker_image": "", "vscode_extension": "", "weekly_downloads": 998, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.67, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-09T09:56:21Z", "slug": "mcp-memory-service", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/mcp_memory_service/mcp_server.py", "Found MCP-related server docs path: docs/guides/commands-vs-mcp-server.md", "Found MCP-related server test path: tests/unit/test_fastmcp_server_logging.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (claude-hooks/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-memory-service' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-memory-service", "version": "11.15.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 71.1, "trust_score_v2": 71.1, "rank_v2": 327, "rank_v2_delta": 65, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 11.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Universal Screenshot MCP", "repo": "sethbang/mcp-screenshot-server", "display_repo": "", "url": "https://github.com/sethbang/mcp-screenshot-server", "listing_class": "agent", "rank": 328, "previous_rank": 329, "rank_delta": 1, "stars": 35, "stars_fmt": "35", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 0, "commits_low_confidence": true, "score": 38.9, "description": "An MCP server that provides AI assistants with screenshot capabilities — both web page capture via Puppeteer and cross-platform system screenshots using native OS tools.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 195, "npm_package": "universal-screenshot-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 111, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.461, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-04T19:07:48Z", "slug": "universal-screenshot-mcp", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'puppeteer' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'universal-screenshot-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "universal-screenshot-mcp", "version": "1.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 71.1, "trust_score_v2": 71.1, "rank_v2": 328, "rank_v2_delta": 147, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.4, "identity": 18.0, "transparency": 13.0, "maintenance": 11.5, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cronometer MCP", "repo": "cphoskins/cronometer-mcp", "display_repo": "", "url": "https://github.com/cphoskins/cronometer-mcp", "listing_class": "agent", "rank": 329, "previous_rank": 327, "rank_delta": -2, "stars": 24, "stars_fmt": "24", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 12, "commits_low_confidence": false, "score": 51.8, "description": "", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 196, "npm_package": "", "crate_package": "", "pypi_package": "cronometer-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 421, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.018, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:10:54Z", "slug": "cronometer-mcp", "full_fetched_at": "2026-10-12T12:02:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cronometer-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cronometer-mcp", "version": "2.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:55Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.1, "trust_score_v2": 71.1, "rank_v2": 329, "rank_v2_delta": 77, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 12.7, "maintenance": 15.8, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Reddit MCP Buddy", "repo": "karanb192/reddit-mcp-buddy", "display_repo": "", "url": "https://github.com/karanb192/reddit-mcp-buddy", "listing_class": "agent", "rank": 330, "previous_rank": 331, "rank_delta": 1, "stars": 853, "stars_fmt": "853", "forks": 107, "forks_fmt": "107", "last_push": "2026-08-17", "days_ago": 56, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.3, "description": "Clean, LLM-optimized Reddit MCP server. Browse posts, search content, analyze users. No fluff, just Reddit data.", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 197, "npm_package": "reddit-mcp-buddy", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1229, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.636, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:38:30Z", "slug": "reddit-mcp-buddy", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'reddit-mcp-buddy' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "reddit-mcp-buddy", "version": "1.1.14" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:38Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.1, "trust_score_v2": 71.1, "rank_v2": 330, "rank_v2_delta": 160, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 11.9, "maintenance": 8.3, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "YADE MCP Server", "repo": "yusong652/yade-mcp", "display_repo": "", "url": "https://github.com/yusong652/yade-mcp", "listing_class": "agent", "rank": 331, "previous_rank": 332, "rank_delta": 1, "stars": 15, "stars_fmt": "15", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 4, "commits_low_confidence": true, "score": 41.7, "description": "MCP server connecting AI agents to YADE — run DEM simulations through natural conversation", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 198, "npm_package": "", "crate_package": "", "pypi_package": "yade-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 961, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.81, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:24:32Z", "slug": "yade-mcp-server", "full_fetched_at": "2026-10-12T08:02:18Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'yade-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "yade-mcp", "version": "0.11.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:18Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 71.0, "trust_score_v2": 71.0, "rank_v2": 331, "rank_v2_delta": 162, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 11.3, "maintenance": 13.1, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Browser Use", "repo": "browser-use/browser-use", "display_repo": "", "url": "https://github.com/browser-use/browser-use", "listing_class": "agent", "rank": 332, "previous_rank": 330, "rank_delta": -2, "stars": 117729, "stars_fmt": "117.7k", "forks": 13026, "forks_fmt": "13.0k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 57, "commits_low_confidence": false, "score": 95.8, "description": "Agents that use the browser.", "language": "Python", "open_issues": 170, "category": "Browser & Computer Use", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "browser-use", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1706595, "dl_source": "pypi", "hn_mentions_30d": 9, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.34, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:23:49Z", "slug": "browser-use", "full_fetched_at": "2026-10-12T04:02:16Z", "source_note": "", "github_homepage": "https://browser-use.com", "homepage_icon": "/site-icons/f58b605800e854e8.png", "homepage_icon_for": "https://browser-use.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: browser_use/mcp/server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Groq", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'browser-use' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "browser-use", "version": "0.13.11" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:16Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 70.9, "trust_score_v2": 70.9, "rank_v2": 332, "rank_v2_delta": -28, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 12.6, "maintenance": 18.8, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Crawl4AI", "repo": "unclecode/crawl4ai", "display_repo": "", "url": "https://github.com/unclecode/crawl4ai", "listing_class": "agent", "rank": 333, "previous_rank": 333, "rank_delta": 0, "stars": 85371, "stars_fmt": "85.4k", "forks": 8865, "forks_fmt": "8.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 43, "commits_low_confidence": false, "score": 93.5, "description": "Open-source web crawler and scraper for LLMs and AI agents: any website into clean, LLM-ready Markdown. Run it yourself, or use Crawl4AI Cloud with one key.", "language": "Python", "open_issues": 47, "category": "Research & Data", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "crawl4ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 288153, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.35, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:56:42Z", "slug": "crawl4ai", "full_fetched_at": "2026-10-12T08:02:44Z", "source_note": "", "github_homepage": "https://crawl4ai.com", "homepage_icon": "/site-icons/ebd07107b6b76af3.png", "homepage_icon_for": "https://crawl4ai.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found marketplace path: docs/md_v2/marketplace/README.md", "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'crawl4ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "crawl4ai", "version": "0.9.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:44Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.8, "trust_score_v2": 70.8, "rank_v2": 333, "rank_v2_delta": -8, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 12.7, "maintenance": 18.6, "adoption": 19.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -1.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Sauce Api MCP", "repo": "saucelabs/sauce-api-mcp", "display_repo": "", "url": "https://github.com/saucelabs/sauce-api-mcp", "listing_class": "agent", "rank": 334, "previous_rank": 373, "rank_delta": 39, "stars": 10, "stars_fmt": "10", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 7, "commits_low_confidence": false, "score": 46.1, "description": "MCP Server that models the Sauce Labs API", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 199, "npm_package": "", "crate_package": "", "pypi_package": "sauce-api-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 86, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.64, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-09T02:47:36Z", "slug": "sauce-api-mcp", "full_fetched_at": "2026-10-12T00:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'sauce-api-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sauce-api-mcp", "version": "1.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:06Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.7, "trust_score_v2": 70.7, "rank_v2": 334, "rank_v2_delta": 10, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.5, "identity": 18.0, "transparency": 13.1, "maintenance": 15.0, "adoption": 5.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenSandbox", "repo": "opensandbox-group/OpenSandbox", "display_repo": "", "url": "https://github.com/opensandbox-group/OpenSandbox", "listing_class": "agent", "rank": 335, "previous_rank": 334, "rank_delta": -1, "stars": 15800, "stars_fmt": "15.8k", "forks": 1455, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 582, "commits_low_confidence": false, "score": 89.9, "description": "Secure, Fast, and Extensible Sandbox runtime for AI agents.", "language": "Python", "open_issues": 66, "category": "Sandboxes & Runtimes", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "opensandbox", "docker_image": "", "vscode_extension": "", "weekly_downloads": 144236, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.04, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:52:57Z", "slug": "opensandbox", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "https://open-sandbox.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: sdks/mcp/sandbox/python/src/opensandbox_mcp/server.py", "Found MCP-related server test path: sdks/mcp/sandbox/python/tests/test_server_tools.py" ] }, "external_service_dependencies": { "providers": [ "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in server/pyproject.toml", "Found Redis dependency 'redis' in server/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: server/opensandbox_server/extensions/__init__.py", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'redis' in server/pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'opensandbox' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "opensandbox", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:19Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.7, "trust_score_v2": 70.7, "rank_v2": 335, "rank_v2_delta": 106, "trust_v2_adjustment": 4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 12.4, "maintenance": 20.0, "adoption": 17.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Hunch MCP", "repo": "PrithviSeran/hunch-mcp", "display_repo": "", "url": "https://github.com/PrithviSeran/hunch-mcp", "listing_class": "agent", "rank": 336, "previous_rank": 328, "rank_delta": -8, "stars": 22, "stars_fmt": "22", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 17, "commits_low_confidence": false, "score": 50.2, "description": "Drive your Mac focus-free over MCP: OS APIs, AppleScript, CDP, and Accessibility", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 200, "npm_package": "", "crate_package": "", "pypi_package": "hunch-sdk", "docker_image": "", "vscode_extension": "", "weekly_downloads": 111, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.34, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:01:14Z", "slug": "hunch-mcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "https://www.tryhunch.ca", "homepage_icon": "/site-icons/ddd18762fc39cc5a.png", "homepage_icon_for": "https://www.tryhunch.ca", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'claude-agent-sdk' in pyproject.toml", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/hunch/native/Hunch Safari.app/Contents/PlugIns/Hunch.appex/Contents/Info.plist", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'hunch-sdk' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "hunch-sdk", "version": "0.7.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.7, "trust_score_v2": 70.7, "rank_v2": 336, "rank_v2_delta": 132, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.3, "identity": 18.0, "transparency": 11.3, "maintenance": 16.9, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Accessibility Scanner", "repo": "JustasMonkev/mcp-accessibility-scanner", "display_repo": "", "url": "https://github.com/JustasMonkev/mcp-accessibility-scanner", "listing_class": "agent", "rank": 337, "previous_rank": 349, "rank_delta": 12, "stars": 57, "stars_fmt": "57", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 177, "commits_low_confidence": false, "score": 66.2, "description": "An MCP (Model Context Protocol) server for performing accessibility audits on webpages using axe-core.", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 201, "npm_package": "mcp-accessibility-scanner", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3090, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:15:49Z", "slug": "mcp-accessibility-scanner", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: tests/mcp-server-errors.test.ts", "Found MCP-related server test path: tests/mcp-server-init.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PLAYWRIGHT_MCP_EXTENSION_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-accessibility-scanner' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-accessibility-scanner", "version": "4.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:36Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 70.5, "trust_score_v2": 70.5, "rank_v2": 337, "rank_v2_delta": 122, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "1password MCP", "repo": "CakeRepository/1Password-MCP", "display_repo": "", "url": "https://github.com/CakeRepository/1Password-MCP", "listing_class": "agent", "rank": 338, "previous_rank": 369, "rank_delta": 31, "stars": 21, "stars_fmt": "21", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 4, "commits_low_confidence": false, "score": 44.3, "description": "1Password MCP server used for storing passwords create separate vault please", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 202, "npm_package": "@takescake/1password-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1731, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.341, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-26T18:23:48Z", "slug": "1password-mcp", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "https://flowdevs.io", "homepage_icon": "/site-icons/2acd033f2f21dc07.png", "homepage_icon_for": "https://flowdevs.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OP_SERVICE_ACCOUNT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@takescake/1password-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@takescake/1password-mcp", "version": "5.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.5, "trust_score_v2": 70.5, "rank_v2": 338, "rank_v2_delta": 131, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 18.0, "transparency": 11.7, "maintenance": 14.3, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ToolHive", "repo": "stacklok/toolhive", "display_repo": "", "url": "https://github.com/stacklok/toolhive", "listing_class": "agent", "rank": 339, "previous_rank": 336, "rank_delta": -3, "stars": 2273, "stars_fmt": "2.3k", "forks": 320, "forks_fmt": "320", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 86, "commits_low_confidence": false, "score": 81.0, "description": "ToolHive is an enterprise-grade platform for running and managing Model Context Protocol (MCP) servers.", "language": "Go", "open_issues": 330, "category": "Protocols & Tool Integration", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 9, "Security-Policy": 4, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-08T17:27:49Z", "slug": "toolhive", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "https://stacklok.com/download/", "homepage_icon": "/site-icons/89f12d174ab6b334.png", "homepage_icon_for": "https://stacklok.com/download/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cmd/thv-operator/test-integration/mcp-server-secrets-admission/secrets_admission_test.go", "Found MCP-related server path: cmd/thv-operator/test-integration/mcp-server/mcpserver_authserverref_integration_test.go", "Found MCP-related server docs path: docs/kind/deploying-mcp-server-with-operator.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: pkg/plugins/adapter.go", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.4, "trust_score_v2": 70.4, "rank_v2": 339, "rank_v2_delta": 1, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.9, "identity": 10.8, "transparency": 15.2, "maintenance": 19.7, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zeroclaw", "repo": "zeroclaw-labs/zeroclaw", "display_repo": "", "url": "https://github.com/zeroclaw-labs/zeroclaw", "listing_class": "agent", "rank": 340, "previous_rank": 338, "rank_delta": -2, "stars": 32963, "stars_fmt": "33.0k", "forks": 4967, "forks_fmt": "5.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 440, "commits_low_confidence": false, "score": 94.3, "description": "Fast, small, and fully autonomous AI personal assistant infrastructure, any OS, any platform — deploy anywhere, swap anything 🦀", "language": "Rust", "open_issues": 576, "category": "Agent Frameworks", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:11:44Z", "slug": "zeroclaw", "full_fetched_at": "2026-10-12T08:02:41Z", "source_note": "", "github_homepage": "https://www.zeroclaw.com/", "homepage_icon": "/site-icons/002fe3010a354296.png", "homepage_icon_for": "https://www.zeroclaw.com/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: crates/zeroclaw-runtime/tests/fixtures/mcp-server.sh" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: crates/zeroclaw-plugins/AGENTS.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.4, "trust_score_v2": 70.4, "rank_v2": 340, "rank_v2_delta": -58, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 10.8, "transparency": 14.8, "maintenance": 20.0, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AgentScope", "repo": "agentscope-ai/agentscope", "display_repo": "", "url": "https://github.com/agentscope-ai/agentscope", "listing_class": "agent", "rank": 341, "previous_rank": 343, "rank_delta": 2, "stars": 33131, "stars_fmt": "33.1k", "forks": 3639, "forks_fmt": "3.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 166, "commits_low_confidence": false, "score": 93.7, "description": "Build and run agents you can see, understand and trust.", "language": "Python", "open_issues": 343, "category": "Agent Frameworks", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "agentscope", "docker_image": "", "vscode_extension": "", "weekly_downloads": 25850, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T23:41:56Z", "slug": "agentscope", "full_fetched_at": "2026-10-12T04:02:15Z", "source_note": "", "github_homepage": "https://docs.agentscope.io/", "homepage_icon": "/site-icons/56c66da42dce0ea4.png", "homepage_icon_for": "https://docs.agentscope.io/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "E2B", "Google Gemini", "OpenAI", "Qdrant", "Redis", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'agentscope' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agentscope", "version": "2.0.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:15Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.4, "trust_score_v2": 70.4, "rank_v2": 341, "rank_v2_delta": -58, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 12.4, "maintenance": 20.0, "adoption": 16.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SportIQ MCP", "repo": "Ninjabeam20/SportIQ-MCP", "display_repo": "", "url": "https://github.com/Ninjabeam20/SportIQ-MCP", "listing_class": "agent", "rank": 342, "previous_rank": 340, "rank_delta": -2, "stars": 10, "stars_fmt": "10", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 16, "commits_low_confidence": false, "score": 47.6, "description": "MCP server with 25+ AI-callable tools for IPL, F1 & FIFA WC 2026 — Dream11 solver, F1 pit-strategy model, Monte Carlo bracket simulator. Works with Claude, Cursor & Zed.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 203, "npm_package": "", "crate_package": "", "pypi_package": "sportiq-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 62, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.12, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:41:53Z", "slug": "sportiq-mcp", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://sport-iq-sports-analysis.vercel.app", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .agents/skills/fastmcp-patterns/SKILL.md", "Found MCP-related server path: .claude/rules/fastmcp-conventions.md", "Found MCP-related server docs path: docs/wiki/decisions/0001-fastmcp-over-raw-mcp.md" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "Found Redis credential/config marker 'REDIS_URL'", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'sportiq-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sportiq-mcp", "version": "0.3.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:05Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 70.4, "trust_score_v2": 70.4, "rank_v2": 342, "rank_v2_delta": 120, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 12.3, "maintenance": 16.8, "adoption": 4.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Activitypub MCP", "repo": "cameronrye/activitypub-mcp", "display_repo": "", "url": "https://github.com/cameronrye/activitypub-mcp", "listing_class": "agent", "rank": 343, "previous_rank": 346, "rank_delta": 3, "stars": 17, "stars_fmt": "17", "forks": 5, "forks_fmt": "5", "last_push": "2026-09-13", "days_ago": 29, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.2, "description": "A comprehensive Model Context Protocol (MCP) server that enables LLMs like Claude to explore and interact with the existing Fediverse through standardized MCP tools, resources, and prompts.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 204, "npm_package": "activitypub-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 60, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T02:02:11Z", "slug": "activitypub-mcp", "full_fetched_at": "2026-10-12T12:02:48Z", "source_note": "", "github_homepage": "https://cameronrye.github.io/activitypub-mcp/", "homepage_icon": "/site-icons/eb868995f7179a55.png", "homepage_icon_for": "https://cameronrye.github.io/activitypub-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP-related server test path: tests/unit/mcp-server-startup.test.ts", "Found MCP-related server test path: tests/unit/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ACTIVITYPUB_DEFAULT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'activitypub-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "activitypub-mcp", "version": "3.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:48Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 70.3, "trust_score_v2": 70.3, "rank_v2": 343, "rank_v2_delta": 140, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.9, "identity": 18.0, "transparency": 12.9, "maintenance": 10.1, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qiskit Code Assistant MCP Server", "repo": "Qiskit/mcp-servers", "display_repo": "", "url": "https://github.com/Qiskit/mcp-servers", "listing_class": "agent", "rank": 344, "previous_rank": 341, "rank_delta": -3, "stars": 40, "stars_fmt": "40", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 9, "commits_low_confidence": true, "score": 52.7, "description": "A collection of MCP servers to allow LLMs to use the qiskit,qiskit-ibm-runtime library, qiskit-ibm-transpiler, qiskit-code-assistant service library and others", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 205, "npm_package": "", "crate_package": "", "pypi_package": "qiskit-code-assistant-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 80, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.39, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:49:33Z", "slug": "qiskit-code-assistant-mcp-server", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: qiskit-docs-mcp-server/LICENSE", "Found MCP-related server path: qiskit-docs-mcp-server/README.md", "Found MCP-related server test path: qiskit-docs-mcp-server/tests/__init__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'QISKIT_IBM_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'qiskit-code-assistant-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "qiskit-code-assistant-mcp-server", "version": "0.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 70.3, "trust_score_v2": 70.3, "rank_v2": 344, "rank_v2_delta": 138, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.0, "identity": 18.0, "transparency": 12.2, "maintenance": 13.7, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FAOSTAT MCP", "repo": "berba-q/faostat-mcp", "display_repo": "", "url": "https://github.com/berba-q/faostat-mcp", "listing_class": "agent", "rank": 345, "previous_rank": 342, "rank_delta": -3, "stars": 18, "stars_fmt": "18", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 8, "commits_low_confidence": false, "score": 47.0, "description": "MCP server that exposes the full FAOSTAT API as tools for AI assistants — query UNFAO Food & Agriculture Statistics in natural language via Claude, Cursor, or any MCP-compatible client.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 206, "npm_package": "", "crate_package": "", "pypi_package": "faostat-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 103, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.297, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-25T01:25:33Z", "slug": "faostat-mcp", "full_fetched_at": "2026-10-12T12:02:41Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "README/docs also mention Redis", "Found credential/config marker 'FAOSTAT_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'faostat-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "faostat-mcp", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:41Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 70.3, "trust_score_v2": 70.3, "rank_v2": 345, "rank_v2_delta": 121, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.5, "identity": 18.0, "transparency": 12.2, "maintenance": 15.1, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Endnote MCP", "repo": "gokmengokhan/endnote-mcp", "display_repo": "", "url": "https://github.com/gokmengokhan/endnote-mcp", "listing_class": "agent", "rank": 346, "previous_rank": 347, "rank_delta": 1, "stars": 52, "stars_fmt": "52", "forks": 6, "forks_fmt": "6", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 8, "commits_low_confidence": false, "score": 48.3, "description": "Connect your EndNote reference library to Claude AI — search, cite, and read PDFs directly in conversations", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 207, "npm_package": "", "crate_package": "", "pypi_package": "endnote-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 133, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.039, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T10:36:37Z", "slug": "endnote-mcp", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'endnote-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "endnote-mcp", "version": "1.4.12" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 70.3, "trust_score_v2": 70.3, "rank_v2": 346, "rank_v2_delta": 180, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 18.0, "transparency": 12.0, "maintenance": 14.5, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Code", "repo": "anthropics/claude-code", "display_repo": "", "url": "https://github.com/anthropics/claude-code", "listing_class": "agent", "rank": 347, "previous_rank": 339, "rank_delta": -8, "stars": 150368, "stars_fmt": "150.4k", "forks": 26304, "forks_fmt": "26.3k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 112, "commits_low_confidence": false, "score": 100.0, "description": "Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.", "language": "TypeScript", "open_issues": 14004, "category": "Coding Agents", "category_rank": 17, "npm_package": "@anthropic-ai/claude-code", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12482566, "dl_source": "npm", "hn_mentions_30d": 458, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.64, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-30T06:39:04Z", "slug": "claude-code", "full_fetched_at": "2026-10-12T04:02:15Z", "source_note": "", "github_homepage": "https://code.claude.com/docs/en/overview", "homepage_icon": "/site-icons/48ea4ae3668159b2.png", "homepage_icon_for": "https://code.claude.com/docs/en/overview", "public_actions": { "actions_30d": 84093, "actions_30d_merged": 73129, "actions_30d_by_repo": [ { "repo": "skifahrer/maptiles", "count": 1 }, { "repo": "Turbohedgehog/zodiac13", "count": 1 }, { "repo": "projectx1478/steam-kids", "count": 1 }, { "repo": "PrayAnalog/lastfirst-api", "count": 1 }, { "repo": "femboyss/cmaal", "count": 1 } ] }, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (mods/agents-md/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@anthropic-ai/claude-code' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@anthropic-ai/claude-code", "version": "2.1.296" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:15Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 1.0, "signal_types": 5, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "anthropics/claude-code", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "proprietary", "license_override": "proprietary", "trust_score": 70.2, "trust_score_v2": 70.2, "rank_v2": 347, "rank_v2_delta": 77, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 5.1, "maintenance": 19.9, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SmartBear MCP", "repo": "SmartBear/smartbear-mcp", "display_repo": "", "url": "https://github.com/SmartBear/smartbear-mcp", "listing_class": "agent", "rank": 348, "previous_rank": 344, "rank_delta": -4, "stars": 44, "stars_fmt": "44", "forks": 50, "forks_fmt": "50", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 23, "commits_low_confidence": false, "score": 59.6, "description": "SmartBear's official MCP Server", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 208, "npm_package": "@smartbear/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 10681, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-10T15:03:11Z", "slug": "smartbear-mcp", "full_fetched_at": "2026-10-12T00:02:21Z", "source_note": "", "github_homepage": "https://developer.smartbear.com/smartbear-mcp/docs/mcp-server", "homepage_icon": "/site-icons/654d4a84cc4dd26d.png", "homepage_icon_for": "https://developer.smartbear.com/smartbear-mcp/docs/mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/products/SmartBear MCP Server/images/embedded/smartbear-mcp-server.jpg", "Found MCP-related server docs path: docs/products/SmartBear MCP Server/mcp-server-capabilities.md", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BUGSNAG_PROJECT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@smartbear/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@smartbear/mcp", "version": "0.42.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:21Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 70.1, "trust_score_v2": 70.1, "rank_v2": 348, "rank_v2_delta": 141, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.4, "identity": 10.8, "transparency": 14.3, "maintenance": 17.3, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Fred MCP Server", "repo": "stefanoamorelli/fred-mcp-server", "display_repo": "", "url": "https://github.com/stefanoamorelli/fred-mcp-server", "listing_class": "agent", "rank": 349, "previous_rank": 345, "rank_delta": -4, "stars": 124, "stars_fmt": "124", "forks": 41, "forks_fmt": "41", "last_push": "2026-08-22", "days_ago": 51, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.2, "description": "Open-source FRED MCP Server (Federal Reserve Economic Data)", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 209, "npm_package": "fred-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 385, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.48, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:42:40Z", "slug": "fred-mcp-server", "full_fetched_at": "2026-10-12T00:02:22Z", "source_note": "", "github_homepage": "https://fred-mcp-server.amorelli.tech", "homepage_icon": "/site-icons/863aa496ce3ac6ed.png", "homepage_icon_for": "https://fred-mcp-server.amorelli.tech", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fred-mcp-server-logo.png", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FRED_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'fred-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "fred-mcp-server", "version": "1.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:22Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 70.1, "trust_score_v2": 70.1, "rank_v2": 349, "rank_v2_delta": 142, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.8, "identity": 18.0, "transparency": 13.2, "maintenance": 8.6, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SkillOpt", "repo": "microsoft/SkillOpt", "display_repo": "", "url": "https://github.com/microsoft/SkillOpt", "listing_class": "skill", "rank": 30, "previous_rank": 30, "rank_delta": 0, "stars": 18264, "stars_fmt": "18.3k", "forks": 1725, "forks_fmt": "1.7k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 25, "commits_low_confidence": false, "score": 82.6, "description": "SkillOpt is a text-space optimizer that trains reusable natural-language skills for frozen LLM agents through trajectory-driven edits, validation-gated updates, and deployable best_skill.md artifacts.", "language": "Python", "open_issues": 25, "category": "Agent Skills", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "skillopt", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5614, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.55, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-28T03:21:06Z", "slug": "skillopt", "full_fetched_at": "2026-10-11T20:01:59Z", "source_note": "", "github_homepage": "https://aka.ms/skillopt", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: plugins/copilot/mcp_server.py", "Found MCP-related server path: plugins/copilot/skillopt/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'claude-agent-sdk' in pyproject.toml", "Found DeepSeek dependency 'deepseek' in plugins/dsh/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'skillopt' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "skillopt", "version": "0.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:59Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 70.0, "trust_score_v2": 70.0, "rank_v2": 30, "rank_v2_delta": 367, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 13.7, "maintenance": 17.2, "adoption": 15.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Storybook MCP Addon", "repo": "storybookjs/mcp", "display_repo": "", "url": "https://github.com/storybookjs/mcp", "listing_class": "agent", "rank": 350, "previous_rank": 350, "rank_delta": 0, "stars": 270, "stars_fmt": "270", "forks": 43, "forks_fmt": "43", "last_push": "2026-09-07", "days_ago": 35, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.3, "description": "🤖", "language": "TypeScript", "open_issues": 30, "category": "MCP Servers", "category_rank": 210, "npm_package": "@storybook/addon-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2353133, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:43:03Z", "slug": "storybook-mcp-addon", "full_fetched_at": "2026-10-12T00:02:22Z", "source_note": "", "github_homepage": "https://storybook-evals.vercel.app", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in agent-eval/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@storybook/addon-mcp' points to storybookjs/storybook (same owner as storybookjs/mcp, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@storybook/addon-mcp", "version": "10.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:22Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "storybookjs/mcp", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.9, "trust_score_v2": 69.9, "rank_v2": 350, "rank_v2_delta": 13, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 18.0, "transparency": 11.9, "maintenance": 9.7, "adoption": 14.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Apple Mail MCP", "repo": "imdinu/apple-mail-mcp", "display_repo": "", "url": "https://github.com/imdinu/apple-mail-mcp", "listing_class": "agent", "rank": 351, "previous_rank": 335, "rank_delta": -16, "stars": 71, "stars_fmt": "71", "forks": 28, "forks_fmt": "28", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 3, "commits_low_confidence": true, "score": 49.8, "description": "Apple Mail MCP server with full-coverage FTS5 body search. Reliable on large mailboxes where AppleScript-based servers timeout.", "language": "Python", "open_issues": 16, "category": "MCP Servers", "category_rank": 211, "npm_package": "", "crate_package": "", "pypi_package": "apple-mail-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 294, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.226, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:26:32Z", "slug": "apple-mail-mcp", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "https://imdinu.github.io/apple-mail-mcp/", "homepage_icon": "/site-icons/24cc7db8d6a3eb69.png", "homepage_icon_for": "https://imdinu.github.io/apple-mail-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'apple-mail-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "apple-mail-mcp", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:24Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 69.9, "trust_score_v2": 69.9, "rank_v2": 351, "rank_v2_delta": 180, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.6, "identity": 18.0, "transparency": 11.9, "maintenance": 12.9, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ClawBio", "repo": "ClawBio/ClawBio", "display_repo": "", "url": "https://github.com/ClawBio/ClawBio", "listing_class": "skill", "rank": 31, "previous_rank": 33, "rank_delta": 2, "stars": 1159, "stars_fmt": "1.2k", "forks": 283, "forks_fmt": "283", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 382, "commits_low_confidence": false, "score": 79.8, "description": "🦖 ClawBio - The first bioinformatics-native AI agent skill library. Local-first. Reproducible. Open. Free.", "language": "Python", "open_issues": 20, "category": "Agent Skills", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "clawbio", "docker_image": "", "vscode_extension": "", "weekly_downloads": 56, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.39, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:45:46Z", "slug": "clawbio", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "https://clawbio.github.io/ClawBio/", "homepage_icon": "/site-icons/8f835aa41b727b4e.png", "homepage_icon_for": "https://clawbio.github.io/ClawBio/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: clawbio/mcp_server.py", "Found MCP-related server test path: tests/test_mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in skills/data-extractor/requirements.txt", "README/docs also mention Anthropic", "Found credential/config marker 'GALAXY_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'clawbio' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "clawbio", "version": "0.7.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:52Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 69.8, "trust_score_v2": 69.8, "rank_v2": 31, "rank_v2_delta": 434, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 14.4, "maintenance": 20.0, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ContextStream", "repo": "contextstream/mcp-server", "display_repo": "", "url": "https://github.com/contextstream/mcp-server", "listing_class": "agent", "rank": 352, "previous_rank": 353, "rank_delta": 1, "stars": 44, "stars_fmt": "44", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 72, "commits_low_confidence": false, "score": 63.1, "description": "Persistent memory, semantic search, and shared project context for AI agents with traceable sources and scoped access. Carry decisions, lessons, and intent across sessions and tools.", "language": "Rust", "open_issues": 0, "category": "MCP Servers", "category_rank": 212, "npm_package": "@contextstream/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3334, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:08:56Z", "slug": "contextstream", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "https://contextstream.io", "homepage_icon": "/site-icons/eb88701656f81679.png", "homepage_icon_for": "https://contextstream.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: crates/mcp-server/Cargo.toml", "Found MCP-related server path: crates/mcp-server/benches/json_benchmarks.rs", "Found MCP-related server test path: crates/mcp-server/tests/default_dependency_invariant.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CONTEXTSTREAM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@contextstream/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@contextstream/mcp-server", "version": "1.0.20" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:56Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.8, "trust_score_v2": 69.8, "rank_v2": 352, "rank_v2_delta": 148, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.7, "identity": 10.8, "transparency": 14.2, "maintenance": 19.4, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "mini-SWE-agent", "repo": "SWE-agent/mini-swe-agent", "display_repo": "", "url": "https://github.com/SWE-agent/mini-swe-agent", "listing_class": "agent", "rank": 353, "previous_rank": 348, "rank_delta": -5, "stars": 8430, "stars_fmt": "8.4k", "forks": 1155, "forks_fmt": "1.2k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 62.0, "description": "The 100 line AI agent that solves GitHub issues or helps you in your command line. Radically simple, no huge configs, no giant monorepo—but scores >74% on SWE-bench verified!", "language": "Python", "open_issues": 38, "category": "Coding Agents", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "mini-swe-agent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3729788, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.98, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T21:04:26Z", "slug": "mini-swe-agent", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "https://mini-swe-agent.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mini-swe-agent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mini-swe-agent", "version": "2.4.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.8, "trust_score_v2": 69.8, "rank_v2": 353, "rank_v2_delta": 61, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.7, "maintenance": 11.6, "adoption": 18.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "E18e MCP", "repo": "e18e/mcp", "display_repo": "", "url": "https://github.com/e18e/mcp", "listing_class": "agent", "rank": 354, "previous_rank": 352, "rank_delta": -2, "stars": 19, "stars_fmt": "19", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 1, "commits_low_confidence": false, "score": 37.3, "description": "The official e18e MCP server", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 213, "npm_package": "@e18e/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 131, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.446, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T00:28:52Z", "slug": "e18e-mcp", "full_fetched_at": "2026-10-12T12:03:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in packages/stdio/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@e18e/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@e18e/mcp", "version": "0.0.11" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:08Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.8, "trust_score_v2": 69.8, "rank_v2": 354, "rank_v2_delta": 197, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.2, "identity": 18.0, "transparency": 12.2, "maintenance": 12.5, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Search Console MCP", "repo": "saurabhsharma2u/search-console-mcp", "display_repo": "", "url": "https://github.com/saurabhsharma2u/search-console-mcp", "listing_class": "agent", "rank": 355, "previous_rank": 351, "rank_delta": -4, "stars": 300, "stars_fmt": "300", "forks": 30, "forks_fmt": "30", "last_push": "2026-09-02", "days_ago": 40, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.2, "description": "Search & analytics data as infrastructure — MCP server for Google Search Console, Bing Webmaster Tools, Google Adsense and GA4, designed for AI agents and automation.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 214, "npm_package": "search-console-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 848, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:28:07Z", "slug": "search-console-mcp", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "https://searchconsolemcp.saurabh.app/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/mcp-server-e2e.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BING_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'search-console-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "search-console-mcp", "version": "2.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:25Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.7, "trust_score_v2": 69.7, "rank_v2": 355, "rank_v2_delta": 150, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.1, "identity": 18.0, "transparency": 12.4, "maintenance": 9.3, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Prism MCP", "repo": "prismatic-io/prism-mcp", "display_repo": "", "url": "https://github.com/prismatic-io/prism-mcp", "listing_class": "agent", "rank": 356, "previous_rank": 365, "rank_delta": 9, "stars": 27, "stars_fmt": "27", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 0, "commits_low_confidence": true, "score": 35.1, "description": "An MCP server for interacting with Prismatic dev tools.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 215, "npm_package": "@prismatic-io/prism-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 93, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.358, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T08:26:09Z", "slug": "prism-mcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PRISM_REFRESH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@prismatic-io/prism-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@prismatic-io/prism-mcp", "version": "1.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.6, "trust_score_v2": 69.6, "rank_v2": 356, "rank_v2_delta": 160, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 12.8, "maintenance": 12.0, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Xcode: MCP Bridge Wrapper for Cursor", "repo": "SoundBlaster/XcodeMCPWrapper", "display_repo": "", "url": "https://github.com/SoundBlaster/XcodeMCPWrapper", "listing_class": "agent", "rank": 357, "previous_rank": 357, "rank_delta": 0, "stars": 20, "stars_fmt": "20", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 5, "commits_low_confidence": false, "score": 42.4, "description": "MCP that makes Xcode 26.3's MCP compatible with Cursor and other strict MCP-spec-compliant clients", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 216, "npm_package": "", "crate_package": "", "pypi_package": "mcpbridge-wrapper", "docker_image": "", "vscode_extension": "", "weekly_downloads": 72, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.13, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:01:05Z", "slug": "xcode-mcp-bridge-wrapper-for-cursor", "full_fetched_at": "2026-10-12T00:02:16Z", "source_note": "", "github_homepage": "https://soundblaster.github.io/XcodeMCPWrapper", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcpbridge-wrapper' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcpbridge-wrapper", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:16Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.6, "trust_score_v2": 69.6, "rank_v2": 357, "rank_v2_delta": 208, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 12.2, "maintenance": 14.0, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Discourse MCP", "repo": "discourse/discourse-mcp", "display_repo": "", "url": "https://github.com/discourse/discourse-mcp", "listing_class": "agent", "rank": 358, "previous_rank": 355, "rank_delta": -3, "stars": 77, "stars_fmt": "77", "forks": 43, "forks_fmt": "43", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.3, "description": "MCP client for Discourse sites", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 217, "npm_package": "@discourse/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2380, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.836, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:20:05Z", "slug": "discourse-mcp", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DISCOURSE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@discourse/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@discourse/mcp", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:04Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.6, "trust_score_v2": 69.6, "rank_v2": 358, "rank_v2_delta": 157, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.8, "identity": 18.0, "transparency": 12.0, "maintenance": 8.8, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Email MCP", "repo": "codefuturist/email-mcp", "display_repo": "", "url": "https://github.com/codefuturist/email-mcp", "listing_class": "agent", "rank": 359, "previous_rank": 356, "rank_delta": -3, "stars": 127, "stars_fmt": "127", "forks": 57, "forks_fmt": "57", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 0, "commits_low_confidence": true, "score": 45.7, "description": "Email MCP server with full IMAP + SMTP support — read, search, send, manage, and organize email from any AI assistant via the Model Context Protocol", "language": "TypeScript", "open_issues": 29, "category": "MCP Servers", "category_rank": 218, "npm_package": "@codefuturist/email-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 901, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.063, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:31:30Z", "slug": "email-mcp", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@codefuturist/email-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@codefuturist/email-mcp", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:52Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "LGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 69.6, "trust_score_v2": 69.6, "rank_v2": 359, "rank_v2_delta": 205, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 18.0, "transparency": 11.9, "maintenance": 11.9, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Goose", "repo": "aaif-goose/goose", "display_repo": "", "url": "https://github.com/aaif-goose/goose", "listing_class": "agent", "rank": 360, "previous_rank": 358, "rank_delta": -2, "stars": 55199, "stars_fmt": "55.2k", "forks": 6414, "forks_fmt": "6.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 153, "commits_low_confidence": false, "score": 96.2, "description": "an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM", "language": "Rust", "open_issues": 329, "category": "Coding Agents", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:14:20Z", "slug": "goose", "full_fetched_at": "2026-10-12T04:02:02Z", "source_note": "", "github_homepage": "https://goose-docs.ai/", "homepage_icon": "/site-icons/31e6cbe393881e70.png", "homepage_icon_for": "https://goose-docs.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: crates/goose-mcp/src/mcp_server_runner.rs", "Found MCP-related server path: crates/goose/src/plugins/mcp_servers.rs", "Found MCP-related server test path: crates/goose/tests/fastmcp_test_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: crates/goose/src/agents/platform_extensions/analyze/format.rs", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.5, "trust_score_v2": 69.5, "rank_v2": 360, "rank_v2_delta": 4, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 13.5, "maintenance": 20.0, "adoption": 11.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Easy Notion MCP", "repo": "Grey-Iris/easy-notion-mcp", "display_repo": "", "url": "https://github.com/Grey-Iris/easy-notion-mcp", "listing_class": "agent", "rank": 361, "previous_rank": 354, "rank_delta": -7, "stars": 53, "stars_fmt": "53", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-11", "days_ago": 31, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.2, "description": "Markdown-first Notion MCP server. ~6-7x fewer response tokens vs official Notion MCP. 43 tools.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 219, "npm_package": "easy-notion-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 663, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:00:58Z", "slug": "easy-notion-mcp", "full_fetched_at": "2026-10-12T16:02:14Z", "source_note": "", "github_homepage": "https://www.notion.so/easy-notion-mcp-327be876242f817f9129ff1a5a624814", "homepage_icon": "/site-icons/71b1304ece9b21e0.png", "homepage_icon_for": "https://www.notion.so/easy-notion-mcp-327be876242f817f9129ff1a5a624814", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'NOTION_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'easy-notion-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "easy-notion-mcp", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:14Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.5, "trust_score_v2": 69.5, "rank_v2": 361, "rank_v2_delta": 159, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.4, "identity": 18.0, "transparency": 13.3, "maintenance": 9.9, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Unity API Documentation", "repo": "Codeturion/unity-api-mcp", "display_repo": "", "url": "https://github.com/Codeturion/unity-api-mcp", "listing_class": "agent", "rank": 362, "previous_rank": 579, "rank_delta": 217, "stars": 67, "stars_fmt": "67", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2, "commits_low_confidence": true, "score": 45.9, "description": "Instant, accurate Unity API lookups instead of expensive source file reads, saving your agent tokens, context, and hallucinations", "language": "Python", "open_issues": 11, "category": "MCP Servers", "category_rank": 220, "npm_package": "", "crate_package": "", "pypi_package": "unity-api-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 93, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.021, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:41:32Z", "slug": "unity-api-documentation", "full_fetched_at": "2026-10-12T12:03:06Z", "source_note": "", "github_homepage": "https://www.fuatcankoseoglu.com/", "homepage_icon": "/site-icons/a578ee1fa97166d9.png", "homepage_icon_for": "https://www.fuatcankoseoglu.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'unity-api-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "unity-api-mcp", "version": "2.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:06Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.5, "trust_score_v2": 69.5, "rank_v2": 362, "rank_v2_delta": 208, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 18.0, "transparency": 12.3, "maintenance": 13.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DeepEval", "repo": "confident-ai/deepeval", "display_repo": "", "url": "https://github.com/confident-ai/deepeval", "listing_class": "agent", "rank": 363, "previous_rank": 360, "rank_delta": -3, "stars": 18770, "stars_fmt": "18.8k", "forks": 2051, "forks_fmt": "2.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 127, "commits_low_confidence": false, "score": 91.0, "description": "The LLM Evaluation Framework", "language": "Python", "open_issues": 325, "category": "Observability & Evaluation", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "deepeval", "docker_image": "", "vscode_extension": "", "weekly_downloads": 773229, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.13, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T02:05:14Z", "slug": "deepeval", "full_fetched_at": "2026-10-12T04:02:26Z", "source_note": "", "github_homepage": "https://deepeval.com", "homepage_icon": "/site-icons/b0b471f8aa431614.png", "homepage_icon_for": "https://deepeval.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in typescript/package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in typescript/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'deepeval' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "deepeval", "version": "4.2.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:26Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.5, "trust_score_v2": 69.5, "rank_v2": 363, "rank_v2_delta": 93, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.6, "maintenance": 20.0, "adoption": 18.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Companies House MCP", "repo": "aicayzer/companies-house-mcp", "display_repo": "", "url": "https://github.com/aicayzer/companies-house-mcp", "listing_class": "agent", "rank": 364, "previous_rank": 375, "rank_delta": 11, "stars": 13, "stars_fmt": "13", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 3, "commits_low_confidence": true, "score": 44.1, "description": "Unofficial CLI and MCP server for the UK Companies House API company search, profiles, officers, filings, ownership, and due diligence", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 221, "npm_package": "companies-house-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 161, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.18, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-10T19:30:41Z", "slug": "companies-house-mcp", "full_fetched_at": "2026-10-12T08:02:41Z", "source_note": "", "github_homepage": "https://companies-house.uk", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in packages/cli/package.json", "Found MCP dependency 'modelcontextprotocol' in packages/worker/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude/skills') in packages/cli/package.json", "Found credential/config marker 'COMPANIES_HOUSE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'companies-house-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "companies-house-mcp", "version": "4.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:41Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.4, "trust_score_v2": 69.4, "rank_v2": 364, "rank_v2_delta": 160, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.8, "identity": 18.0, "transparency": 12.8, "maintenance": 13.1, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Context7", "repo": "upstash/context7", "display_repo": "", "url": "https://github.com/upstash/context7", "listing_class": "agent", "rank": 365, "previous_rank": 361, "rank_delta": -4, "stars": 62932, "stars_fmt": "62.9k", "forks": 3071, "forks_fmt": "3.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 62, "commits_low_confidence": false, "score": 92.4, "description": "Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors", "language": "TypeScript", "open_issues": 14, "category": "Protocols & Tool Integration", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:15:49Z", "slug": "context7", "full_fetched_at": "2026-10-12T08:02:36Z", "source_note": "", "github_homepage": "https://context7.com", "homepage_icon": "/site-icons/9ce56e454a6ec11d.png", "homepage_icon_for": "https://context7.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/agent-plugins/context7/mcp.json", "Found MCP-related server path: plugins/context7-power/mcp.json", "Found MCP-related server docs path: docs/images/clients/cursor/cloud-agents/02-open-mcp-servers.png" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude/context7/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.3, "trust_score_v2": 69.3, "rank_v2": 365, "rank_v2_delta": 0, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 13.8, "maintenance": 19.2, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AutoGen", "repo": "microsoft/autogen", "display_repo": "", "url": "https://github.com/microsoft/autogen", "listing_class": "agent", "rank": 366, "previous_rank": 359, "rank_delta": -7, "stars": 61372, "stars_fmt": "61.4k", "forks": 9280, "forks_fmt": "9.3k", "last_push": "2026-04-15", "days_ago": 180, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.1, "description": "A programming framework for agentic AI", "language": "Python", "open_issues": 559, "category": "Agent Frameworks", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "autogen-agentchat", "docker_image": "", "vscode_extension": "", "weekly_downloads": 92490, "dl_source": "pypi", "hn_mentions_30d": 3, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 1.0, "scorecard_score": 5.6, "scorecard_checks": { "Maintained": 0, "Security-Policy": 10, "Code-Review": 6, "CII-Best-Practices": 0, "Dangerous-Workflow": 10, "License": 10, "Token-Permissions": 0, "Branch-Protection": 5, "Signed-Releases": -1, "Binary-Artifacts": 10, "Packaging": 10, "Fuzzing": 0, "SAST": 10, "Pinned-Dependencies": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:01Z", "slug": "autogen", "full_fetched_at": "2026-10-12T08:01:57Z", "source_note": "", "github_homepage": "https://microsoft.github.io/autogen/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: python/packages/autogen-ext/tests/mcp_server_comprehensive.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in python/samples/gitty/pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: dotnet/src/AutoGen.Anthropic/Extensions/AnthropicAgentExtension.cs", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'autogen-agentchat' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "CC-BY-4.0", "license_type": "open", "license_override": "", "trust_score": 69.3, "trust_score_v2": 69.3, "rank_v2": 366, "rank_v2_delta": -32, "trust_v2_adjustment": 0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.5, "identity": 18.0, "transparency": 13.3, "maintenance": 0.0, "adoption": 18.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Scholar Feed", "repo": "YGao2005/scholar-feed-mcp", "display_repo": "", "url": "https://github.com/YGao2005/scholar-feed-mcp", "listing_class": "agent", "rank": 367, "previous_rank": 364, "rank_delta": -3, "stars": 12, "stars_fmt": "12", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 2, "commits_low_confidence": true, "score": 40.2, "description": "MCP server for searching 600,000+ CS/AI research papers with citation graphs, full text, embeddings, and BibTeX. Works with Claude Code, Cursor, and any MCP client. No signup required.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 222, "npm_package": "scholar-feed-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 119, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:10:13Z", "slug": "scholar-feed", "full_fetched_at": "2026-10-12T04:02:17Z", "source_note": "", "github_homepage": "https://www.scholarfeed.org", "homepage_icon": "/site-icons/13769151548d1074.png", "homepage_icon_for": "https://www.scholarfeed.org", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .codex-plugin/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json", "Found credential/config marker 'SF_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'scholar-feed-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "scholar-feed-mcp", "version": "3.20.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:17Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.3, "trust_score_v2": 69.3, "rank_v2": 367, "rank_v2_delta": 147, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.6, "identity": 18.0, "transparency": 13.0, "maintenance": 12.6, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Container", "repo": "aerovato/container", "display_repo": "", "url": "https://github.com/aerovato/container", "listing_class": "skill", "rank": 32, "previous_rank": 31, "rank_delta": -1, "stars": 351, "stars_fmt": "351", "forks": 33, "forks_fmt": "33", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 59.9, "description": "Persistent Linux workspaces for agentic development.", "language": "TypeScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 32, "npm_package": "@aerovato/container", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 39, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:11:16Z", "slug": "container", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://container.aerovato.com", "homepage_icon": "/site-icons/83a28aac15795ca5.png", "homepage_icon_for": "https://container.aerovato.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@aerovato/container' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@aerovato/container", "version": "3.7.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:28Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-3-Clause", "license_type": "open", "license_override": "", "trust_score": 69.3, "trust_score_v2": 69.3, "rank_v2": 32, "rank_v2_delta": 449, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.6, "identity": 18.0, "transparency": 11.5, "maintenance": 14.0, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Boss Skill", "repo": "echoVic/boss-skill", "display_repo": "", "url": "https://github.com/echoVic/boss-skill", "listing_class": "skill", "rank": 33, "previous_rank": 32, "rank_delta": -1, "stars": 562, "stars_fmt": "562", "forks": 51, "forks_fmt": "51", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 80, "commits_low_confidence": false, "score": 73.3, "description": "Boss Skill - BMAD 全自动研发流水线（多 Agent 编排）", "language": "TypeScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 33, "npm_package": "@blade-ai/boss-skill", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 57, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 7.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T04:09:01Z", "slug": "boss-skill", "full_fetched_at": "2026-10-12T16:01:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@blade-ai/boss-skill' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@blade-ai/boss-skill", "version": "3.10.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:50Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.2, "trust_score_v2": 69.2, "rank_v2": 33, "rank_v2_delta": 434, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 14.9, "maintenance": 19.6, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Treg", "repo": "superdesigndev/treg", "display_repo": "", "url": "https://github.com/superdesigndev/treg", "listing_class": "agent", "rank": 368, "previous_rank": 362, "rank_delta": -6, "stars": 5039, "stars_fmt": "5.0k", "forks": 411, "forks_fmt": "411", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1343, "commits_low_confidence": false, "score": 84.4, "description": "OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn", "language": "Python", "open_issues": 14, "category": "Protocols & Tool Integration", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "tools-registry", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3752, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.39, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:53:28Z", "slug": "treg", "full_fetched_at": "2026-10-12T16:02:10Z", "source_note": "", "github_homepage": "https://treg.to", "homepage_icon": "/site-icons/19d22866dd572ab5.png", "homepage_icon_for": "https://treg.to", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: plugins/treg/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'asyncpg' in pyproject.toml", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Found Redis dependency 'redis' in pyproject.toml", "README/docs also mention Redis", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'tools-registry' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "tools-registry", "version": "0.25.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "source-available", "trust_score": 69.2, "trust_score_v2": 69.2, "rank_v2": 368, "rank_v2_delta": 10, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 13.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Open Interpreter", "repo": "openinterpreter/openinterpreter", "display_repo": "", "url": "https://github.com/openinterpreter/openinterpreter", "listing_class": "agent", "rank": 369, "previous_rank": 363, "rank_delta": -6, "stars": 68558, "stars_fmt": "68.6k", "forks": 5894, "forks_fmt": "5.9k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 40, "commits_low_confidence": false, "score": 91.5, "description": "A coding agent for open models like Kimi K3 and GLM 5.3", "language": "Rust", "open_issues": 8, "category": "Coding Agents", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "open-interpreter", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6818, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.25, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:31:10Z", "slug": "open-interpreter", "full_fetched_at": "2026-10-12T08:02:15Z", "source_note": "", "github_homepage": "http://openinterpreter.com/", "homepage_icon": "/site-icons/ebef5935dda43192.png", "homepage_icon_for": "http://openinterpreter.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: codex-rs/mcp-server/BUILD.bazel", "Found MCP-related server path: codex-rs/mcp-server/Cargo.toml", "Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_elicitation.rs", "Found MCP-related server test path: codex-rs/app-server/tests/suite/v2/mcp_server_status.rs" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in sdk/python/pyproject.toml", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: bazel/extensions/BUILD.bazel" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'open-interpreter' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.2, "trust_score_v2": 69.2, "rank_v2": 369, "rank_v2_delta": 7, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.5, "identity": 10.8, "transparency": 13.4, "maintenance": 18.4, "adoption": 16.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google ADK (Go)", "repo": "google/adk-go", "display_repo": "", "url": "https://github.com/google/adk-go", "listing_class": "agent", "rank": 370, "previous_rank": 366, "rank_delta": -4, "stars": 8861, "stars_fmt": "8.9k", "forks": 1027, "forks_fmt": "1.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 121, "commits_low_confidence": false, "score": 87.7, "description": "An open-source, code-first Go toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.", "language": "Go", "open_issues": 113, "category": "Agent Frameworks", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-01T08:37:45Z", "slug": "google-adk-go", "full_fetched_at": "2026-10-12T04:02:37Z", "source_note": "", "github_homepage": "https://google.github.io/adk-docs/", "homepage_icon": "/site-icons/092ba6b0ca3d528a.png", "homepage_icon_for": "https://google.github.io/adk-docs/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: internal/configurable/conformance/recordplugin/invocation_record_state.go" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.1, "trust_score_v2": 69.1, "rank_v2": 370, "rank_v2_delta": -51, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 10.8, "transparency": 14.8, "maintenance": 20.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nx", "repo": "nrwl/nx", "display_repo": "", "url": "https://github.com/nrwl/nx", "listing_class": "agent", "rank": 371, "previous_rank": 337, "rank_delta": -34, "stars": 29398, "stars_fmt": "29.4k", "forks": 3012, "forks_fmt": "3.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 209, "commits_low_confidence": false, "score": 93.0, "description": "The Monorepo Platform that amplifies both developers and AI agents. Nx optimizes your builds, scales your CI, and fixes failed PRs automatically. Ship in half the time.", "language": "TypeScript", "open_issues": 270, "category": "Agent Frameworks", "category_rank": 27, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 7, "scorecard_checks": { "Maintained": 10, "Code-Review": 10, "CII-Best-Practices": 0, "Security-Policy": 10, "Packaging": -1, "Dangerous-Workflow": 10, "Token-Permissions": 0, "License": 10, "Signed-Releases": -1, "Branch-Protection": 8, "Binary-Artifacts": 7, "Pinned-Dependencies": 7, "SAST": 7, "Fuzzing": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:06Z", "slug": "nx", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "https://nx.dev", "homepage_icon": "/site-icons/50019c8e77b913e8.png", "homepage_icon_for": "https://nx.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/nx-plugins/SKILL.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.1, "trust_score_v2": 69.1, "rank_v2": 371, "rank_v2_delta": -53, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.5, "identity": 10.8, "transparency": 14.4, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Local Rag", "repo": "shinpr/mcp-local-rag", "display_repo": "", "url": "https://github.com/shinpr/mcp-local-rag", "listing_class": "agent", "rank": 372, "previous_rank": 367, "rank_delta": -5, "stars": 414, "stars_fmt": "414", "forks": 77, "forks_fmt": "77", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 93, "commits_low_confidence": false, "score": 73.8, "description": "Local-first RAG server for developers. Semantic + keyword search for code and technical docs. Works with MCP or CLI. Fully private, zero setup.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 223, "npm_package": "mcp-local-rag", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4580, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-09T10:10:14Z", "slug": "mcp-local-rag", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-local-rag' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-local-rag", "version": "0.21.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 69.1, "trust_score_v2": 69.1, "rank_v2": 372, "rank_v2_delta": 211, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 13.1, "maintenance": 19.7, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "zvec-grep", "repo": "zvec-ai/zvec-grep", "display_repo": "", "url": "https://github.com/zvec-ai/zvec-grep", "listing_class": "agent", "rank": 373, "previous_rank": 382, "rank_delta": 9, "stars": 4054, "stars_fmt": "4.1k", "forks": 239, "forks_fmt": "239", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 54, "commits_low_confidence": false, "score": 79.4, "description": "Local-first search across your workspace, built for humans and AI agents.", "language": "Rust", "open_issues": 33, "category": "Memory & Knowledge", "category_rank": 22, "npm_package": "@zvec/zvec-grep", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1543, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:29:00Z", "slug": "zvec-grep", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in benchmarks/swe-qa-bench/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@zvec/zvec-grep' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@zvec/zvec-grep", "version": "0.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:24Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.1, "trust_score_v2": 69.1, "rank_v2": 373, "rank_v2_delta": 115, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 12.5, "maintenance": 18.9, "adoption": 12.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "prime-agent", "repo": "PrimeIntellect-ai/prime-agent", "display_repo": "", "url": "https://github.com/PrimeIntellect-ai/prime-agent", "listing_class": "agent", "rank": 374, "previous_rank": 371, "rank_delta": -3, "stars": 21946, "stars_fmt": "21.9k", "forks": 2421, "forks_fmt": "2.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 369, "commits_low_confidence": false, "score": 91.7, "description": "A self-improving RLM agent for coding workflows and long-running autonomous tasks.", "language": "Rust", "open_issues": 20, "category": "Coding Agents", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T17:08:53Z", "slug": "prime-agent", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 69.0, "trust_score_v2": 69.0, "rank_v2": 374, "rank_v2_delta": -46, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.5, "identity": 10.8, "transparency": 14.3, "maintenance": 20.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Edinet MCP", "repo": "ajtgjmdjp/edinet-mcp", "display_repo": "", "url": "https://github.com/ajtgjmdjp/edinet-mcp", "listing_class": "agent", "rank": 375, "previous_rank": 406, "rank_delta": 31, "stars": 18, "stars_fmt": "18", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 0, "commits_low_confidence": true, "score": 36.9, "description": "EDINET XBRL parsing library and MCP server for Japanese financial data", "language": "Python", "open_issues": 6, "category": "MCP Servers", "category_rank": 224, "npm_package": "", "crate_package": "", "pypi_package": "edinet-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 123, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.068, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:01:39Z", "slug": "edinet-mcp", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'EDINET_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'edinet-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "edinet-mcp", "version": "0.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.0, "trust_score_v2": 69.0, "rank_v2": 375, "rank_v2_delta": 166, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.8, "identity": 18.0, "transparency": 13.3, "maintenance": 12.0, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Obsidian MCP Server", "repo": "cyanheads/obsidian-mcp-server", "display_repo": "", "url": "https://github.com/cyanheads/obsidian-mcp-server", "listing_class": "agent", "rank": 376, "previous_rank": 372, "rank_delta": -4, "stars": 695, "stars_fmt": "695", "forks": 105, "forks_fmt": "105", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 58, "commits_low_confidence": false, "score": 72.8, "description": "Read, write, search, and surgically edit Obsidian vault notes, tags, and frontmatter via MCP. STDIO or Streamable HTTP.", "language": "TypeScript", "open_issues": 12, "category": "MCP Servers", "category_rank": 225, "npm_package": "obsidian-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6209, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-11T21:07:14Z", "slug": "obsidian-mcp-server", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .codex-plugin/mcp.json", "Found MCP-related server path: framework-skills/design-mcp-server/SKILL.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker '22OBSIDIAN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'obsidian-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "obsidian-mcp-server", "version": "3.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:58Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.0, "trust_score_v2": 69.0, "rank_v2": 376, "rank_v2_delta": 63, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.1, "maintenance": 18.7, "adoption": 11.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Solace Agent Mesh", "repo": "SolaceLabs/solace-agent-mesh", "display_repo": "", "url": "https://github.com/SolaceLabs/solace-agent-mesh", "listing_class": "agent", "rank": 377, "previous_rank": 370, "rank_delta": -7, "stars": 4916, "stars_fmt": "4.9k", "forks": 276, "forks_fmt": "276", "last_push": "2026-09-13", "days_ago": 29, "weekly_commits": 0, "commits_low_confidence": false, "score": 54.7, "description": "An event-driven framework designed to build and orchestrate multi-agent AI systems. It enables seamless integration of AI agents with real-world data sources and systems, facilitating complex, multi-step workflows.", "language": "Python", "open_issues": 23, "category": "Multi-Agent Systems", "category_rank": 4, "npm_package": "", "crate_package": "", "pypi_package": "solace-agent-mesh", "docker_image": "", "vscode_extension": "", "weekly_downloads": 234, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.87, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:15:10Z", "slug": "solace-agent-mesh", "full_fetched_at": "2026-10-12T08:02:29Z", "source_note": "", "github_homepage": "https://solacelabs.github.io/solace-agent-mesh/", "homepage_icon": "/site-icons/2ad290050c9182c7.png", "homepage_icon_for": "https://solacelabs.github.io/solace-agent-mesh/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server test path: tests/sam-test-infrastructure/src/sam_test_infrastructure/mcp_server/__init__.py", "Found MCP-related server test path: tests/sam-test-infrastructure/src/sam_test_infrastructure/mcp_server/server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "code", "database" ], "confidence": "high", "evidence": [ "Found declared path: client/webui/frontend/src/lib/plugins/PluginRegistry.tsx", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "Found database dependency 'postgres' in pyproject.toml", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'solace-agent-mesh' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "solace-agent-mesh", "version": "1.28.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:29Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "SolaceLabs/solace-agent-mesh", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 69.0, "trust_score_v2": 69.0, "rank_v2": 377, "rank_v2_delta": -15, "trust_v2_adjustment": 0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.5, "identity": 18.0, "transparency": 11.6, "maintenance": 10.1, "adoption": 12.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Fr0ster MCP Abap Adt", "repo": "fr0ster/mcp-abap-adt", "display_repo": "", "url": "https://github.com/fr0ster/mcp-abap-adt", "listing_class": "agent", "rank": 378, "previous_rank": 380, "rank_delta": 2, "stars": 97, "stars_fmt": "97", "forks": 29, "forks_fmt": "29", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 784, "commits_low_confidence": false, "score": 68.8, "description": "MCP server for SAP BTP ABAP Cloud and On-Premise ECC/S/4HANA ABAP ADT with full CRUD, JWT/XSUAA, and service-key auth.", "language": "TypeScript", "open_issues": 16, "category": "MCP Servers", "category_rank": 226, "npm_package": "@mcp-abap-adt/core", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1884, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T08:15:40Z", "slug": "fr0ster-mcp-abap-adt", "full_fetched_at": "2026-10-12T16:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in server/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SAP_JWT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mcp-abap-adt/core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mcp-abap-adt/core", "version": "18.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:17Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.9, "trust_score_v2": 68.9, "rank_v2": 378, "rank_v2_delta": 167, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cursor History MCP", "repo": "S2thend/cursor-history-mcp", "display_repo": "", "url": "https://github.com/S2thend/cursor-history-mcp", "listing_class": "agent", "rank": 379, "previous_rank": 368, "rank_delta": -11, "stars": 32, "stars_fmt": "32", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.7, "description": "MCP server for browsing, searching, and exporting Cursor AI chat history.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 227, "npm_package": "cursor-history-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 61, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-12T00:27:15Z", "slug": "cursor-history-mcp", "full_fetched_at": "2026-10-12T00:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: specs/001-cursor-history-mcp-server/checklists/requirements.md", "Found MCP-related server path: specs/001-cursor-history-mcp-server/contracts/mcp-tools.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'cursor-history-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "cursor-history-mcp", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:02Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.9, "trust_score_v2": 68.9, "rank_v2": 379, "rank_v2_delta": 215, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.4, "identity": 18.0, "transparency": 11.8, "maintenance": 9.7, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Virgiliojr94 Book-to-Skill", "repo": "virgiliojr94/book-to-skill", "display_repo": "", "url": "https://github.com/virgiliojr94/book-to-skill", "listing_class": "skill", "rank": 34, "previous_rank": 35, "rank_delta": 1, "stars": 34637, "stars_fmt": "34.6k", "forks": 3636, "forks_fmt": "3.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 46, "commits_low_confidence": false, "score": 89.7, "description": "Turn any technical book PDF into a Claude Code skill — ready to study, reference, and use while you work.", "language": "Python", "open_issues": 7, "category": "Agent Skills", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.92, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T16:48:28Z", "slug": "virgiliojr94-book-to-skill", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.8, "trust_score_v2": 68.8, "rank_v2": 34, "rank_v2_delta": 303, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 10.8, "transparency": 14.7, "maintenance": 18.7, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Apache Maka", "repo": "apache/maka", "display_repo": "", "url": "https://github.com/apache/maka", "listing_class": "agent", "rank": 380, "previous_rank": 377, "rank_delta": -3, "stars": 5707, "stars_fmt": "5.7k", "forks": 545, "forks_fmt": "545", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 479, "commits_low_confidence": false, "score": 85.2, "description": "Apache Maka (Incubating) is a high-performance agent workspace that keeps a complete record of everything it did.", "language": "TypeScript", "open_issues": 248, "category": "Coding Agents", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 6, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:27:23Z", "slug": "apache-maka", "full_fetched_at": "2026-10-12T12:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: packages/mcp/src/__fixtures__/dual-era-stdio-server.ts", "Found MCP-related server path: packages/mcp/src/__fixtures__/form-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/desktop/src/renderer/features/client-plugins/client-plugin-root.tsx", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.8, "trust_score_v2": 68.8, "rank_v2": 380, "rank_v2_delta": 24, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 10.8, "transparency": 14.1, "maintenance": 20.0, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Brave Search MCP Server", "repo": "brave/brave-search-mcp-server", "display_repo": "", "url": "https://github.com/brave/brave-search-mcp-server", "listing_class": "agent", "rank": 381, "previous_rank": 378, "rank_delta": -3, "stars": 1493, "stars_fmt": "1.5k", "forks": 208, "forks_fmt": "208", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 5, "commits_low_confidence": true, "score": 64.1, "description": "", "language": "TypeScript", "open_issues": 23, "category": "MCP Servers", "category_rank": 228, "npm_package": "@brave/brave-search-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 22441, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T23:19:49Z", "slug": "brave-search-mcp-server", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BRAVE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@brave/brave-search-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@brave/brave-search-mcp-server", "version": "2.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:47Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.8, "trust_score_v2": 68.8, "rank_v2": 381, "rank_v2_delta": 166, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 14.1, "maintenance": 13.4, "adoption": 13.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pubmed MCP Server", "repo": "cyanheads/pubmed-mcp-server", "display_repo": "", "url": "https://github.com/cyanheads/pubmed-mcp-server", "listing_class": "agent", "rank": 382, "previous_rank": 379, "rank_delta": -3, "stars": 159, "stars_fmt": "159", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 69, "commits_low_confidence": false, "score": 67.4, "description": "Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms via MCP. STDIO or Streamable HTTP.", "language": "TypeScript", "open_issues": 21, "category": "MCP Servers", "category_rank": 229, "npm_package": "@cyanheads/pubmed-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3590, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-03T23:48:36Z", "slug": "pubmed-mcp-server", "full_fetched_at": "2026-10-12T12:02:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .codex-plugin/mcp.json", "Found MCP-related server path: framework-skills/design-mcp-server/SKILL.md", "Found MCP-related server test path: tests/mcp-server/prompts/definitions/research-plan.prompt.test.ts", "Found MCP-related server test path: tests/mcp-server/resources/definitions/database-info.resource.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'NCBI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@cyanheads/pubmed-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@cyanheads/pubmed-mcp-server", "version": "2.10.21" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:59Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.8, "trust_score_v2": 68.8, "rank_v2": 382, "rank_v2_delta": 60, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 19.2, "adoption": 10.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Capcut Cli", "repo": "renezander030/capcut-cli", "display_repo": "", "url": "https://github.com/renezander030/capcut-cli", "listing_class": "skill", "rank": 35, "previous_rank": 34, "rank_delta": -1, "stars": 876, "stars_fmt": "876", "forks": 91, "forks_fmt": "91", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 25, "commits_low_confidence": false, "score": 69.3, "description": "Independent, unofficial CLI to edit CapCut and JianYing (剪映) projects — subtitles, timing, speed, volume, templates, cut long-form to shorts. No API needed, reads draft_content.json and draft_info.json (剪映草稿) directly. Not affiliated with ByteDance.", "language": "JavaScript", "open_issues": 5, "category": "Agent Skills", "category_rank": 35, "npm_package": "capcut-cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3625, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:11:55Z", "slug": "capcut-cli", "full_fetched_at": "2026-10-12T00:02:01Z", "source_note": "", "github_homepage": "https://renezander.com/projects/capcut-cli", "homepage_icon": "/site-icons/19ccb87b90e675e6.png", "homepage_icon_for": "https://renezander.com/projects/capcut-cli", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'capcut-cli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "capcut-cli", "version": "0.29.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:01Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.8, "trust_score_v2": 68.8, "rank_v2": 35, "rank_v2_delta": 499, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.8, "maintenance": 17.6, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agrobr MCP", "repo": "bruno-portfolio/agrobr-mcp", "display_repo": "", "url": "https://github.com/bruno-portfolio/agrobr-mcp", "listing_class": "agent", "rank": 383, "previous_rank": 376, "rank_delta": -7, "stars": 28, "stars_fmt": "28", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 2, "commits_low_confidence": true, "score": 44.1, "description": "MCP server for Brazilian agricultural data via agrobr — prices, crops, trade, climate, deforestation and fires from CEPEA, CONAB, IBGE, B3, INPE and more", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 230, "npm_package": "", "crate_package": "", "pypi_package": "agrobr-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 149, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.5, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T02:20:32Z", "slug": "agrobr-mcp", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'agrobr-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agrobr-mcp", "version": "0.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:47Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.8, "trust_score_v2": 68.8, "rank_v2": 383, "rank_v2_delta": 216, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.2, "identity": 18.0, "transparency": 11.4, "maintenance": 12.8, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Context Forge", "repo": "IBM/mcp-context-forge", "display_repo": "", "url": "https://github.com/IBM/mcp-context-forge", "listing_class": "agent", "rank": 384, "previous_rank": 391, "rank_delta": 7, "stars": 4603, "stars_fmt": "4.6k", "forks": 920, "forks_fmt": "920", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 98, "commits_low_confidence": false, "score": 85.7, "description": "An AI Gateway, registry, and proxy that sits in front of any MCP, A2A, or REST/gRPC APIs, exposing a unified endpoint with centralized discovery, guardrails and management. Optimizes Agent & Tool calling, and supports plugins.", "language": "Python", "open_issues": 737, "category": "Protocols & Tool Integration", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 6, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T08:08:34Z", "slug": "mcp-context-forge", "full_fetched_at": "2026-10-12T04:02:44Z", "source_note": "", "github_homepage": "https://ibm.github.io/mcp-context-forge/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-servers/python/completion_test_server/Containerfile", "Found MCP-related server path: mcp-servers/python/completion_test_server/pyproject.toml", "Found MCP-related server docs path: docs/docs/best-practices/developing-your-mcp-server-python.md" ] }, "external_service_dependencies": { "providers": [ "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in pyproject.toml", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Found Redis dependency 'redis' in pyproject.toml", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found declared path: docs/docs/architecture/plugins/gateway-hooks.md", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities", "Found code dependency 'gitpython' in docs/requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.7, "trust_score_v2": 68.7, "rank_v2": 384, "rank_v2_delta": -58, "trust_v2_adjustment": -0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.5, "identity": 10.8, "transparency": 15.0, "maintenance": 20.0, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ponytail", "repo": "DietrichGebert/ponytail", "display_repo": "", "url": "https://github.com/DietrichGebert/ponytail", "listing_class": "agent", "rank": 385, "previous_rank": 387, "rank_delta": 2, "stars": 161667, "stars_fmt": "161.7k", "forks": 8716, "forks_fmt": "8.7k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 97, "commits_low_confidence": false, "score": 97.8, "description": "Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.", "language": "JavaScript", "open_issues": 19, "category": "Coding Agents", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T17:19:28Z", "slug": "ponytail", "full_fetched_at": "2026-10-12T04:02:28Z", "source_note": "", "github_homepage": "https://ponytail.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.7, "trust_score_v2": 68.7, "rank_v2": 385, "rank_v2_delta": -70, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.8, "maintenance": 19.8, "adoption": 12.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Upstash MCP Server", "repo": "upstash/mcp-server", "display_repo": "", "url": "https://github.com/upstash/mcp-server", "listing_class": "agent", "rank": 386, "previous_rank": 385, "rank_delta": -1, "stars": 60, "stars_fmt": "60", "forks": 14, "forks_fmt": "14", "last_push": "2026-09-01", "days_ago": 41, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.5, "description": "Upstash Model Context Server", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 231, "npm_package": "@upstash/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2075, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.797, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:50:35Z", "slug": "upstash-mcp-server", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'UPSTASH_BOX_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@upstash/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@upstash/mcp-server", "version": "0.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:32Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.7, "trust_score_v2": 68.7, "rank_v2": 386, "rank_v2_delta": 169, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.1, "identity": 18.0, "transparency": 11.6, "maintenance": 9.3, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Microsoft MCP Catalog", "repo": "microsoft/mcp", "display_repo": "", "url": "https://github.com/microsoft/mcp", "listing_class": "agent", "rank": 387, "previous_rank": 386, "rank_delta": -1, "stars": 3764, "stars_fmt": "3.8k", "forks": 643, "forks_fmt": "643", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 147, "commits_low_confidence": false, "score": 84.6, "description": "Catalog of official Microsoft MCP (Model Context Protocol) server implementations for AI-powered data access and tool integration", "language": "C#", "open_issues": 213, "category": "Protocols & Tool Integration", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:14:26Z", "slug": "microsoft-mcp-catalog", "full_fetched_at": "2026-10-12T12:02:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/ISSUE_TEMPLATE/90_mcp_server_request.yml", "Found MCP-related server path: servers/Azure.Mcp.Server/images/install_azure_mcp_server_extension.gif" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: core/Azure.Mcp.Core/tests/Azure.Mcp.Core.Tests/Extensions/HttpClientServiceCollectionExtensionsTests.cs", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.6, "trust_score_v2": 68.6, "rank_v2": 387, "rank_v2_delta": 13, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.5, "identity": 10.8, "transparency": 14.3, "maintenance": 20.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Vellum Assistant", "repo": "vellum-ai/vellum-assistant", "display_repo": "", "url": "https://github.com/vellum-ai/vellum-assistant", "listing_class": "agent", "rank": 388, "previous_rank": 374, "rank_delta": -14, "stars": 1419, "stars_fmt": "1.4k", "forks": 209, "forks_fmt": "209", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 596, "commits_low_confidence": false, "score": 79.7, "description": "An AI Assistant that’s easy to setup, does your work 24/7, knows your preferences and gets better over time.", "language": "TypeScript", "open_issues": 49, "category": "Memory & Knowledge", "category_rank": 23, "npm_package": "vellum", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2761, "dl_source": "npm", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:57:22Z", "slug": "vellum-assistant", "full_fetched_at": "2026-10-12T12:02:29Z", "source_note": "", "github_homepage": "https://vellum.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: assistant/src/plugins/mcp-servers.ts", "Found MCP-related server path: clients/web/src/domains/settings/mcp/mcp-add-server-modal.tsx", "Found MCP-related server test path: assistant/src/mcp/__tests__/plugin-server-credential-isolation.test.ts", "Found MCP-related server test path: assistant/src/plugins/__tests__/mcp-servers.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: assistant/examples/plugins/echo/README.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'vellum' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.6, "trust_score_v2": 68.6, "rank_v2": 388, "rank_v2_delta": -56, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 13.5, "maintenance": 20.0, "adoption": 12.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PraisonAI", "repo": "MervinPraison/PraisonAI", "display_repo": "", "url": "https://github.com/MervinPraison/PraisonAI", "listing_class": "agent", "rank": 389, "previous_rank": 388, "rank_delta": -1, "stars": 9229, "stars_fmt": "9.2k", "forks": 1478, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1020, "commits_low_confidence": false, "score": 88.5, "description": "PraisonAI 🦞 — Hire a 24/7 AI Workforce. Stop writing boilerplate and start shipping autonomous self-improving agents that research, plan, code, and execute tasks. Deployed in 5 lines of code with built-in memory, RAG, and support for 100+ LLMs.", "language": "Python", "open_issues": 97, "category": "Agent Frameworks", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "praisonai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4184, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.57, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-08-24T14:24:58Z", "slug": "praisonai", "full_fetched_at": "2026-10-12T08:02:06Z", "source_note": "", "github_homepage": "https://praison.ai/docs", "homepage_icon": "/site-icons/f7a5cc0342713775.png", "homepage_icon_for": "https://praison.ai/docs", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: examples/mcp/multi_server.py", "Found MCP-related server path: examples/mcp_server/README.md", "Found MCP-related server test path: src/praisonai-agents/tests/simple-mcp-server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "E2B", "Firecrawl", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/praisonai/pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in src/praisonai-ts/package.json", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in src/praisonai/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found declared path: examples/python/plugin_template/src/praisonai_example_plugin/__init__.py", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in src/praisonai/pyproject.toml", "Found search dependency 'tavily' in src/praisonai/pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'redis' in src/praisonai/pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'praisonai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "praisonai", "version": "4.7.13" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:06Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.6, "trust_score_v2": 68.6, "rank_v2": 389, "rank_v2_delta": -12, "trust_v2_adjustment": 0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 13.1, "maintenance": 20.0, "adoption": 14.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Octen MCP", "repo": "Octen-Team/octen-mcp", "display_repo": "", "url": "https://github.com/Octen-Team/octen-mcp", "listing_class": "agent", "rank": 390, "previous_rank": 383, "rank_delta": -7, "stars": 21, "stars_fmt": "21", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 5, "commits_low_confidence": true, "score": 43.6, "description": "MCP server for Octen — real-time web search, broad multi-angle search, news, URL extraction, and image/video search for Claude Code, Cursor, and any MCP client", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 232, "npm_package": "octen-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 108, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.424, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:33:20Z", "slug": "octen-mcp", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://docs.octen.ai/integrations/octen-mcp-server", "homepage_icon": "/site-icons/ae18ef9745d1b75e.png", "homepage_icon_for": "https://docs.octen.ai/integrations/octen-mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json", "Found credential/config marker 'OCTEN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'octen-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "octen-mcp", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.6, "trust_score_v2": 68.6, "rank_v2": 390, "rank_v2_delta": 156, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.7, "identity": 18.0, "transparency": 12.0, "maintenance": 13.3, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Podman MCP Server", "repo": "manusa/podman-mcp-server", "display_repo": "", "url": "https://github.com/manusa/podman-mcp-server", "listing_class": "agent", "rank": 391, "previous_rank": 384, "rank_delta": -7, "stars": 84, "stars_fmt": "84", "forks": 18, "forks_fmt": "18", "last_push": "2026-08-21", "days_ago": 52, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.3, "description": "Model Context Protocol (MCP) server for container runtimes (Podman and Docker)", "language": "Go", "open_issues": 14, "category": "MCP Servers", "category_rank": 233, "npm_package": "podman-mcp-server", "crate_package": "", "pypi_package": "podman-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 121, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": false, "signed_commits_ratio": 0.91, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:44:35Z", "slug": "podman-mcp-server", "full_fetched_at": "2026-10-11T20:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cmd/podman-mcp-server/main.go", "Found MCP-related server path: cmd/podman-mcp-server/main_test.go" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'podman-mcp-server' points to the tracked repo", "pypi package 'podman-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "podman-mcp-server", "version": "0.0.15" }, { "ecosystem": "PyPI", "name": "podman-mcp-server", "version": "0.0.15" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:56Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.6, "trust_score_v2": 68.6, "rank_v2": 391, "rank_v2_delta": 220, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.9, "identity": 18.0, "transparency": 11.8, "maintenance": 8.5, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Career Ops", "repo": "career-ops-hq/career-ops", "display_repo": "", "url": "https://github.com/career-ops-hq/career-ops", "listing_class": "skill", "rank": 36, "previous_rank": 36, "rank_delta": 0, "stars": 74153, "stars_fmt": "74.2k", "forks": 13908, "forks_fmt": "13.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 855, "commits_low_confidence": false, "score": 98.5, "description": "Open-source AI job search agent and job finder: scan job boards, score each job 1-5 against your CV before you apply, tailor an ATS-friendly resume and cover letter, get interview prep and a job application tracker. It helps you fill in each application; you press Submit. Runs locally in your AI…", "language": "JavaScript", "open_issues": 207, "category": "Agent Skills", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-11T21:02:53Z", "slug": "career-ops", "full_fetched_at": "2026-10-12T00:01:53Z", "source_note": "", "github_homepage": "https://career-ops.org", "homepage_icon": "/site-icons/597bdec601fb1ab9.png", "homepage_icon_for": "https://career-ops.org", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/generative-ai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.5, "trust_score_v2": 68.5, "rank_v2": 36, "rank_v2_delta": 249, "trust_v2_adjustment": -2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 10.8, "transparency": 14.4, "maintenance": 20.0, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Quivr", "repo": "The-Vibe-Company/quivr", "display_repo": "", "url": "https://github.com/The-Vibe-Company/quivr", "listing_class": "agent", "rank": 392, "previous_rank": 394, "rank_delta": 2, "stars": 39585, "stars_fmt": "39.6k", "forks": 3736, "forks_fmt": "3.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 533, "commits_low_confidence": false, "score": 94.2, "description": "An open-source engine that turns continuous content streams into search and monitoring. Durable ingestion, hybrid search, alerts, and plugins for formats, models and business rules.", "language": "Go", "open_issues": 10, "category": "Memory & Knowledge", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "quivr-core", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5, "dl_source": "pypi", "hn_mentions_30d": 12, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-07T02:16:40Z", "slug": "quivr", "full_fetched_at": "2026-10-12T08:02:26Z", "source_note": "", "github_homepage": "https://docs.quivr.thevibecompany.co", "homepage_icon": "/site-icons/f10135128710ffe1.png", "homepage_icon_for": "https://docs.quivr.thevibecompany.co", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'QUIVR_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: contracts/plugins/v0/README.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'quivr-core' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.5, "trust_score_v2": 68.5, "rank_v2": 392, "rank_v2_delta": -85, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 12.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "GPT Researcher", "repo": "assafelovic/gpt-researcher", "display_repo": "", "url": "https://github.com/assafelovic/gpt-researcher", "listing_class": "agent", "rank": 393, "previous_rank": 392, "rank_delta": -1, "stars": 30040, "stars_fmt": "30.0k", "forks": 4103, "forks_fmt": "4.1k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 88, "commits_low_confidence": false, "score": 92.9, "description": "An autonomous agent that conducts deep research on any data using any LLM providers", "language": "Python", "open_issues": 7, "category": "Research & Data", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "gpt-researcher", "docker_image": "", "vscode_extension": "", "weekly_downloads": 8809, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.49, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-08-18T06:03:55Z", "slug": "gpt-researcher", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "https://gptr.dev", "homepage_icon": "/site-icons/f427f9000c67a780.png", "homepage_icon_for": "https://gptr.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server/README.md", "Found MCP-related server docs path: docs/docs/gpt-researcher/mcp-server/advanced-usage.md", "Found MCP-related server docs path: docs/docs/gpt-researcher/mcp-server/claude-integration.md" ] }, "external_service_dependencies": { "providers": [ "Firecrawl", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in requirements.txt", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "search" ], "confidence": "high", "evidence": [ "Found declared path: .codex-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "Found search dependency 'tavily' in requirements.txt", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'gpt-researcher' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "gpt-researcher", "version": "0.16.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:35Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.5, "trust_score_v2": 68.5, "rank_v2": 393, "rank_v2_delta": -102, "trust_v2_adjustment": -1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 13.8, "maintenance": 19.6, "adoption": 16.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Robinhood Portfolio Research", "repo": "verygoodplugins/robinhood-mcp", "display_repo": "", "url": "https://github.com/verygoodplugins/robinhood-mcp", "listing_class": "agent", "rank": 394, "previous_rank": 381, "rank_delta": -13, "stars": 39, "stars_fmt": "39", "forks": 11, "forks_fmt": "11", "last_push": "2026-07-29", "days_ago": 75, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.2, "description": "Read-only MCP server for Robinhood portfolio research", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 234, "npm_package": "", "crate_package": "", "pypi_package": "robinhood-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 34, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.857, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:12:53Z", "slug": "robinhood-portfolio-research", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'robinhood-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "robinhood-mcp", "version": "0.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:32Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.5, "trust_score_v2": 68.5, "rank_v2": 394, "rank_v2_delta": 219, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.5, "identity": 18.0, "transparency": 13.1, "maintenance": 7.0, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Excalidraw Architect", "repo": "BV-Venky/excalidraw-architect-mcp", "display_repo": "", "url": "https://github.com/BV-Venky/excalidraw-architect-mcp", "listing_class": "agent", "rank": 395, "previous_rank": 389, "rank_delta": -6, "stars": 158, "stars_fmt": "158", "forks": 10, "forks_fmt": "10", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.5, "description": "Turn your architecture into a living, queryable knowledge graph - and render it as beautiful auto-laid-out Excalidraw diagrams. An MCP server for Cursor, Claude Code & Windsurf. Offline, no API keys.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 235, "npm_package": "", "crate_package": "", "pypi_package": "excalidraw-architect-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 457, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.417, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:33:19Z", "slug": "excalidraw-architect", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'excalidraw-architect-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "excalidraw-architect-mcp", "version": "2.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:47Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.5, "trust_score_v2": 68.5, "rank_v2": 395, "rank_v2_delta": 217, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.8, "identity": 18.0, "transparency": 12.1, "maintenance": 8.8, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Federal Compass MCP", "repo": "skivuha/federal-compass-mcp", "display_repo": "", "url": "https://github.com/skivuha/federal-compass-mcp", "listing_class": "agent", "rank": 396, "previous_rank": 390, "rank_delta": -6, "stars": 12, "stars_fmt": "12", "forks": 0, "forks_fmt": "0", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 0, "commits_low_confidence": true, "score": 31.0, "description": "Your AI compass from private sector to federal career — MCP server for USAJobs API", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 236, "npm_package": "federal-compass-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 49, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.909, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:29:56Z", "slug": "federal-compass-mcp", "full_fetched_at": "2026-10-12T00:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'USAJOBS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'federal-compass-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "federal-compass-mcp", "version": "0.1.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:11Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.5, "trust_score_v2": 68.5, "rank_v2": 396, "rank_v2_delta": 175, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.0, "identity": 18.0, "transparency": 11.9, "maintenance": 11.7, "adoption": 4.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenClaw MCP Server", "repo": "freema/openclaw-mcp", "display_repo": "", "url": "https://github.com/freema/openclaw-mcp", "listing_class": "agent", "rank": 397, "previous_rank": 397, "rank_delta": 0, "stars": 186, "stars_fmt": "186", "forks": 25, "forks_fmt": "25", "last_push": "2026-09-19", "days_ago": 23, "weekly_commits": 1, "commits_low_confidence": false, "score": 45.8, "description": "🦞 MCP server for OpenClaw - secure bridge between Claude.ai and your self-hosted OpenClaw assistant with OAuth2 authentication", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 237, "npm_package": "openclaw-mcp", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/freema/openclaw-mcp:1.7.0", "vscode_extension": "", "weekly_downloads": 296, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.284, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:59:55Z", "slug": "openclaw-mcp-server", "full_fetched_at": "2026-10-12T16:02:35Z", "source_note": "", "github_homepage": "https://www.tomasgrasl.cz/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude/openclaw/.claude-plugin/plugin.json)", "Found credential/config marker 'OPENCLAW_GATEWAY_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'openclaw-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "openclaw-mcp", "version": "1.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.5, "trust_score_v2": 68.5, "rank_v2": 397, "rank_v2_delta": 153, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 11.7, "maintenance": 11.7, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Clarifyprompt MCP", "repo": "LumabyteCo/clarifyprompt-mcp", "display_repo": "", "url": "https://github.com/LumabyteCo/clarifyprompt-mcp", "listing_class": "agent", "rank": 398, "previous_rank": 393, "rank_delta": -5, "stars": 13, "stars_fmt": "13", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 7, "commits_low_confidence": true, "score": 44.6, "description": "", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 238, "npm_package": "clarifyprompt-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 95, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:30:25Z", "slug": "clarifyprompt-mcp", "full_fetched_at": "2026-10-11T20:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'clarifyprompt-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "clarifyprompt-mcp", "version": "1.16.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:56Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.4, "trust_score_v2": 68.4, "rank_v2": 398, "rank_v2_delta": 175, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.8, "identity": 18.0, "transparency": 12.8, "maintenance": 13.4, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "GitHub MCP Server", "repo": "github/github-mcp-server", "display_repo": "", "url": "https://github.com/github/github-mcp-server", "listing_class": "agent", "rank": 399, "previous_rank": 402, "rank_delta": 3, "stars": 33551, "stars_fmt": "33.6k", "forks": 5132, "forks_fmt": "5.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 36, "commits_low_confidence": false, "score": 89.1, "description": "GitHub's official MCP Server", "language": "Go", "open_issues": 185, "category": "Protocols & Tool Integration", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.61, "scorecard_score": 7.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-07T23:00:24Z", "slug": "github-mcp-server", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: agent-plugin/mcp.json", "Found MCP-related server path: cmd/github-mcp-server/feature_flag_docs.go", "Found MCP dependency 'modelcontextprotocol' in ui/package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'GITHUB_PERSONAL_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: agent-plugin/mcp.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.3, "trust_score_v2": 68.3, "rank_v2": 399, "rank_v2_delta": -13, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 15.0, "maintenance": 18.3, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "RuView", "repo": "ruvnet/RuView", "display_repo": "", "url": "https://github.com/ruvnet/RuView", "listing_class": "skill", "rank": 37, "previous_rank": 37, "rank_delta": 0, "stars": 97531, "stars_fmt": "97.5k", "forks": 12790, "forks_fmt": "12.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 163, "commits_low_confidence": false, "score": 99.0, "description": "π RuView turns commodity WiFi signals into real-time spatial intelligence, vital sign monitoring, and presence detection — all without a single pixel of video.", "language": "Rust", "open_issues": 74, "category": "Agent Skills", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "wifi-densepose", "docker_image": "", "vscode_extension": "", "weekly_downloads": 220, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.03, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T01:58:13Z", "slug": "ruview", "full_fetched_at": "2026-10-12T00:02:03Z", "source_note": "", "github_homepage": "https://Cognitum.One/RuView", "homepage_icon": "/site-icons/2b10944b15cf5ba5.png", "homepage_icon_for": "https://Cognitum.One/RuView", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: harness/homecore/src/mcp-server.js", "Found MCP-related server path: harness/ruview/src/mcp-server.js" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in pyproject.toml", "Found Redis dependency 'redis' in pyproject.toml", "Ships a Claude Code plugin manifest (harness/ruview/mod/.claude-plugin/plugin.json)", "Found credential/config marker 'RUVIEW_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'wifi-densepose' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "wifi-densepose", "version": "1.99.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.3, "trust_score_v2": 68.3, "rank_v2": 37, "rank_v2_delta": 457, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 15.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Arxiv MCP Server", "repo": "blazickjp/arxiv-mcp-server", "display_repo": "", "url": "https://github.com/blazickjp/arxiv-mcp-server", "listing_class": "agent", "rank": 400, "previous_rank": 396, "rank_delta": -4, "stars": 3211, "stars_fmt": "3.2k", "forks": 257, "forks_fmt": "257", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 10, "commits_low_confidence": false, "score": 69.6, "description": "A local MCP server for agent literature work. Original-LaTeX section reads, BibTeX from arXiv metadata, and topic watches. Papers stay on disk. Search is optional.", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 239, "npm_package": "", "crate_package": "", "pypi_package": "arxiv-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 23597, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.95, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:30:11Z", "slug": "arxiv-mcp-server", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "https://www.pulsemcp.com/servers/blazickjp-arxiv-mcp-server", "homepage_icon": "/site-icons/5fc869f9172af77e.png", "homepage_icon_for": "https://www.pulsemcp.com/servers/blazickjp-arxiv-mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server path: skills/arxiv-mcp-server/SKILL.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'SEMANTIC_SCHOLAR_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'arxiv-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "arxiv-mcp-server", "version": "0.8.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:44Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.3, "trust_score_v2": 68.3, "rank_v2": 400, "rank_v2_delta": 162, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.3, "maintenance": 15.9, "adoption": 14.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agenta", "repo": "Agenta-AI/agenta", "display_repo": "", "url": "https://github.com/Agenta-AI/agenta", "listing_class": "agent", "rank": 401, "previous_rank": 399, "rank_delta": -2, "stars": 4828, "stars_fmt": "4.8k", "forks": 693, "forks_fmt": "693", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 3000, "commits_low_confidence": false, "score": 85.3, "description": "Agenta is a workspace where you and your team build agents and automations.", "language": "TypeScript", "open_issues": 280, "category": "Observability & Evaluation", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "agenta", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2297, "dl_source": "pypi", "hn_mentions_30d": 2405, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.27, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 9, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-07-19T14:49:42Z", "slug": "agenta", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "http://www.agenta.ai", "homepage_icon": "/site-icons/e077bc89f231e394.png", "homepage_icon_for": "http://www.agenta.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: api/oss/src/resources/agent_templates/packages/outbound-prospecting/1.0.0/mcp.json", "Found MCP-related server path: api/oss/src/resources/agent_templates/packages/outbound-prospecting/1.0.1/mcp.json", "Found MCP-related server test path: api/oss/tests/pytest/unit/agent_templates/fixtures/current/mcp.json", "Found MCP-related server test path: api/oss/tests/pytest/unit/agent_templates/fixtures/future/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in api/pyproject.toml", "Found Google Gemini dependency 'google-cloud-aiplatform' in services/pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in api/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in services/pyproject.toml", "Found Postgres dependency 'asyncpg' in api/pyproject.toml", "Found Redis dependency 'redis' in api/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found marketplace path: openspec/changes/create-share-load-templates/specs/website-marketplace/spec.md", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'redis' in api/pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'agenta' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agenta", "version": "0.122.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:13Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 68.2, "trust_score_v2": 68.2, "rank_v2": 401, "rank_v2_delta": -33, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 14.2, "maintenance": 20.0, "adoption": 13.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -1.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Streamdeck MCP", "repo": "verygoodplugins/streamdeck-mcp", "display_repo": "", "url": "https://github.com/verygoodplugins/streamdeck-mcp", "listing_class": "agent", "rank": 402, "previous_rank": 400, "rank_delta": -2, "stars": 51, "stars_fmt": "51", "forks": 13, "forks_fmt": "13", "last_push": "2026-08-12", "days_ago": 61, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.3, "description": "MCP server for Elgato Stream Deck control — set buttons, manage pages, wire actions", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 240, "npm_package": "", "crate_package": "", "pypi_package": "streamdeck-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 130, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.788, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:41:47Z", "slug": "streamdeck-mcp", "full_fetched_at": "2026-10-12T00:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: streamdeck_plugin/__init__.py", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'streamdeck-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "streamdeck-mcp", "version": "0.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:34Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.1, "trust_score_v2": 68.1, "rank_v2": 402, "rank_v2_delta": 218, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.2, "identity": 18.0, "transparency": 12.4, "maintenance": 7.9, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Proxmox", "repo": "antonio-mello-ai/mcp-proxmox", "display_repo": "", "url": "https://github.com/antonio-mello-ai/mcp-proxmox", "listing_class": "agent", "rank": 403, "previous_rank": 435, "rank_delta": 32, "stars": 16, "stars_fmt": "16", "forks": 6, "forks_fmt": "6", "last_push": "2026-09-21", "days_ago": 21, "weekly_commits": 6, "commits_low_confidence": false, "score": 43.9, "description": "MCP server for managing Proxmox VE clusters through AI assistants", "language": "Python", "open_issues": 6, "category": "MCP Servers", "category_rank": 241, "npm_package": "", "crate_package": "", "pypi_package": "mcp-proxmox", "docker_image": "", "vscode_extension": "", "weekly_downloads": 161, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.214, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:09:53Z", "slug": "mcp-proxmox", "full_fetched_at": "2026-10-12T08:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-proxmox' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-proxmox", "version": "1.2.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:43Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.1, "trust_score_v2": 68.1, "rank_v2": 403, "rank_v2_delta": 224, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 18.0, "transparency": 11.4, "maintenance": 14.0, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Keboola MCP Server", "repo": "keboola/mcp-server", "display_repo": "", "url": "https://github.com/keboola/mcp-server", "listing_class": "agent", "rank": 404, "previous_rank": 431, "rank_delta": 27, "stars": 85, "stars_fmt": "85", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 162, "commits_low_confidence": false, "score": 68.1, "description": "Model Context Protocol (MCP) Server for the Keboola Platform", "language": "Python", "open_issues": 18, "category": "MCP Servers", "category_rank": 242, "npm_package": "", "crate_package": "", "pypi_package": "keboola-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 546, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.62, "scorecard_score": 7.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:49:12Z", "slug": "keboola-mcp-server", "full_fetched_at": "2026-10-12T16:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: integtests/test_mcp_server.py", "Found MCP-related server path: mcp-server-notes.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'asyncpg' in pyproject.toml", "Found credential/config marker 'KBC_STORAGE_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'keboola-mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.0, "trust_score_v2": 68.0, "rank_v2": 404, "rank_v2_delta": 3, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 15.1, "maintenance": 20.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Grafana MCP Server", "repo": "grafana/mcp-grafana", "display_repo": "", "url": "https://github.com/grafana/mcp-grafana", "listing_class": "agent", "rank": 405, "previous_rank": 412, "rank_delta": 7, "stars": 3554, "stars_fmt": "3.6k", "forks": 461, "forks_fmt": "461", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 86, "commits_low_confidence": false, "score": 82.9, "description": "MCP server for Grafana", "language": "Go", "open_issues": 56, "category": "MCP Servers", "category_rank": 243, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-09-30T23:01:48Z", "slug": "grafana-mcp-server", "full_fetched_at": "2026-10-12T04:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in ui/mcp-apps/package.json", "Found MCP dependency 'modelcontextprotocol' in ui/panel-viewer/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'GRAFANA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/install-binary.mjs", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 68.0, "trust_score_v2": 68.0, "rank_v2": 405, "rank_v2_delta": -26, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.1, "identity": 10.8, "transparency": 14.7, "maintenance": 19.7, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Specification", "repo": "modelcontextprotocol/modelcontextprotocol", "display_repo": "", "url": "https://github.com/modelcontextprotocol/modelcontextprotocol", "listing_class": "agent", "rank": 406, "previous_rank": 403, "rank_delta": -3, "stars": 9435, "stars_fmt": "9.4k", "forks": 1863, "forks_fmt": "1.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 68, "commits_low_confidence": false, "score": 86.9, "description": "Specification and documentation for the Model Context Protocol", "language": "TypeScript", "open_issues": 60, "category": "Protocols & Tool Integration", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.69, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-06T11:53:26Z", "slug": "mcp-specification", "full_fetched_at": "2026-10-12T08:01:58Z", "source_note": "", "github_homepage": "https://modelcontextprotocol.io", "homepage_icon": "/site-icons/4167a655a0a7f1dc.png", "homepage_icon_for": "https://modelcontextprotocol.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: seps/2127-mcp-server-cards.md", "Found MCP-related server docs path: docs/images/java/java-mcp-server-architecture.jpg", "Found MCP-related server docs path: docs/seps/2127-mcp-server-cards.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/mcp-spec/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "Found code dependency '@octokit' in tools/sep-automation/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 68.0, "trust_score_v2": 68.0, "rank_v2": 406, "rank_v2_delta": 16, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 14.6, "maintenance": 19.3, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Last30Days Skill", "repo": "mvanhorn/last30days-skill", "display_repo": "", "url": "https://github.com/mvanhorn/last30days-skill", "listing_class": "skill", "rank": 38, "previous_rank": 38, "rank_delta": 0, "stars": 64059, "stars_fmt": "64.1k", "forks": 5585, "forks_fmt": "5.6k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 133, "commits_low_confidence": false, "score": 96.2, "description": "AI agent skill that researches any topic across Reddit, X, YouTube, HN, Polymarket, and the web - then synthesizes a grounded summary", "language": "Python", "open_issues": 10, "category": "Agent Skills", "category_rank": 38, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6, "scorecard_checks": { "Code-Review": 3, "Packaging": -1, "Maintained": 10, "Token-Permissions": -1, "Dangerous-Workflow": -1, "Binary-Artifacts": 10, "Pinned-Dependencies": -1, "CII-Best-Practices": 0, "Dependency-Update-Tool": 10, "Security-Policy": 0, "Vulnerabilities": 9, "Fuzzing": 0, "License": 10, "SAST": 10, "Branch-Protection": 3, "Signed-Releases": 0, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-11T20:03:59Z", "slug": "last30days-skill", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found xAI Grok credential/config marker 'XAI_API_KEY'", "README/docs also mention xAI Grok", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.0, "trust_score_v2": 68.0, "rank_v2": 38, "rank_v2_delta": 320, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 19.9, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agency Swarm", "repo": "VRSEN/agency-swarm", "display_repo": "", "url": "https://github.com/VRSEN/agency-swarm", "listing_class": "agent", "rank": 407, "previous_rank": 404, "rank_delta": -3, "stars": 4599, "stars_fmt": "4.6k", "forks": 1060, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 79, "commits_low_confidence": false, "score": 84.8, "description": "Reliable Multi-Agent Orchestration Framework", "language": "Python", "open_issues": 3, "category": "Multi-Agent Systems", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "agency-swarm", "docker_image": "", "vscode_extension": "", "weekly_downloads": 817, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.7, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:08:28Z", "slug": "agency-swarm", "full_fetched_at": "2026-10-12T12:02:23Z", "source_note": "", "github_homepage": "https://agency-swarm.ai/", "homepage_icon": "/site-icons/33f6f17f679909c2.png", "homepage_icon_for": "https://agency-swarm.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/mcp_servers.py", "Found MCP-related server path: examples/utils/sse_mcp_server.py", "Found MCP-related server test path: tests/integration/mcp/test_mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "medium", "evidence": [ "Found marketplace path: docs/platform/marketplace/onboarding.mdx" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'agency-swarm' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agency-swarm", "version": "1.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:23Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 68.0, "trust_score_v2": 68.0, "rank_v2": 407, "rank_v2_delta": 112, "trust_v2_adjustment": 3.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 12.3, "maintenance": 19.6, "adoption": 12.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -1.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Astrid", "repo": "astrid-runtime/astrid", "display_repo": "", "url": "https://github.com/astrid-runtime/astrid", "listing_class": "agent", "rank": 408, "previous_rank": 411, "rank_delta": 3, "stars": 10281, "stars_fmt": "10.3k", "forks": 142, "forks_fmt": "142", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 83, "commits_low_confidence": false, "score": 83.1, "description": "Astrid is a portable, capability-secure operating system for composable software.", "language": "Rust", "open_issues": 201, "category": "Agent Frameworks", "category_rank": 29, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-11T10:40:08Z", "slug": "astrid", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: crates/astrid-cli/src/commands/mcp/server.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'WEATHER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.9, "trust_score_v2": 67.9, "rank_v2": 408, "rank_v2_delta": -77, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.1, "identity": 10.8, "transparency": 14.7, "maintenance": 19.7, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mapbox MCP Server", "repo": "mapbox/mcp-server", "display_repo": "", "url": "https://github.com/mapbox/mcp-server", "listing_class": "agent", "rank": 409, "previous_rank": 407, "rank_delta": -2, "stars": 361, "stars_fmt": "361", "forks": 44, "forks_fmt": "44", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 11, "commits_low_confidence": false, "score": 61.6, "description": "Mapbox Model Context Protocol (MCP) server", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 244, "npm_package": "@mapbox/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2780, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:22:56Z", "slug": "mapbox-mcp-server", "full_fetched_at": "2026-10-11T20:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/mapbox_mcp_server.gif", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MAPBOX_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mapbox/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mapbox/mcp-server", "version": "0.15.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:54Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.9, "trust_score_v2": 67.9, "rank_v2": 409, "rank_v2_delta": 183, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 10.8, "transparency": 13.2, "maintenance": 16.3, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Whoop MCP", "repo": "shashankswe2020-ux/whoop-mcp", "display_repo": "", "url": "https://github.com/shashankswe2020-ux/whoop-mcp", "listing_class": "agent", "rank": 410, "previous_rank": 408, "rank_delta": -2, "stars": 165, "stars_fmt": "165", "forks": 68, "forks_fmt": "68", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 90, "commits_low_confidence": false, "score": 71.2, "description": "Read-only WHOOP MCP server for recovery, sleep, HRV, strain, workouts, and personal health analytics in Claude, Codex, and GitHub Copilot.", "language": "TypeScript", "open_issues": 17, "category": "MCP Servers", "category_rank": 245, "npm_package": "whoop-ai-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 722, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-07T23:00:37Z", "slug": "whoop-mcp", "full_fetched_at": "2026-10-12T00:02:16Z", "source_note": "", "github_homepage": "https://whoopconnector.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/ideas/whoop-mcp-server.md", "Found MCP-related server docs path: docs/plans/task-6-mcp-server-shell.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'whoop-ai-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "whoop-ai-mcp", "version": "0.9.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:16Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.9, "trust_score_v2": 67.9, "rank_v2": 410, "rank_v2_delta": 224, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 13.2, "maintenance": 19.8, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Fiscal Brasil", "repo": "DeHor-Labs/mcp-fiscal-brasil", "display_repo": "", "url": "https://github.com/DeHor-Labs/mcp-fiscal-brasil", "listing_class": "agent", "rank": 411, "previous_rank": 405, "rank_delta": -6, "stars": 319, "stars_fmt": "319", "forks": 70, "forks_fmt": "70", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 9, "commits_low_confidence": true, "score": 61.0, "description": "Servidor MCP fiscal brasileiro: CNPJ, NF-e, NFS-e, CT-e, SPED, eSocial, Simples Nacional, Reforma 2026. 44 tools, zero-cadastro, tabelas offline. Python.", "language": "Python", "open_issues": 9, "category": "MCP Servers", "category_rank": 246, "npm_package": "", "crate_package": "", "pypi_package": "mcp-fiscal-brasil", "docker_image": "", "vscode_extension": "", "weekly_downloads": 141, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.98, "scorecard_score": 7.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:53:10Z", "slug": "mcp-fiscal-brasil", "full_fetched_at": "2026-10-12T12:03:01Z", "source_note": "", "github_homepage": "https://dehor-labs.github.io/mcp-fiscal-brasil/", "homepage_icon": "/site-icons/a67c273f58d16d53.png", "homepage_icon_for": "https://dehor-labs.github.io/mcp-fiscal-brasil/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CPFCNPJ_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-fiscal-brasil' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-fiscal-brasil", "version": "0.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:01Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.8, "trust_score_v2": 67.8, "rank_v2": 411, "rank_v2_delta": 186, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 10.8, "transparency": 14.9, "maintenance": 13.9, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "1Panel", "repo": "1Panel-dev/1Panel", "display_repo": "", "url": "https://github.com/1Panel-dev/1Panel", "listing_class": "agent", "rank": 412, "previous_rank": 415, "rank_delta": 3, "stars": 37152, "stars_fmt": "37.2k", "forks": 3375, "forks_fmt": "3.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 88, "commits_low_confidence": false, "score": 93.1, "description": "🔥 1Panel is a modern, open-source Linux server management panel and a lightweight AI management platform.", "language": "Go", "open_issues": 361, "category": "Agent Frameworks", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.3, "scorecard_checks": { "Packaging": -1, "Dangerous-Workflow": 10, "Maintained": 10, "Code-Review": 9, "Security-Policy": 10, "Token-Permissions": 0, "CII-Best-Practices": 0, "Fuzzing": 0, "Binary-Artifacts": 10, "License": 10, "Pinned-Dependencies": 3, "Branch-Protection": -1, "Signed-Releases": -1, "SAST": 0 }, "scorecard_scanned_at": "2026-10-12T00:06:07Z", "slug": "1panel", "full_fetched_at": "2026-10-12T00:02:20Z", "source_note": "", "github_homepage": "https://1panel.pro", "homepage_icon": "/site-icons/82a4f460910b9675.png", "homepage_icon_for": "https://1panel.pro", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: agent/app/api/v2/mcp_server.go", "Found MCP-related server path: agent/app/dto/request/mcp_server.go" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: frontend/src/extensions/footer-setting.ts", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 67.8, "trust_score_v2": 67.8, "rank_v2": 412, "rank_v2_delta": -58, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 10.8, "transparency": 13.9, "maintenance": 19.8, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Sitecore Server", "repo": "Antonytm/mcp-sitecore-server", "display_repo": "", "url": "https://github.com/Antonytm/mcp-sitecore-server", "listing_class": "agent", "rank": 413, "previous_rank": 410, "rank_delta": -3, "stars": 52, "stars_fmt": "52", "forks": 19, "forks_fmt": "19", "last_push": "2026-09-17", "days_ago": 25, "weekly_commits": 2, "commits_low_confidence": false, "score": 43.8, "description": "Model Context Protocol server for Sitecore", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 247, "npm_package": "@antonytm/mcp-sitecore-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 195, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-09-28T10:50:03Z", "slug": "mcp-sitecore-server", "full_fetched_at": "2026-10-12T12:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GRAPHQL_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@antonytm/mcp-sitecore-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@antonytm/mcp-sitecore-server", "version": "2.0.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:42Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.8, "trust_score_v2": 67.8, "rank_v2": 413, "rank_v2_delta": 187, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.5, "identity": 18.0, "transparency": 11.9, "maintenance": 12.2, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Registry", "repo": "modelcontextprotocol/registry", "display_repo": "", "url": "https://github.com/modelcontextprotocol/registry", "listing_class": "agent", "rank": 414, "previous_rank": 413, "rank_delta": -1, "stars": 7342, "stars_fmt": "7.3k", "forks": 1028, "forks_fmt": "1.0k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 18, "commits_low_confidence": false, "score": 78.1, "description": "A community driven registry service for Model Context Protocol (MCP) servers.", "language": "Go", "open_issues": 127, "category": "Protocols & Tool Integration", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 6, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-02T13:48:36Z", "slug": "mcp-registry", "full_fetched_at": "2026-10-12T08:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 67.7, "trust_score_v2": 67.7, "rank_v2": 414, "rank_v2_delta": 2, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.6, "identity": 10.8, "transparency": 15.0, "maintenance": 17.0, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Power Platform Skills", "repo": "microsoft/power-platform-skills", "display_repo": "", "url": "https://github.com/microsoft/power-platform-skills", "listing_class": "skill", "rank": 39, "previous_rank": 39, "rank_delta": 0, "stars": 997, "stars_fmt": "997", "forks": 203, "forks_fmt": "203", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 61, "commits_low_confidence": false, "score": 76.1, "description": "A plugin marketplace for GitHub Copilot and other AI agents that provides Power Platform development plugins, including reusable skills, agents, and commands for building and deploying solutions.", "language": "JavaScript", "open_issues": 125, "category": "Agent Skills", "category_rank": 39, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T21:02:26Z", "slug": "power-platform-skills", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://aka.ms/ppskills", "homepage_icon": "/site-icons/f32e12cc8e0875ff.png", "homepage_icon_for": "https://aka.ms/ppskills", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/process-intelligence/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in plugins/process-intelligence/package.json", "Found MCP dependency 'modelcontextprotocol' in plugins/mcp-apps/scripts/_vendor-build/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/canvas-apps/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.7, "trust_score_v2": 67.7, "rank_v2": 39, "rank_v2_delta": 409, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.1, "identity": 10.8, "transparency": 14.7, "maintenance": 19.2, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tavily MCP", "repo": "tavily-ai/tavily-mcp", "display_repo": "", "url": "https://github.com/tavily-ai/tavily-mcp", "listing_class": "agent", "rank": 415, "previous_rank": 414, "rank_delta": -1, "stars": 2429, "stars_fmt": "2.4k", "forks": 301, "forks_fmt": "301", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 5, "commits_low_confidence": true, "score": 65.7, "description": "Production ready MCP server with real-time search, extract, map & crawl.", "language": "TypeScript", "open_issues": 38, "category": "MCP Servers", "category_rank": 248, "npm_package": "tavily-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 19683, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.62, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:19:00Z", "slug": "tavily-mcp", "full_fetched_at": "2026-10-12T08:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'tavily-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "tavily-mcp", "version": "0.2.22" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:32Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.7, "trust_score_v2": 67.7, "rank_v2": 415, "rank_v2_delta": 190, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 13.9, "maintenance": 13.1, "adoption": 13.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenHuman", "repo": "tinyhumansai/openhuman", "display_repo": "", "url": "https://github.com/tinyhumansai/openhuman", "listing_class": "agent", "rank": 416, "previous_rank": 395, "rank_delta": -21, "stars": 41894, "stars_fmt": "41.9k", "forks": 4122, "forks_fmt": "4.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 18620, "commits_low_confidence": false, "score": 94.5, "description": "The fastest, cheapest, most efficient open-source agent harness. Run more than 500 agents on a $10 VPS.", "language": "Rust", "open_issues": 290, "category": "Agent Frameworks", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1, "dl_source": "crates.io", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:22:17Z", "slug": "openhuman", "full_fetched_at": "2026-10-12T08:02:36Z", "source_note": "", "github_homepage": "https://tinyhumans.ai/openhuman", "homepage_icon": "/site-icons/8a81358d917eac97.png", "homepage_icon_for": "https://tinyhumans.ai/openhuman", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .claude/mcp.json", "Found MCP-related server path: app/src/components/channels/mcp/InstalledServerDetail.tsx", "Found MCP-related server test path: app/src/components/channels/mcp/InstalledServerDetail.enabledToggle.test.tsx", "Found MCP-related server test path: app/src/components/channels/mcp/InstalledServerDetail.test.tsx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 67.7, "trust_score_v2": 67.7, "rank_v2": 416, "rank_v2_delta": -35, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.4, "maintenance": 20.0, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Ts Core", "repo": "cyanheads/mcp-ts-core", "display_repo": "", "url": "https://github.com/cyanheads/mcp-ts-core", "listing_class": "agent", "rank": 417, "previous_rank": 416, "rank_delta": -1, "stars": 152, "stars_fmt": "152", "forks": 31, "forks_fmt": "31", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 255, "commits_low_confidence": false, "score": 70.1, "description": "Agent-native TypeScript framework for building MCP servers.", "language": "TypeScript", "open_issues": 184, "category": "MCP Servers", "category_rank": 249, "npm_package": "@cyanheads/mcp-ts-core", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 15734, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T17:15:55Z", "slug": "mcp-ts-core", "full_fetched_at": "2026-10-12T12:02:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/mcp-server/prompts/definitions/code-review.prompt.ts", "Found MCP-related server path: examples/mcp-server/prompts/definitions/index.ts", "Found MCP-related server test path: tests/unit/mcp-server/apps/appBuilders.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "OpenRouter", "Supabase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found Supabase dependency 'supabase' in package.json", "README/docs also mention Supabase", "Ships a Claude Code plugin manifest (templates/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: docs/mcp-specification/2025-11-25/extensions/apps-build.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@cyanheads/mcp-ts-core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@cyanheads/mcp-ts-core", "version": "0.13.15" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:59Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.7, "trust_score_v2": 67.7, "rank_v2": 417, "rank_v2_delta": 82, "trust_v2_adjustment": 2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 12.4, "maintenance": 20.0, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Open Library", "repo": "8enSmith/mcp-open-library", "display_repo": "", "url": "https://github.com/8enSmith/mcp-open-library", "listing_class": "agent", "rank": 418, "previous_rank": 409, "rank_delta": -9, "stars": 95, "stars_fmt": "95", "forks": 25, "forks_fmt": "25", "last_push": "2026-09-03", "days_ago": 39, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.2, "description": "A Model Context Protocol (MCP) server for the Internet Archive's Open Library API that enables AI assistants to search for book and author information.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 250, "npm_package": "mcp-open-library", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 135, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-26T00:40:14Z", "slug": "mcp-open-library", "full_fetched_at": "2026-10-12T08:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_PROXY_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-open-library' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-open-library", "version": "1.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:23Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.7, "trust_score_v2": 67.7, "rank_v2": 418, "rank_v2_delta": 189, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.6, "identity": 18.0, "transparency": 12.1, "maintenance": 9.4, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bub", "repo": "bubbuild/bub", "display_repo": "", "url": "https://github.com/bubbuild/bub", "listing_class": "agent", "rank": 419, "previous_rank": 1201, "rank_delta": 782, "stars": 1686, "stars_fmt": "1.7k", "forks": 167, "forks_fmt": "167", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 48, "commits_low_confidence": false, "score": 75.8, "description": "Bub it. Build it. A tiny agent runtime, composable with plugins.", "language": "Python", "open_issues": 1, "category": "Agent Frameworks", "category_rank": 32, "npm_package": "", "crate_package": "", "pypi_package": "bub", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5380, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.89, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:09:04Z", "slug": "bub", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "https://bub.build/", "homepage_icon": "/site-icons/4b36f77b79b60288.png", "homepage_icon_for": "https://bub.build/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found credential/config marker 'BUB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'bub' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "bub", "version": "0.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.6, "trust_score_v2": 67.6, "rank_v2": 419, "rank_v2_delta": 91, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 12.3, "maintenance": 18.7, "adoption": 12.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Unreal Engine API Documentation", "repo": "Codeturion/unreal-api-mcp", "display_repo": "", "url": "https://github.com/Codeturion/unreal-api-mcp", "listing_class": "agent", "rank": 420, "previous_rank": 641, "rank_delta": 221, "stars": 96, "stars_fmt": "96", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2, "commits_low_confidence": true, "score": 48.1, "description": "Instant, accurate Unreal Engine API lookups instead of expensive source file reads, saving your agent tokens, context, and hallucinations.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 251, "npm_package": "", "crate_package": "", "pypi_package": "unreal-api-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 126, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.055, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T18:05:26Z", "slug": "unreal-engine-api-documentation", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "https://www.fuatcankoseoglu.com/", "homepage_icon": "/site-icons/a578ee1fa97166d9.png", "homepage_icon_for": "https://www.fuatcankoseoglu.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'unreal-api-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "unreal-api-mcp", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:05Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.6, "trust_score_v2": 67.6, "rank_v2": 420, "rank_v2_delta": 224, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 18.0, "transparency": 11.2, "maintenance": 13.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Kilo Code", "repo": "Kilo-Org/kilocode", "display_repo": "", "url": "https://github.com/Kilo-Org/kilocode", "listing_class": "agent", "rank": 421, "previous_rank": 423, "rank_delta": 2, "stars": 27579, "stars_fmt": "27.6k", "forks": 3252, "forks_fmt": "3.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1833, "commits_low_confidence": false, "score": 92.9, "description": "Kilo is the all-in-one agentic engineering platform. Build, ship, and iterate faster with the most popular open source coding agent.", "language": "TypeScript", "open_issues": 453, "category": "Coding Agents", "category_rank": 24, "npm_package": "kilocode", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 87, "dl_source": "npm", "hn_mentions_30d": 10, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T19:16:25Z", "slug": "kilo-code", "full_fetched_at": "2026-10-12T08:02:09Z", "source_note": "", "github_homepage": "https://kilo.ai/", "homepage_icon": "/site-icons/43c2fe6c8dd943a3.png", "homepage_icon_for": "https://kilo.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/kilo-docs/.kilocode/mcp.json", "Found MCP-related server path: packages/kilo-docs/pages/automate/mcp/server-transports.md", "Found MCP-related server docs path: packages/kilo-vscode/docs/agent-behaviour/mcp-server-creation.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .opencode/plugins/smoke-theme.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'kilocode' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "kilocode", "version": "1.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:09Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.5, "trust_score_v2": 67.5, "rank_v2": 421, "rank_v2_delta": 34, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 13.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Plugins Official", "repo": "anthropics/claude-plugins-official", "display_repo": "", "url": "https://github.com/anthropics/claude-plugins-official", "listing_class": "skill", "rank": 40, "previous_rank": 40, "rank_delta": 0, "stars": 37724, "stars_fmt": "37.7k", "forks": 4248, "forks_fmt": "4.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 328, "commits_low_confidence": false, "score": 94.4, "description": "Official, Anthropic-managed directory of high quality Claude Code Plugins.", "language": "Python", "open_issues": 1051, "category": "Agent Skills", "category_rank": 40, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:07:27Z", "slug": "claude-plugins-official", "full_fetched_at": "2026-10-12T08:02:43Z", "source_note": "", "github_homepage": "https://code.claude.com/docs/en/plugins", "homepage_icon": "/site-icons/48ea4ae3668159b2.png", "homepage_icon_for": "https://code.claude.com/docs/en/plugins", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/claude-code-setup/skills/claude-automation-recommender/references/mcp-servers.md", "Found MCP-related server path: plugins/mcp-server-dev/.claude-plugin/plugin.json", "Found MCP dependency '@modelcontextprotocol/sdk' in external_plugins/discord/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (external_plugins/asana/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.5, "trust_score_v2": 67.5, "rank_v2": 40, "rank_v2_delta": 413, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "nWave", "repo": "nWave-ai/nWave", "display_repo": "", "url": "https://github.com/nWave-ai/nWave", "listing_class": "skill", "rank": 41, "previous_rank": 41, "rank_delta": 0, "stars": 616, "stars_fmt": "616", "forks": 65, "forks_fmt": "65", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 1, "commits_low_confidence": false, "score": 50.4, "description": "AI agents that guide you from idea to working code, with you in control at every step.", "language": "Python", "open_issues": 23, "category": "Agent Skills", "category_rank": 41, "npm_package": "", "crate_package": "", "pypi_package": "nwave-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 98, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.11, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:11:52Z", "slug": "nwave", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://nwave.ai", "homepage_icon": "/site-icons/2d82cc4a56667325.png", "homepage_icon_for": "https://nwave.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/nw/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found shell dependency 'subprocess' in docs/guides/tutorial-debugging/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'nwave-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "nwave-ai", "version": "3.22.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.5, "trust_score_v2": 67.5, "rank_v2": 41, "rank_v2_delta": 495, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 18.0, "transparency": 12.0, "maintenance": 11.5, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Sfcc Dev MCP", "repo": "taurgis/sfcc-dev-mcp", "display_repo": "", "url": "https://github.com/taurgis/sfcc-dev-mcp", "listing_class": "agent", "rank": 422, "previous_rank": 398, "rank_delta": -24, "stars": 28, "stars_fmt": "28", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 0, "commits_low_confidence": true, "score": 38.5, "description": "Supercharge your Salesforce B2C Commerce Cloud development with AI-powered documentation access, real-time log analysis, and intelligent best practices guidance", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 252, "npm_package": "sfcc-dev-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 401, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:21:46Z", "slug": "sfcc-dev-mcp", "full_fetched_at": "2026-10-12T00:02:23Z", "source_note": "", "github_homepage": "http://sfcc-mcp-dev.rhino-inquisitor.com/", "homepage_icon": "/site-icons/b024635386064202.png", "homepage_icon_for": "http://sfcc-mcp-dev.rhino-inquisitor.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/mcp/node/server-stdio-integration.docs-only.programmatic.test.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'sfcc-dev-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "sfcc-dev-mcp", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:23Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.5, "trust_score_v2": 67.5, "rank_v2": 422, "rank_v2_delta": 227, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 18.0, "transparency": 11.6, "maintenance": 11.9, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Thesvg", "repo": "glincker/thesvg", "display_repo": "", "url": "https://github.com/glincker/thesvg", "listing_class": "skill", "rank": 42, "previous_rank": 43, "rank_delta": 1, "stars": 2829, "stars_fmt": "2.8k", "forks": 224, "forks_fmt": "224", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 167, "commits_low_confidence": false, "score": 81.6, "description": "7,400+ brand SVG icons for developers. Tree-shakeable, typed, open source. npm i thesvg", "language": "TypeScript", "open_issues": 7, "category": "Agent Skills", "category_rank": 42, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:28:59Z", "slug": "thesvg", "full_fetched_at": "2026-10-12T16:02:09Z", "source_note": "", "github_homepage": "https://thesvg.org/", "homepage_icon": "/site-icons/71a1ec0b19812495.png", "homepage_icon_for": "https://thesvg.org/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: extensions/alfred/.gitignore", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.4, "trust_score_v2": 67.4, "rank_v2": 42, "rank_v2_delta": 405, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cherry Studio", "repo": "CherryHQ/cherry-studio", "display_repo": "", "url": "https://github.com/CherryHQ/cherry-studio", "listing_class": "agent", "rank": 423, "previous_rank": 418, "rank_delta": -5, "stars": 52569, "stars_fmt": "52.6k", "forks": 5065, "forks_fmt": "5.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 496, "commits_low_confidence": false, "score": 95.5, "description": "AI productivity studio with smart chat, autonomous agents, and 300+ assistants. Unified access to frontier LLMs", "language": "TypeScript", "open_issues": 1143, "category": "UI & App Builders", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:42:02Z", "slug": "cherry-studio", "full_fetched_at": "2026-10-12T04:02:20Z", "source_note": "", "github_homepage": "https://cherryai.com", "homepage_icon": "/site-icons/9de7de3bbef7bb84.png", "homepage_icon_for": "https://cherryai.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: resources/builtin-agents/cherry-assistant/.claude/skills/claude-automation-recommender/references/mcp-servers.md", "Found MCP-related server path: src/main/ai/mcp/ServerLogBuffer.ts", "Found MCP-related server test path: src/main/ai/mcp/__tests__/ServerLogBuffer.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Firecrawl", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/aiCore/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found xAI Grok dependency '@ai-sdk/xai' in packages/aiCore/package.json", "Found DeepSeek dependency 'deepseek' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/aiCore/src/core/plugins/built-in/__tests__/providerToolPlugin.test.ts", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 67.4, "trust_score_v2": 67.4, "rank_v2": 423, "rank_v2_delta": -63, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server Couchbase", "repo": "couchbase/mcp-server-couchbase", "display_repo": "", "url": "https://github.com/couchbase/mcp-server-couchbase", "listing_class": "agent", "rank": 424, "previous_rank": 436, "rank_delta": 12, "stars": 35, "stars_fmt": "35", "forks": 35, "forks_fmt": "35", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 23, "commits_low_confidence": false, "score": 58.7, "description": "Model Context Protocol server for Couchbase - connect AI agents and LLMs like Claude, Cursor, and Copilot to Couchbase/Capella", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 253, "npm_package": "", "crate_package": "", "pypi_package": "couchbase-mcp-server", "docker_image": "docker.io/couchbase/mcp-server:1.0.0", "vscode_extension": "", "weekly_downloads": 8150, "dl_source": "docker+pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.99, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 9, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:09:16Z", "slug": "mcp-server-couchbase", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "https://docs.couchbase.com/mcp-server/get-started/overview.html", "homepage_icon": "/site-icons/8b249886212eeb8e.png", "homepage_icon_for": "https://docs.couchbase.com/mcp-server/get-started/overview.html", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Amazon Bedrock credential/config marker 'AWS_ACCESS_KEY_ID'", "README/docs also mention Amazon Bedrock" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'couchbase-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "couchbase-mcp-server", "version": "1.0.1.post1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:56Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.4, "trust_score_v2": 67.4, "rank_v2": 424, "rank_v2_delta": 169, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 17.5, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Amazon Ads MCP", "repo": "KuudoAI/amazon_ads_mcp", "display_repo": "", "url": "https://github.com/KuudoAI/amazon_ads_mcp", "listing_class": "agent", "rank": 425, "previous_rank": 497, "rank_delta": 72, "stars": 73, "stars_fmt": "73", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.7, "description": "Amazon Ads MCP - Model Context Protocol server for Amazon Advertising API", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 254, "npm_package": "", "crate_package": "", "pypi_package": "amazon-ads-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 562, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.3, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:48:47Z", "slug": "amazon-ads-mcp", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "https://www.kuudo.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/amazon_ads_mcp/server/mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found credential/config marker 'KUUDO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'amazon-ads-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "amazon-ads-mcp", "version": "0.3.30" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:51Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.4, "trust_score_v2": 67.4, "rank_v2": 425, "rank_v2_delta": 10, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.4, "identity": 18.0, "transparency": 12.8, "maintenance": 12.0, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sentry MCP", "repo": "getsentry/toolkit", "display_repo": "", "url": "https://github.com/getsentry/toolkit", "listing_class": "agent", "rank": 426, "previous_rank": 426, "rank_delta": 0, "stars": 928, "stars_fmt": "928", "forks": 161, "forks_fmt": "161", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 259, "commits_low_confidence": false, "score": 78.1, "description": "Agentic tooling for Sentry", "language": "TypeScript", "open_issues": 109, "category": "MCP Servers", "category_rank": 255, "npm_package": "@sentry/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 102729, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.91, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:48:05Z", "slug": "sentry-mcp", "full_fetched_at": "2026-10-12T04:02:38Z", "source_note": "", "github_homepage": "https://mcp.sentry.dev", "homepage_icon": "/site-icons/90204e97ed26e32d.png", "homepage_icon_for": "https://mcp.sentry.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: .github/workflows/mcp-server-package.yml", "Found MCP-related server test path: packages/mcp-server/src/auth/device-code-flow.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/mcp-core/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/mcp-core/package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found code dependency 'simple-git' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@sentry/mcp-server' points to getsentry/sentry-mcp (same owner as getsentry/toolkit, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@sentry/mcp-server", "version": "0.42.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:38Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 67.4, "trust_score_v2": 67.4, "rank_v2": 426, "rank_v2_delta": -57, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 13.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LangChain4j", "repo": "langchain4j/langchain4j", "display_repo": "", "url": "https://github.com/langchain4j/langchain4j", "listing_class": "agent", "rank": 427, "previous_rank": 427, "rank_delta": 0, "stars": 13230, "stars_fmt": "13.2k", "forks": 2602, "forks_fmt": "2.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 123, "commits_low_confidence": false, "score": 90.6, "description": "LangChain4j is an idiomatic, open-source Java library for building LLM-powered applications on the JVM. It offers a unified API over popular LLM providers and vector stores, and makes implementing tool calling (including MCP support), agents and RAG easy. It integrates seamlessly with enterprise…", "language": "Java", "open_issues": 631, "category": "Agent Frameworks", "category_rank": 33, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.8, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:49:16Z", "slug": "langchain4j", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "https://docs.langchain4j.dev", "homepage_icon": "/site-icons/c211dc6a78c34297.png", "homepage_icon_for": "https://docs.langchain4j.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: langchain4j-mcp/src/main/java/dev/langchain4j/mcp/client/McpServerInfo.java", "Found MCP-related server path: langchain4j-mcp/src/main/java/dev/langchain4j/mcp/protocol/McpServerDiscoverParams.java", "Found MCP-related server test path: langchain4j-agentic-mcp/src/test/java/dev/langchain4j/agentic/mcp/McpServerHelper.java" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.3, "trust_score_v2": 67.3, "rank_v2": 427, "rank_v2_delta": -32, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 14.2, "maintenance": 20.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wet MCP", "repo": "n24q02m/wet", "display_repo": "", "url": "https://github.com/n24q02m/wet", "listing_class": "agent", "rank": 428, "previous_rank": 417, "rank_delta": -11, "stars": 19, "stars_fmt": "19", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 150, "commits_low_confidence": false, "score": 61.4, "description": "Open-source MCP server for AI agents: web search, content extraction, and library docs -- 5-strategy scraping, runs without API keys.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 256, "npm_package": "", "crate_package": "", "pypi_package": "wet-mcp", "docker_image": "docker.io/n24q02m/wet-mcp:latest", "vscode_extension": "", "weekly_downloads": 52751, "dl_source": "docker+pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.41, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-06T04:47:21Z", "slug": "wet-mcp", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "https://mcp.n24q02m.com/servers/wet-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Firecrawl", "OpenRouter", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily", "Found Firecrawl credential/config marker 'FIRECRAWL_API_KEY'", "README/docs also mention Firecrawl" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "shell" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in src/wet/setup.py", "Found shell dependency 'subprocess' in src/wet/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'wet-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "wet-mcp", "version": "3.19.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:09Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.3, "trust_score_v2": 67.3, "rank_v2": 428, "rank_v2_delta": 76, "trust_v2_adjustment": 2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 14.2, "maintenance": 19.9, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DeerFlow", "repo": "bytedance/deer-flow", "display_repo": "", "url": "https://github.com/bytedance/deer-flow", "listing_class": "agent", "rank": 429, "previous_rank": 421, "rank_delta": -8, "stars": 83748, "stars_fmt": "83.7k", "forks": 11653, "forks_fmt": "11.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 833, "commits_low_confidence": false, "score": 98.4, "description": "An open-source long-horizon SuperAgent harness that researches, codes, and creates. With the help of sandboxes, memories, tools, skill, subagents and message gateway, it handles different levels of tasks that could take minutes to hours.", "language": "Python", "open_issues": 525, "category": "Research & Data", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:20:33Z", "slug": "deerflow", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "https://deerflow.tech", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: backend/docs/MCP_SERVER.md" ] }, "external_service_dependencies": { "providers": [ "E2B", "OpenAI", "OpenRouter", "Postgres", "Redis", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: backend/packages/harness/deerflow/extensions/AGENTS.md", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'postgres' in backend/pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.3, "trust_score_v2": 67.3, "rank_v2": 429, "rank_v2_delta": -118, "trust_v2_adjustment": -2.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 10.8, "transparency": 14.0, "maintenance": 20.0, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Serena", "repo": "oraios/serena", "display_repo": "", "url": "https://github.com/oraios/serena", "listing_class": "agent", "rank": 430, "previous_rank": 428, "rank_delta": -2, "stars": 30202, "stars_fmt": "30.2k", "forks": 2061, "forks_fmt": "2.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 194, "commits_low_confidence": false, "score": 92.3, "description": "A powerful MCP toolkit for coding, providing semantic retrieval and editing capabilities - the IDE for your agent", "language": "Python", "open_issues": 60, "category": "Protocols & Tool Integration", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:40:06Z", "slug": "serena", "full_fetched_at": "2026-10-12T08:02:15Z", "source_note": "", "github_homepage": "https://oraios.github.io/serena", "homepage_icon": "/site-icons/f75b93d394741090.png", "homepage_icon_for": "https://oraios.github.io/serena", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: scripts/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: test/resources/repos/al/test_repo/src/TableExtensions/Item.TableExt.al", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 67.3, "trust_score_v2": 67.3, "rank_v2": 430, "rank_v2_delta": 2, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Hatchet", "repo": "hatchet-dev/hatchet", "display_repo": "", "url": "https://github.com/hatchet-dev/hatchet", "listing_class": "agent", "rank": 431, "previous_rank": 422, "rank_delta": -9, "stars": 8105, "stars_fmt": "8.1k", "forks": 519, "forks_fmt": "519", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 154, "commits_low_confidence": false, "score": 86.1, "description": "🪓 An orchestration engine for background tasks, AI agents, and durable workflows", "language": "Go", "open_issues": 64, "category": "Workflow Platforms", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.96, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:51:04Z", "slug": "hatchet", "full_fetched_at": "2026-10-12T04:02:40Z", "source_note": "", "github_homepage": "https://hatchet.run", "homepage_icon": "/site-icons/cd56170149a6b792.png", "homepage_icon_for": "https://hatchet.run", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: cmd/hatchet-cli/cli/internal/mcp/server.go", "Found MCP dependency '@modelcontextprotocol/sdk' in sdks/typescript/package.json" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in sdks/python/pyproject.toml", "Found Anthropic dependency 'claude-agent-sdk' in sdks/python/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in sdks/python/pyproject.toml", "Found Postgres dependency 'psycopg' in sdks/python/pyproject.toml", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.3, "trust_score_v2": 67.3, "rank_v2": 431, "rank_v2_delta": -19, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Korean Law MCP", "repo": "chrisryugj/korean-law-mcp", "display_repo": "", "url": "https://github.com/chrisryugj/korean-law-mcp", "listing_class": "agent", "rank": 432, "previous_rank": 425, "rank_delta": -7, "stars": 2683, "stars_fmt": "2.7k", "forks": 546, "forks_fmt": "546", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 64, "commits_low_confidence": false, "score": 80.8, "description": "법제처 국가법령정보를 LLM에서 바로 조회하는 MCP 서버. 법령·판례·조례 검색과 인용 검증 | MCP server for Korean law — search statutes, precedents, and ordinances, and verify citations", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 257, "npm_package": "korean-law-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3834, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T10:49:17Z", "slug": "korean-law-mcp", "full_fetched_at": "2026-10-12T12:02:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/icon.png", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'korean-law-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "korean-law-mcp", "version": "4.15.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:51Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.3, "trust_score_v2": 67.3, "rank_v2": 432, "rank_v2_delta": 176, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 12.8, "maintenance": 19.2, "adoption": 13.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CodeGraphContext", "repo": "CodeGraphContext/CodeGraphContext", "display_repo": "", "url": "https://github.com/CodeGraphContext/CodeGraphContext", "listing_class": "agent", "rank": 433, "previous_rank": 420, "rank_delta": -13, "stars": 4260, "stars_fmt": "4.3k", "forks": 832, "forks_fmt": "832", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 11, "commits_low_confidence": false, "score": 73.6, "description": "An MCP server plus a CLI tool that indexes local code into a graph database to provide context to AI assistants.", "language": "Python", "open_issues": 93, "category": "Memory & Knowledge", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "codegraphcontext", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2244, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:43:03Z", "slug": "codegraphcontext", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://cgc.codes", "homepage_icon": "/site-icons/5f24f1612d03116f.png", "homepage_icon_for": "https://cgc.codes", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/integration/mcp/test_mcp_server.py", "Found MCP-related server test path: tests/unit/api/test_mcp_server_api_contract.py" ] }, "external_service_dependencies": { "providers": [ "Redis", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in website/package.json", "Found Redis dependency 'redis' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: extensions/vscode/.gitignore", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'codegraphcontext' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "codegraphcontext", "version": "0.6.13" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:54Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.3, "trust_score_v2": 67.3, "rank_v2": 433, "rank_v2_delta": 171, "trust_v2_adjustment": 4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.2, "maintenance": 16.1, "adoption": 13.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Code-Graph-RAG", "repo": "vitali87/code-graph-rag", "display_repo": "", "url": "https://github.com/vitali87/code-graph-rag", "listing_class": "agent", "rank": 434, "previous_rank": 401, "rank_delta": -33, "stars": 5245, "stars_fmt": "5.2k", "forks": 698, "forks_fmt": "698", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 3029, "commits_low_confidence": false, "score": 85.5, "description": "The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs", "language": "Python", "open_issues": 419, "category": "Memory & Knowledge", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.16, "scorecard_score": 8.3, "scorecard_checks": { "Code-Review": 0, "Maintained": 10, "Security-Policy": 10, "Dependency-Update-Tool": 10, "Dangerous-Workflow": 10, "Token-Permissions": 10, "Binary-Artifacts": 10, "Pinned-Dependencies": 9, "CII-Best-Practices": 5, "Vulnerabilities": 6, "SAST": 10, "License": 10, "Fuzzing": 10, "Signed-Releases": 10, "Branch-Protection": 3, "Packaging": 10, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:12Z", "slug": "code-graph-rag", "full_fetched_at": "2026-10-12T04:02:10Z", "source_note": "", "github_homepage": "https://code-graph-rag.com", "homepage_icon": "/site-icons/1d8b3752e56b3677.png", "homepage_icon_for": "https://code-graph-rag.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: codebase_rag/mcp/server.py", "Found MCP-related server test path: codebase_rag/tests/test_mcp_server.py", "Found MCP-related server test path: codebase_rag/tests/test_mcp_server_config_hint.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Qdrant" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Qdrant dependency 'qdrant' in pyproject.toml", "README/docs also mention Qdrant" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'qdrant' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.2, "trust_score_v2": 67.2, "rank_v2": 434, "rank_v2_delta": -8, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 15.6, "maintenance": 20.0, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Giskard", "repo": "Giskard-AI/giskard-oss", "display_repo": "", "url": "https://github.com/Giskard-AI/giskard-oss", "listing_class": "agent", "rank": 435, "previous_rank": 433, "rank_delta": -2, "stars": 5888, "stars_fmt": "5.9k", "forks": 550, "forks_fmt": "550", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 27, "commits_low_confidence": false, "score": 78.4, "description": "🐢 Open-Source Evaluation & Testing library for LLM Agents", "language": "Python", "open_issues": 24, "category": "Observability & Evaluation", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "giskard", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2542, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.75, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-04T10:41:22Z", "slug": "giskard", "full_fetched_at": "2026-10-12T04:02:36Z", "source_note": "", "github_homepage": "https://docs.giskard.ai", "homepage_icon": "/site-icons/73b510c762c05959.png", "homepage_icon_for": "https://docs.giskard.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in libs/giskard-llm/pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'giskard' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.2, "trust_score_v2": 67.2, "rank_v2": 435, "rank_v2_delta": -94, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 14.3, "maintenance": 17.8, "adoption": 13.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pond", "repo": "tenequm/pond", "display_repo": "", "url": "https://github.com/tenequm/pond", "listing_class": "agent", "rank": 436, "previous_rank": 424, "rank_delta": -12, "stars": 81, "stars_fmt": "81", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 87, "commits_low_confidence": false, "score": 65.3, "description": "Lossless storage and search for AI agent sessions, across every agentic client.", "language": "Rust", "open_issues": 56, "category": "Memory & Knowledge", "category_rank": 27, "npm_package": "", "crate_package": "pond-db", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 58, "dl_source": "crates.io", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T20:57:37Z", "slug": "pond", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "https://pond.locker", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/pi-pond/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/openclaw-pond/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "crates.io package 'pond-db' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "crates.io", "name": "pond-db", "version": "0.19.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:40Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.2, "trust_score_v2": 67.2, "rank_v2": 436, "rank_v2_delta": 229, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 19.4, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "World Model MCP", "repo": "SaravananJaichandar/world-model-mcp", "display_repo": "", "url": "https://github.com/SaravananJaichandar/world-model-mcp", "listing_class": "agent", "rank": 437, "previous_rank": 429, "rank_delta": -8, "stars": 24, "stars_fmt": "24", "forks": 4, "forks_fmt": "4", "last_push": "2026-09-15", "days_ago": 27, "weekly_commits": 1, "commits_low_confidence": false, "score": 36.7, "description": "world-model-mcp is a signed audit memory server for AI coding agents, delivered as an MCP tool. Every event Ed25519-signed and Merkle-chained; offline-verifiable against pinned public keys. Hosted platform with hybrid post-quantum signing at etch.systems.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 258, "npm_package": "", "crate_package": "", "pypi_package": "world-model-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 219, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.99, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:32:01Z", "slug": "world-model-mcp", "full_fetched_at": "2026-10-12T04:02:14Z", "source_note": "", "github_homepage": "https://etch.systems", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: adapters/cursor/mcp.json", "Found MCP-related server path: world_model_server/adapters/cline/mcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'world-model-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "world-model-mcp", "version": "0.16.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:14Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.2, "trust_score_v2": 67.2, "rank_v2": 437, "rank_v2_delta": -20, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 18.3, "identity": 18.0, "transparency": 12.5, "maintenance": 11.4, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server for WinDbg Crash Analysis", "repo": "svnscha/mcp-windbg", "display_repo": "", "url": "https://github.com/svnscha/mcp-windbg", "listing_class": "agent", "rank": 438, "previous_rank": 432, "rank_delta": -6, "stars": 1612, "stars_fmt": "1.6k", "forks": 163, "forks_fmt": "163", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 24, "commits_low_confidence": false, "score": 71.8, "description": "Model Context Protocol for WinDbg.", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 259, "npm_package": "", "crate_package": "", "pypi_package": "mcp-windbg", "docker_image": "", "vscode_extension": "", "weekly_downloads": 791, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.854, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:40:29Z", "slug": "mcp-server-for-windbg-crash-analysis", "full_fetched_at": "2026-10-12T00:02:21Z", "source_note": "", "github_homepage": "https://svnscha.de/mcp-windbg/", "homepage_icon": "/site-icons/4b2fde7f6af6d342.png", "homepage_icon_for": "https://svnscha.de/mcp-windbg/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/mcp-windbg/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-windbg' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-windbg", "version": "1.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:21Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.1, "trust_score_v2": 67.1, "rank_v2": 438, "rank_v2_delta": 216, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 12.1, "maintenance": 17.4, "adoption": 11.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "NitroStack", "repo": "nitrocloudofficial/nitrostack", "display_repo": "", "url": "https://github.com/nitrocloudofficial/nitrostack", "listing_class": "agent", "rank": 439, "previous_rank": 460, "rank_delta": 21, "stars": 2464, "stars_fmt": "2.5k", "forks": 1423, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 136, "commits_low_confidence": false, "score": 85.1, "description": "The full-stack TypeScript framework to build, test, and deploy production-ready MCP servers and AI-native apps.", "language": "TypeScript", "open_issues": 26, "category": "Protocols & Tool Integration", "category_rank": 23, "npm_package": "@nitrostack/core", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 23518, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:46:14Z", "slug": "nitrostack", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://nitrostack.ai", "homepage_icon": "/site-icons/c2589340058c7fd3.png", "homepage_icon_for": "https://nitrostack.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: sample-apps/ApexTune-mcp-server-project/.agents/skills/auth-security/SKILL.md", "Found MCP-related server path: sample-apps/ApexTune-mcp-server-project/.agents/skills/mcp-app-architecture/SKILL.md", "Found MCP-related server docs path: sample-apps/DeploySense-AI/mcp-servers/docs/API.md" ] }, "external_service_dependencies": { "providers": [ "Groq" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Groq dependency 'groq' in sample-apps/hack/package.json" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "medium", "evidence": [ "Found marketplace path: sample-apps/finpilot-ai/src/modules/marketplace/marketplace.module.ts" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@nitrostack/core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@nitrostack/core", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 67.1, "trust_score_v2": 67.1, "rank_v2": 439, "rank_v2_delta": 186, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 12.0, "maintenance": 20.0, "adoption": 14.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Brilliant Directories MCP", "repo": "brilliantdirectories/brilliant-directories-mcp", "display_repo": "", "url": "https://github.com/brilliantdirectories/brilliant-directories-mcp", "listing_class": "agent", "rank": 440, "previous_rank": 455, "rank_delta": 15, "stars": 17, "stars_fmt": "17", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 2, "commits_low_confidence": true, "score": 41.8, "description": "Official MCP server for Brilliant Directories — manage members, posts, leads, reviews, pages, and more from any AI agent. OpenAPI 3.1 spec included.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 260, "npm_package": "brilliant-directories-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1804, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:52:21Z", "slug": "brilliant-directories-mcp", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "https://www.brilliantdirectories.com", "homepage_icon": "/site-icons/0219711ab464370c.png", "homepage_icon_for": "https://www.brilliantdirectories.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'ENTER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'brilliant-directories-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "brilliant-directories-mcp", "version": "6.58.611" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:47Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.1, "trust_score_v2": 67.1, "rank_v2": 440, "rank_v2_delta": 179, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 18.0, "transparency": 11.8, "maintenance": 12.8, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Idea Reality MCP", "repo": "mnemox-ai/idea-reality-mcp", "display_repo": "", "url": "https://github.com/mnemox-ai/idea-reality-mcp", "listing_class": "agent", "rank": 441, "previous_rank": 430, "rank_delta": -11, "stars": 822, "stars_fmt": "822", "forks": 89, "forks_fmt": "89", "last_push": "2026-09-18", "days_ago": 24, "weekly_commits": 1, "commits_low_confidence": false, "score": 52.1, "description": "Pre-build reality check for AI coding agents. Scans GitHub, HN, npm, PyPI, Product Hunt. MCP server. 290+ stars.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 261, "npm_package": "", "crate_package": "", "pypi_package": "idea-reality-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 85, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.05, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:29:54Z", "slug": "idea-reality-mcp", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "https://mnemox.ai/check/", "homepage_icon": "/site-icons/b7ca701dc1b71ccc.png", "homepage_icon_for": "https://mnemox.ai/check/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in api/requirements.txt", "README/docs also mention Anthropic", "Found credential/config marker 'PRODUCTHUNT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .cursor-plugin/plugin.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'idea-reality-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "idea-reality-mcp", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:01Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.1, "trust_score_v2": 67.1, "rank_v2": 441, "rank_v2_delta": 177, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 18.0, "transparency": 11.3, "maintenance": 11.6, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Reactive Resume", "repo": "reactive-resume/reactive-resume", "display_repo": "", "url": "https://github.com/reactive-resume/reactive-resume", "listing_class": "skill", "rank": 43, "previous_rank": 45, "rank_delta": 2, "stars": 44175, "stars_fmt": "44.2k", "forks": 4843, "forks_fmt": "4.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 97, "commits_low_confidence": false, "score": 94.8, "description": "A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!", "language": "TypeScript", "open_issues": 39, "category": "Agent Skills", "category_rank": 43, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:47:13Z", "slug": "reactive-resume", "full_fetched_at": "2026-10-12T12:02:22Z", "source_note": "", "github_homepage": "https://rxresu.me", "homepage_icon": "/site-icons/15d5f0d66a33c6d9.png", "homepage_icon_for": "https://rxresu.me", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: apps/server/src/mcp/server.ts", "Found MCP-related server path: packages/mcp/src/mcp-server-card.ts", "Found MCP-related server docs path: docs/guides/using-the-mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "DeepSeek", "Groq", "OpenAI", "Postgres", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/server/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in apps/server/package.json", "README/docs also mention Anthropic", "Found Cohere dependency 'cohere' in apps/server/package.json", "Found Groq dependency 'groq' in apps/server/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'pg' in apps/server/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.0, "trust_score_v2": 67.0, "rank_v2": 43, "rank_v2_delta": 303, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 10.8, "transparency": 13.9, "maintenance": 19.9, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Atomic Agents", "repo": "Eigenwise/atomic-agents", "display_repo": "", "url": "https://github.com/Eigenwise/atomic-agents", "listing_class": "agent", "rank": 442, "previous_rank": 419, "rank_delta": -23, "stars": 6284, "stars_fmt": "6.3k", "forks": 555, "forks_fmt": "555", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 43, "commits_low_confidence": false, "score": 81.1, "description": "Building AI agents, atomically", "language": "Python", "open_issues": 2, "category": "Agent Frameworks", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "atomic-agents", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3621, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.32, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-25T22:04:42Z", "slug": "atomic-agents", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "https://eigenwise.github.io/atomic-agents/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: atomic-examples/mcp-agent/example-mcp-server/README.md", "Found MCP-related server path: atomic-examples/mcp-agent/example-mcp-server/demo_tools.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in atomic-examples/quickstart/pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in atomic-examples/quickstart/pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in atomic-examples/quickstart/pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'atomic-agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "atomic-agents", "version": "2.10.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:29Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.0, "trust_score_v2": 67.0, "rank_v2": 442, "rank_v2_delta": 119, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 12.7, "maintenance": 18.5, "adoption": 13.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "VoltAgent", "repo": "VoltAgent/voltagent", "display_repo": "", "url": "https://github.com/VoltAgent/voltagent", "listing_class": "agent", "rank": 443, "previous_rank": 434, "rank_delta": -9, "stars": 10769, "stars_fmt": "10.8k", "forks": 1165, "forks_fmt": "1.2k", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 2, "commits_low_confidence": false, "score": 67.6, "description": "AI Agent Engineering Platform built on an Open Source TypeScript AI Agent Framework", "language": "TypeScript", "open_issues": 43, "category": "Agent Frameworks", "category_rank": 35, "npm_package": "@voltagent/core", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 40310, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.81, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 2, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:18:01Z", "slug": "voltagent", "full_fetched_at": "2026-10-12T12:02:29Z", "source_note": "", "github_homepage": "https://voltagent.dev", "homepage_icon": "/site-icons/7bbbb6e2d5d09b85.png", "homepage_icon_for": "https://voltagent.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/with-cerbos/src/mcp-server.ts", "Found MCP-related server path: examples/with-mcp-elicitation/src/mcp-server.ts", "Found MCP-related server docs path: website/docs/agents/mcp/mcp-server.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "filesystem" ], "confidence": "high", "evidence": [ "Found declared path: packages/shared/tsup-plugins/mark-as-external.ts", "README/docs also mention a declared plugin/integration surface", "Found filesystem dependency 'fs-extra' in packages/cli/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@voltagent/core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@voltagent/core", "version": "2.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:29Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 67.0, "trust_score_v2": 67.0, "rank_v2": 443, "rank_v2_delta": 200, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 12.3, "maintenance": 13.0, "adoption": 15.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Rtk", "repo": "rtk-ai/rtk", "display_repo": "", "url": "https://github.com/rtk-ai/rtk", "listing_class": "skill", "rank": 44, "previous_rank": 44, "rank_delta": 0, "stars": 83081, "stars_fmt": "83.1k", "forks": 5276, "forks_fmt": "5.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 314, "commits_low_confidence": false, "score": 96.8, "description": "CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies", "language": "Rust", "open_issues": 853, "category": "Agent Skills", "category_rank": 44, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.54, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 1, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-11T21:03:38Z", "slug": "rtk", "full_fetched_at": "2026-10-12T00:02:41Z", "source_note": "", "github_homepage": "https://www.rtk-ai.app", "homepage_icon": "/site-icons/b6ff1e5df7ca2d2c.png", "homepage_icon_for": "https://www.rtk-ai.app", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.9, "trust_score_v2": 66.9, "rank_v2": 44, "rank_v2_delta": 365, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 13.8, "maintenance": 20.0, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Context Mode", "repo": "mksglu/context-mode", "display_repo": "", "url": "https://github.com/mksglu/context-mode", "listing_class": "skill", "rank": 45, "previous_rank": 46, "rank_delta": 1, "stars": 26988, "stars_fmt": "27.0k", "forks": 1932, "forks_fmt": "1.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 49, "commits_low_confidence": false, "score": 88.1, "description": "Context window optimization for AI coding agents. Sandboxes tool output (98% reduction), persists session memory, and enforces routing across 17 platforms via MCP + hooks.", "language": "TypeScript", "open_issues": 173, "category": "Agent Skills", "category_rank": 45, "npm_package": "context-mode", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 24476, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-23T18:27:46Z", "slug": "context-mode", "full_fetched_at": "2026-10-11T20:02:00Z", "source_note": "", "github_homepage": "https://context-mode.com", "homepage_icon": "/site-icons/ee76de9d26b5b820.png", "homepage_icon_for": "https://context-mode.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .codex-plugin/mcp.json", "Found MCP-related server path: configs/cursor/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in web/og/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'context-mode' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "context-mode", "version": "1.0.169" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:00Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 66.9, "trust_score_v2": 66.9, "rank_v2": 45, "rank_v2_delta": 600, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.3, "maintenance": 18.8, "adoption": 16.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Terraform MCP Server", "repo": "hashicorp/terraform-mcp-server", "display_repo": "", "url": "https://github.com/hashicorp/terraform-mcp-server", "listing_class": "agent", "rank": 444, "previous_rank": 437, "rank_delta": -7, "stars": 1548, "stars_fmt": "1.5k", "forks": 201, "forks_fmt": "201", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 26, "commits_low_confidence": false, "score": 72.7, "description": "The Terraform MCP Server provides seamless integration with Terraform ecosystem, enabling advanced automation and interaction capabilities for Infrastructure as Code (IaC) development.", "language": "Go", "open_issues": 12, "category": "MCP Servers", "category_rank": 262, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T10:01:49Z", "slug": "terraform-mcp-server", "full_fetched_at": "2026-10-12T04:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cmd/terraform-mcp-server/main.go", "Found MCP-related server path: helm/terraform-mcp-server/.helmignore", "Found MCP-related server test path: helm/terraform-mcp-server/templates/tests/test-connection.yaml" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'TFE_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MPL-2.0", "license_type": "open", "license_override": "", "trust_score": 66.8, "trust_score_v2": 66.8, "rank_v2": 444, "rank_v2_delta": 14, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.6, "identity": 10.8, "transparency": 15.0, "maintenance": 17.7, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nexent", "repo": "ModelEngine-Group/nexent", "display_repo": "", "url": "https://github.com/ModelEngine-Group/nexent", "listing_class": "agent", "rank": 445, "previous_rank": 438, "rank_delta": -7, "stars": 5924, "stars_fmt": "5.9k", "forks": 739, "forks_fmt": "739", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 116, "commits_low_confidence": false, "score": 85.9, "description": "Nexent is a zero-code platform for auto-generating production-grade AI agents using Harness Engineering principles — unified tools, skills, memory, and orchestration with built-in constraints, feedback loops, and control planes.", "language": "Python", "open_issues": 184, "category": "Agent Frameworks", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:56:38Z", "slug": "nexent", "full_fetched_at": "2026-10-12T08:02:13Z", "source_note": "", "github_homepage": "http://modelengine-group.github.io/nexent/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: frontend/components/mcp/McpEditServerModal.tsx", "Found MCP-related server path: frontend/hooks/mcp/useMcpServerList.ts", "Found MCP dependency 'fastmcp' in sdk/pyproject.toml", "Found MCP dependency 'fastmcp' in backend/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI", "Postgres", "Redis", "Supabase", "Tavily" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in sdk/pyproject.toml", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in sdk/pyproject.toml", "Found Tavily dependency 'tavily' in sdk/pyproject.toml", "Found Supabase dependency 'supabase' in backend/pyproject.toml", "README/docs also mention Supabase" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found declared path: .claude/skills/external-memory-plugin/SKILL.md", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'selenium' in backend/pyproject.toml", "Found search dependency 'tavily' in sdk/pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'redis' in backend/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.7, "trust_score_v2": 66.7, "rank_v2": 445, "rank_v2_delta": -90, "trust_v2_adjustment": -1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.9, "identity": 10.8, "transparency": 14.6, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google ADK (Python)", "repo": "google/adk-python", "display_repo": "", "url": "https://github.com/google/adk-python", "listing_class": "agent", "rank": 446, "previous_rank": 439, "rank_delta": -7, "stars": 21786, "stars_fmt": "21.8k", "forks": 4132, "forks_fmt": "4.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 504, "commits_low_confidence": false, "score": 92.8, "description": "An open-source, code-first Python toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.", "language": "Python", "open_issues": 218, "category": "Agent Frameworks", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "google-adk", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2223913, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:15:25Z", "slug": "google-adk-python", "full_fetched_at": "2026-10-12T04:02:38Z", "source_note": "", "github_homepage": "https://google.github.io/adk-docs/", "homepage_icon": "/site-icons/092ba6b0ca3d528a.png", "homepage_icon_for": "https://google.github.io/adk-docs/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: contributing/samples/mcp/mcp_dynamic_header_agent/header_server.py", "Found MCP-related server path: contributing/samples/mcp/mcp_progress_callback_agent/mock_progress_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Browserbase", "E2B", "ElevenLabs", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini", "Found ElevenLabs dependency 'elevenlabs' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: contributing/samples/plugins/plugin_basic/README.md", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in contributing/samples/multimodal/computer_use/requirements.txt", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'google-adk' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.7, "trust_score_v2": 66.7, "rank_v2": 446, "rank_v2_delta": -160, "trust_v2_adjustment": -3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 13.5, "maintenance": 20.0, "adoption": 18.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Concordia", "repo": "google-deepmind/concordia", "display_repo": "", "url": "https://github.com/google-deepmind/concordia", "listing_class": "agent", "rank": 447, "previous_rank": 452, "rank_delta": 5, "stars": 1774, "stars_fmt": "1.8k", "forks": 380, "forks_fmt": "380", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 31, "commits_low_confidence": false, "score": 75.3, "description": "A library for generative social simulation", "language": "Python", "open_issues": 27, "category": "Multi-Agent Systems", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "gdm-concordia", "docker_image": "", "vscode_extension": "", "weekly_downloads": 631, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.05, "scorecard_score": 7.8, "scorecard_checks": { "Security-Policy": 10, "Code-Review": 8, "Maintained": 10, "Dangerous-Workflow": 10, "CII-Best-Practices": 0, "Token-Permissions": 10, "SAST": 10, "Binary-Artifacts": 10, "Pinned-Dependencies": 4, "License": 10, "Fuzzing": 0, "Signed-Releases": -1, "Branch-Protection": 3, "Packaging": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:29Z", "slug": "concordia", "full_fetched_at": "2026-10-12T04:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: concordia/contrib/tools/mcp/servers/__init__.py", "Found MCP-related server path: concordia/contrib/tools/mcp/servers/file_reader_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Groq", "Mistral AI", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in setup.py", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Google Gemini dependency 'google-genai' in setup.py", "Found Mistral AI dependency 'mistralai' in setup.py", "Found Groq dependency 'groq' in setup.py", "Found Amazon Bedrock dependency 'boto3' in setup.py" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "shell" ], "confidence": "medium", "evidence": [ "Found shell dependency 'pty' in requirements.txt" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'gdm-concordia' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "gdm-concordia", "version": "2.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:38Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 447, "rank_v2_delta": 27, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 15.1, "maintenance": 18.0, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Azure DevOps (ADO)", "repo": "microsoft/azure-devops-mcp", "display_repo": "", "url": "https://github.com/microsoft/azure-devops-mcp", "listing_class": "agent", "rank": 448, "previous_rank": 441, "rank_delta": -7, "stars": 2055, "stars_fmt": "2.1k", "forks": 663, "forks_fmt": "663", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 21, "commits_low_confidence": false, "score": 74.3, "description": "The MCP server for Azure DevOps, bringing the power of Azure DevOps directly to your agents.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 263, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:55:19Z", "slug": "azure-devops-ado", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/ISSUE_TEMPLATE/remote-mcp-server-issue.md", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 448, "rank_v2_delta": 63, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 10.8, "transparency": 14.6, "maintenance": 17.2, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Seo", "repo": "AgriciDaniel/claude-seo", "display_repo": "", "url": "https://github.com/AgriciDaniel/claude-seo", "listing_class": "skill", "rank": 46, "previous_rank": 47, "rank_delta": 1, "stars": 18767, "stars_fmt": "18.8k", "forks": 2749, "forks_fmt": "2.7k", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 62, "commits_low_confidence": false, "score": 88.0, "description": "Universal SEO skill for Claude Code. 26 sub-skills + 19 sub-agents covering technical SEO, E-E-A-T, schema, GEO/AEO, agent readiness (Lighthouse Agentic Browsing, WebMCP, llms.txt), backlinks, local SEO, e-commerce, international SEO, Google APIs, and PDF/Excel reporting. 9 optional extensions for…", "language": "Python", "open_issues": 19, "category": "Agent Skills", "category_rank": 46, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.82, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:12:14Z", "slug": "claude-seo", "full_fetched_at": "2026-10-12T08:02:27Z", "source_note": "", "github_homepage": "https://claude-seo.md", "homepage_icon": "/site-icons/31a56639f06d7651.png", "homepage_icon_for": "https://claude-seo.md", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in requirements.txt", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 46, "rank_v2_delta": 353, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 14.5, "maintenance": 18.6, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Laravel Boost", "repo": "laravel/boost", "display_repo": "", "url": "https://github.com/laravel/boost", "listing_class": "agent", "rank": 449, "previous_rank": 448, "rank_delta": -1, "stars": 3643, "stars_fmt": "3.6k", "forks": 384, "forks_fmt": "384", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 35, "commits_low_confidence": false, "score": 77.8, "description": "Laravel-focused MCP server for augmenting your AI powered local development experience.", "language": "PHP", "open_issues": 10, "category": "MCP Servers", "category_rank": 264, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.78, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T21:29:41Z", "slug": "laravel-boost", "full_fetched_at": "2026-10-12T04:02:52Z", "source_note": "", "github_homepage": "https://laravel.com/docs/13.x/boost", "homepage_icon": "/site-icons/ccfb9c33f5d42e4a.png", "homepage_icon_for": "https://laravel.com/docs/13.x/boost", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 449, "rank_v2_delta": 60, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 10.8, "transparency": 14.4, "maintenance": 18.2, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Model Context Protocol / MCP", "repo": "modelcontextprotocol/servers", "display_repo": "", "url": "https://github.com/modelcontextprotocol/servers", "listing_class": "agent", "rank": 450, "previous_rank": 442, "rank_delta": -8, "stars": 91169, "stars_fmt": "91.2k", "forks": 11779, "forks_fmt": "11.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 417, "commits_low_confidence": false, "score": 98.7, "description": "Model Context Protocol Servers", "language": "JavaScript", "open_issues": 207, "category": "Protocols & Tool Integration", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T03:19:12Z", "slug": "model-context-protocol-mcp", "full_fetched_at": "2026-10-12T08:02:04Z", "source_note": "", "github_homepage": "https://modelcontextprotocol.io", "homepage_icon": "/site-icons/4167a655a0a7f1dc.png", "homepage_icon_for": "https://modelcontextprotocol.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/fetch/src/mcp_server_fetch/__init__.py", "Found MCP-related server path: src/fetch/src/mcp_server_fetch/__main__.py", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GITHUB_PERSONAL_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in src/git/pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 450, "rank_v2_delta": 0, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 11.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Eve", "repo": "vercel/eve", "display_repo": "", "url": "https://github.com/vercel/eve", "listing_class": "agent", "rank": 451, "previous_rank": 443, "rank_delta": -8, "stars": 5534, "stars_fmt": "5.5k", "forks": 615, "forks_fmt": "615", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 582, "commits_low_confidence": false, "score": 85.5, "description": "The Open Framework for Building Agents", "language": "TypeScript", "open_issues": 320, "category": "Needs review", "category_rank": 1, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:35:40Z", "slug": "eve", "full_fetched_at": "2026-10-12T08:02:38Z", "source_note": "", "github_homepage": "https://eve.dev", "homepage_icon": "/site-icons/e2fba812a03759aa.png", "homepage_icon_for": "https://eve.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/eve/src/internal/mcp/streamable-http-server.ts", "Found MCP-related server test path: packages/eve/src/internal/mcp/streamable-http-server.test.ts", "Found MCP dependency 'modelcontextprotocol' in packages/eve/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: apps/docs/registry/extensions/agent-browser.ts" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 451, "rank_v2_delta": 35, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 13.3, "maintenance": 20.0, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Airbyte", "repo": "airbytehq/airbyte", "display_repo": "", "url": "https://github.com/airbytehq/airbyte", "listing_class": "agent", "rank": 452, "previous_rank": 445, "rank_delta": -7, "stars": 22212, "stars_fmt": "22.2k", "forks": 5401, "forks_fmt": "5.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2012, "commits_low_confidence": false, "score": 93.5, "description": "Open-source data movement for ELT pipelines and AI agents — from APIs, databases & files to warehouses, lakes, and AI applications. Both self-hosted and Cloud.", "language": "Python", "open_issues": 682, "category": "Workflow Platforms", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:18:24Z", "slug": "airbyte", "full_fetched_at": "2026-10-12T04:02:10Z", "source_note": "", "github_homepage": "https://airbyte.com", "homepage_icon": "/site-icons/3a5482da39d90762.png", "homepage_icon_for": "https://airbyte.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: docusaurus/static/img/ai-agents/fastmcp.svg", "Found MCP-related server docs path: docs/ai-agents/get-started/developer-quickstart/tutorial-fastmcp.md", "Found MCP-related server docs path: docs/community/mcp-servers/airbyte-knowledge-mcp.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: airbyte-cdk/bulk/core/base/src/testFixtures/kotlin/io/airbyte/cdk/extensions/JunitTimeoutInvocationInterceptor.kt", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 452, "rank_v2_delta": 32, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ProxmoxMCP-Plus", "repo": "RekklesNA/ProxmoxMCP-Plus", "display_repo": "", "url": "https://github.com/RekklesNA/ProxmoxMCP-Plus", "listing_class": "agent", "rank": 453, "previous_rank": 457, "rank_delta": 4, "stars": 581, "stars_fmt": "581", "forks": 95, "forks_fmt": "95", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 29, "commits_low_confidence": false, "score": 69.2, "description": "Use MCP and OpenAPI to safely control Proxmox VE VMs, LXCs, backups, and snapshots from LLMs and AI agents.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 265, "npm_package": "", "crate_package": "", "pypi_package": "proxmox-mcp-plus", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4136, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.61, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T11:49:45Z", "slug": "proxmoxmcp-plus", "full_fetched_at": "2026-10-12T00:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'asyncpg' in setup.py", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'proxmox-mcp-plus' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "proxmox-mcp-plus", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:54Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 453, "rank_v2_delta": 189, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 12.5, "maintenance": 17.9, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Metro MCP", "repo": "steve228uk/metro-mcp", "display_repo": "", "url": "https://github.com/steve228uk/metro-mcp", "listing_class": "agent", "rank": 454, "previous_rank": 446, "rank_delta": -8, "stars": 84, "stars_fmt": "84", "forks": 7, "forks_fmt": "7", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.7, "description": "🚇 A plugin-based MCP server for React Native runtime debugging, inspection, and automation. Connects to Metro bundler via Chrome DevTools Protocol — no app code changes needed for most features.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 266, "npm_package": "metro-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 530, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-25T01:24:16Z", "slug": "metro-mcp", "full_fetched_at": "2026-10-12T00:02:20Z", "source_note": "", "github_homepage": "https://metromcp.dev/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'metro-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "metro-mcp", "version": "0.15.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:20Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 454, "rank_v2_delta": 223, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 18.0, "transparency": 12.2, "maintenance": 9.5, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "NotebookLM MCP", "repo": "roomi-fields/notebooklm-mcp", "display_repo": "", "url": "https://github.com/roomi-fields/notebooklm-mcp", "listing_class": "agent", "rank": 455, "previous_rank": 451, "rank_delta": -4, "stars": 193, "stars_fmt": "193", "forks": 59, "forks_fmt": "59", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.7, "description": "Google NotebookLM over MCP + a local HTTP REST API. Citation-backed Q&A, audio/video/content generation, multi-account rotation. For Claude Code, Codex, Cursor, n8n, Zapier, Make.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 267, "npm_package": "@roomi-fields/notebooklm-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 470, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-18T19:42:24Z", "slug": "notebooklm-mcp", "full_fetched_at": "2026-10-12T00:02:01Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@roomi-fields/notebooklm-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@roomi-fields/notebooklm-mcp", "version": "3.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:01Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.6, "trust_score_v2": 66.6, "rank_v2": 455, "rank_v2_delta": 221, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 18.0, "transparency": 11.7, "maintenance": 9.5, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Orchestkit", "repo": "yonatangross/orchestkit", "display_repo": "", "url": "https://github.com/yonatangross/orchestkit", "listing_class": "skill", "rank": 47, "previous_rank": 42, "rank_delta": -5, "stars": 292, "stars_fmt": "292", "forks": 35, "forks_fmt": "35", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 498, "commits_low_confidence": false, "score": 72.0, "description": "The Complete AI Development Toolkit for Claude Code. 106 skills, 36 agents, 171 hooks. Install `ork` for stable (v9.x), or `ork-alpha` for the v10 line, which ships daily.", "language": "TypeScript", "open_issues": 104, "category": "Agent Skills", "category_rank": 47, "npm_package": "orchestkit", "crate_package": "", "pypi_package": "orchestkit", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-12T07:08:10Z", "slug": "orchestkit", "full_fetched_at": "2026-10-12T08:02:01Z", "source_note": "", "github_homepage": "https://orchestkit.yonyon.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/ork-codex/mcp.json", "Found MCP-related server path: plugins/ork/skills/mcp-patterns/checklists/mcp-server-checklist.md", "Found MCP-related server docs path: docs/site/app/(home)/mcp-server/page.tsx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Redis dependency 'redis' in pyproject.toml", "Found credential/config marker 'CONTEXT7_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'orchestkit' points to the tracked repo", "pypi package 'orchestkit' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "orchestkit", "version": "0.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:01Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.5, "trust_score_v2": 66.5, "rank_v2": 47, "rank_v2_delta": 465, "trust_v2_adjustment": 1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "WeKnora", "repo": "Tencent/WeKnora", "display_repo": "", "url": "https://github.com/Tencent/WeKnora", "listing_class": "agent", "rank": 456, "previous_rank": 449, "rank_delta": -7, "stars": 33481, "stars_fmt": "33.5k", "forks": 4461, "forks_fmt": "4.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 468, "commits_low_confidence": false, "score": 94.1, "description": "Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-maintaining Wiki.", "language": "Go", "open_issues": 338, "category": "Memory & Knowledge", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.73, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T08:25:46Z", "slug": "weknora", "full_fetched_at": "2026-10-12T08:02:34Z", "source_note": "", "github_homepage": "https://weknora.weixin.qq.com", "homepage_icon": "/site-icons/f6bfddd1c63f1228.png", "homepage_icon_for": "https://weknora.weixin.qq.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/mcp-server.yml", "Found MCP-related server path: cli/internal/mcp/server.go", "Found MCP-related server test path: mcp-server/tests/test_agent_id_resolution.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'WEKNORA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in docreader/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 66.5, "trust_score_v2": 66.5, "rank_v2": 456, "rank_v2_delta": -2, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 13.3, "maintenance": 20.0, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Webcmd", "repo": "agentrhq/webcmd", "display_repo": "", "url": "https://github.com/agentrhq/webcmd", "listing_class": "agent", "rank": 457, "previous_rank": 440, "rank_delta": -17, "stars": 2706, "stars_fmt": "2.7k", "forks": 1544, "forks_fmt": "1.5k", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 10, "commits_low_confidence": false, "score": 71.0, "description": "Self-learning agent browser", "language": "TypeScript", "open_issues": 18, "category": "Browser & Computer Use", "category_rank": 13, "npm_package": "@agentrhq/webcmd", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 302, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.73, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "webcmd", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "https://webcmd.dev", "homepage_icon": "/site-icons/5f028578257e73a2.png", "homepage_icon_for": "https://webcmd.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in benchmarks/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in benchmarks/pyproject.toml", "Found Google Gemini dependency 'google-genai' in benchmarks/pyproject.toml", "README/docs also mention Google Gemini", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@agentrhq/webcmd' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@agentrhq/webcmd", "version": "0.8.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:35Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.5, "trust_score_v2": 66.5, "rank_v2": 457, "rank_v2_delta": 76, "trust_v2_adjustment": 2.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 18.0, "transparency": 8.5, "maintenance": 15.0, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Apache Pinot MCP Server", "repo": "startreedata/mcp-pinot", "display_repo": "", "url": "https://github.com/startreedata/mcp-pinot", "listing_class": "agent", "rank": 458, "previous_rank": 456, "rank_delta": -2, "stars": 17, "stars_fmt": "17", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 38, "commits_low_confidence": false, "score": 57.6, "description": "MCP Server for Apache Pinot", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 268, "npm_package": "", "crate_package": "", "pypi_package": "mcp-pinot-server", "docker_image": "ghcr.io/startreedata/mcp-pinot:4.0.0", "vscode_extension": "", "weekly_downloads": 41, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:44:27Z", "slug": "apache-pinot-mcp-server", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/startree-pinot/.claude-plugin/plugin.json)", "Found credential/config marker 'PINOT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/startree-pinot/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-pinot-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-pinot-server", "version": "4.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:17Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.4, "trust_score_v2": 66.4, "rank_v2": 458, "rank_v2_delta": 180, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 10.8, "transparency": 14.1, "maintenance": 18.4, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AutoGPT", "repo": "Significant-Gravitas/AutoGPT", "display_repo": "", "url": "https://github.com/Significant-Gravitas/AutoGPT", "listing_class": "agent", "rank": 459, "previous_rank": 453, "rank_delta": -6, "stars": 187530, "stars_fmt": "187.5k", "forks": 45945, "forks_fmt": "45.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 436, "commits_low_confidence": false, "score": 100.0, "description": "AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.", "language": "Python", "open_issues": 359, "category": "Agent Frameworks", "category_rank": 38, "npm_package": "", "crate_package": "", "pypi_package": "agpt", "docker_image": "", "vscode_extension": "", "weekly_downloads": 17, "dl_source": "pypi", "hn_mentions_30d": 338, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.99, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:43:24Z", "slug": "autogpt", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://agpt.co", "homepage_icon": "/site-icons/6c37eb3c7e55d070.png", "homepage_icon_for": "https://agpt.co", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: autogpt_platform/backend/backend/blocks/mcp/test_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "E2B", "ElevenLabs", "Firecrawl", "Groq", "OpenAI", "Pinecone", "Postgres", "Redis", "Replicate", "Tavily" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in classic/pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in classic/pyproject.toml", "Found Groq dependency 'groq' in classic/pyproject.toml", "Found Replicate dependency 'replicate' in autogpt_platform/backend/pyproject.toml", "Found ElevenLabs dependency 'elevenlabs' in autogpt_platform/backend/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "browser", "code", "database", "search" ], "confidence": "high", "evidence": [ "Found marketplace path: autogpt_platform/backend/load-tests/tests/marketplace/library-access-test.js", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in classic/pyproject.toml", "Found search dependency 'tavily' in autogpt_platform/backend/pyproject.toml", "Found database dependency 'pg' in autogpt_platform/frontend/package.json", "Found code dependency 'gitpython' in classic/pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'agpt' points to significant-gravitas/auto-gpt (same owner as significant-gravitas/autogpt, not treated as drift)" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 66.4, "trust_score_v2": 66.4, "rank_v2": 459, "rank_v2_delta": -194, "trust_v2_adjustment": -5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 10.8, "transparency": 13.8, "maintenance": 20.0, "adoption": 14.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -2.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ollama", "repo": "ollama/ollama", "display_repo": "", "url": "https://github.com/ollama/ollama", "listing_class": "agent", "rank": 460, "previous_rank": 444, "rank_delta": -16, "stars": 182860, "stars_fmt": "182.9k", "forks": 18233, "forks_fmt": "18.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 107, "commits_low_confidence": false, "score": 99.8, "description": "Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.", "language": "Go", "open_issues": 2566, "category": "LLM Gateways & Infra", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 76, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:40:19Z", "slug": "ollama", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "https://ollama.com", "homepage_icon": "/site-icons/23ec2c6ab8fe1064.png", "homepage_icon_for": "https://ollama.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.4, "trust_score_v2": 66.4, "rank_v2": 460, "rank_v2_delta": -31, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 13.0, "maintenance": 20.0, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Webcomponents MCP Server", "repo": "UI5/webcomponents-mcp-server", "display_repo": "", "url": "https://github.com/UI5/webcomponents-mcp-server", "listing_class": "agent", "rank": 461, "previous_rank": 450, "rank_delta": -11, "stars": 19, "stars_fmt": "19", "forks": 2, "forks_fmt": "2", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.2, "description": "The UI5 Web Components MCP Server improves the developer experience when working with agentic AI and the UI5 Web Components framework.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 269, "npm_package": "@ui5/webcomponents-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 400, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.348, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:23:24Z", "slug": "webcomponents-mcp-server", "full_fetched_at": "2026-10-12T00:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@ui5/webcomponents-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@ui5/webcomponents-mcp-server", "version": "0.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:31Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.4, "trust_score_v2": 66.4, "rank_v2": 461, "rank_v2_delta": 234, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.5, "identity": 18.0, "transparency": 12.1, "maintenance": 9.2, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Plannotator", "repo": "backnotprop/plannotator", "display_repo": "", "url": "https://github.com/backnotprop/plannotator", "listing_class": "skill", "rank": 48, "previous_rank": 55, "rank_delta": 7, "stars": 9355, "stars_fmt": "9.4k", "forks": 702, "forks_fmt": "702", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 313, "commits_low_confidence": false, "score": 87.0, "description": "Annotate and review coding agent plans and code diffs visually, share with your team, send feedback to agents with one click.", "language": "TypeScript", "open_issues": 81, "category": "Agent Skills", "category_rank": 48, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:00:45Z", "slug": "plannotator", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "https://plannotator.ai", "homepage_icon": "/site-icons/bdab82976a5526bb.png", "homepage_icon_for": "https://plannotator.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'modelcontextprotocol' in package.json", "Found MCP dependency 'modelcontextprotocol' in apps/hook/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "Found credential/config marker 'JINA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.3, "trust_score_v2": 66.3, "rank_v2": 48, "rank_v2_delta": 339, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 14.3, "maintenance": 20.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Loop Engineering", "repo": "cobusgreyling/loop-engineering", "display_repo": "", "url": "https://github.com/cobusgreyling/loop-engineering", "listing_class": "skill", "rank": 49, "previous_rank": 48, "rank_delta": -1, "stars": 11510, "stars_fmt": "11.5k", "forks": 1552, "forks_fmt": "1.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 74, "commits_low_confidence": false, "score": 87.6, "description": "Practical patterns, starters & CLI tools for loop engineering with AI coding agents. Design systems that prompt and orchestrate agents (inspired by Addy Osmani and Boris Cherny). Includes loop-audit, loop-init, loop-cost.", "language": "TypeScript", "open_issues": 9, "category": "Agent Skills", "category_rank": 49, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-10T19:15:54Z", "slug": "loop-engineering", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "https://cobusgreyling.github.io/loop-engineering/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .github/workflows/release-loop-mcp-server.yml", "Found MCP-related server path: scripts/issue-bodies/quickstart-mcp-server.md", "Found MCP-related server test path: tools/mcp-server/test/publish.test.mjs", "Found MCP-related server test path: tools/mcp-server/test/server.test.mjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.3, "trust_score_v2": 66.3, "rank_v2": 49, "rank_v2_delta": 372, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 13.8, "maintenance": 19.5, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Keenetic MCP", "repo": "salatmaster/keenetic-mcp", "display_repo": "", "url": "https://github.com/salatmaster/keenetic-mcp", "listing_class": "agent", "rank": 462, "previous_rank": 459, "rank_delta": -3, "stars": 27, "stars_fmt": "27", "forks": 4, "forks_fmt": "4", "last_push": "2026-08-09", "days_ago": 64, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.1, "description": "Keenetic router control for Claude Code, Codex, Cursor and any MCP agent. An MCP server over the router's own RCI API, plus ready-made plugins whose skills teach the agent how the hardware really behaves. Devices, Wi-Fi, VPN routing, isolated segments. Nothing installed on the router.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 270, "npm_package": "keenetic-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 433, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.556, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-12T00:26:34Z", "slug": "keenetic-mcp", "full_fetched_at": "2026-10-12T00:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/keenetic/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'keenetic-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "keenetic-mcp", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:04Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.3, "trust_score_v2": 66.3, "rank_v2": 462, "rank_v2_delta": 224, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.7, "identity": 18.0, "transparency": 12.2, "maintenance": 7.7, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Openbrowser Ai", "repo": "billy-enrizky/openbrowser-ai", "display_repo": "", "url": "https://github.com/billy-enrizky/openbrowser-ai", "listing_class": "skill", "rank": 50, "previous_rank": 50, "rank_delta": 0, "stars": 276, "stars_fmt": "276", "forks": 30, "forks_fmt": "30", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 44, "commits_low_confidence": false, "score": 65.3, "description": "OpenBrowser is a framework for intelligent browser automation. It combines direct CDP communication with a CodeAgent architecture, where the LLM writes Python code executed in a persistent namespace, to navigate, interact with, and extract information from web pages autonomously.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 50, "npm_package": "", "crate_package": "", "pypi_package": "openbrowser-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 239, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.27, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:27:43Z", "slug": "openbrowser-ai", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "https://docs.openbrowser.me/", "homepage_icon": "/site-icons/73c092e32616007e.png", "homepage_icon_for": "https://docs.openbrowser.me/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/mcp/advanced_server.py", "Found MCP-related server path: examples/mcp/simple_server.py", "Found MCP-related server docs path: docs/customize/integrations/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Azure OpenAI", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities", "Found database dependency 'redis' in backend/pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'openbrowser-ai' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openbrowser-ai", "version": "0.1.54" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:46Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.3, "trust_score_v2": 66.3, "rank_v2": 50, "rank_v2_delta": 273, "trust_v2_adjustment": -2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 18.0, "transparency": 11.4, "maintenance": 17.7, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wshobson Agents", "repo": "wshobson/agents", "display_repo": "", "url": "https://github.com/wshobson/agents", "listing_class": "skill", "rank": 51, "previous_rank": 53, "rank_delta": 2, "stars": 40468, "stars_fmt": "40.5k", "forks": 4308, "forks_fmt": "4.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 35, "commits_low_confidence": false, "score": 88.9, "description": "Multi-harness agentic plugin marketplace for Claude Code, Codex, Cursor, OpenCode, GitHub Copilot, Google Antigravity, and Pi", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 51, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.87, "scorecard_score": 6.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-09T10:10:51Z", "slug": "wshobson-agents", "full_fetched_at": "2026-10-12T04:01:59Z", "source_note": "", "github_homepage": "https://sethhobson.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'claude-agent-sdk' in plugins/plugin-eval/pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.2, "trust_score_v2": 66.2, "rank_v2": 51, "rank_v2_delta": 340, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 14.4, "maintenance": 18.2, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AstrBot", "repo": "AstrBotDevs/AstrBot", "display_repo": "", "url": "https://github.com/AstrBotDevs/AstrBot", "listing_class": "agent", "rank": 463, "previous_rank": 458, "rank_delta": -5, "stars": 41777, "stars_fmt": "41.8k", "forks": 3049, "forks_fmt": "3.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 151, "commits_low_confidence": false, "score": 93.9, "description": "AI Agent Assistant & development framework that integrates lots of IM platforms, LLMs, plugins and AI feature, and can be your openclaw alternative. ✨", "language": "Python", "open_issues": 795, "category": "Voice & Conversational", "category_rank": 4, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:26:21Z", "slug": "astrbot", "full_fetched_at": "2026-10-12T04:02:17Z", "source_note": "", "github_homepage": "https://astrbot.app", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: astrbot/builtin_stars/astrbot/.astrbot-plugin/i18n/en-US.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 66.2, "trust_score_v2": 66.2, "rank_v2": 463, "rank_v2_delta": -73, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 20.0, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Gnosis MCP", "repo": "nicholasglazer/gnosis-mcp", "display_repo": "", "url": "https://github.com/nicholasglazer/gnosis-mcp", "listing_class": "agent", "rank": 464, "previous_rank": 447, "rank_delta": -17, "stars": 29, "stars_fmt": "29", "forks": 10, "forks_fmt": "10", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 3, "commits_low_confidence": false, "score": 44.0, "description": "Zero-config MCP server for searchable documentation (SQLite default, PostgreSQL optional)", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 271, "npm_package": "", "crate_package": "", "pypi_package": "gnosis-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 124, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.05, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:12:31Z", "slug": "gnosis-mcp", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://gnosismcp.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'asyncpg' in pyproject.toml", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'gnosis-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "gnosis-mcp", "version": "0.17.5" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:05Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.2, "trust_score_v2": 66.2, "rank_v2": 464, "rank_v2_delta": 167, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 18.0, "transparency": 11.8, "maintenance": 13.3, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Jscpd", "repo": "kucherenko/jscpd", "display_repo": "", "url": "https://github.com/kucherenko/jscpd", "listing_class": "skill", "rank": 52, "previous_rank": 51, "rank_delta": -1, "stars": 6381, "stars_fmt": "6.4k", "forks": 267, "forks_fmt": "267", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 353, "commits_low_confidence": false, "score": 84.1, "description": "Copy/paste detector for source code. 220+ languages, Rust engine, SARIF/HTML/badge reporters, GitHub Action, MCP server for AI agents.", "language": "Rust", "open_issues": 45, "category": "Agent Skills", "category_rank": 52, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 7.4, "scorecard_checks": { "Code-Review": 0, "Maintained": 10, "Security-Policy": 10, "Dangerous-Workflow": 10, "Token-Permissions": 10, "CII-Best-Practices": 5, "Binary-Artifacts": 10, "License": 10, "Pinned-Dependencies": 9, "Packaging": 10, "Fuzzing": 10, "Signed-Releases": 0, "Branch-Protection": 3, "SAST": 10 }, "scorecard_scanned_at": "2026-10-11T16:04:16Z", "slug": "jscpd", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "https://jscpd.dev", "homepage_icon": "/site-icons/f1dcfea1aa6bd3a5.png", "homepage_icon_for": "https://jscpd.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'JSCPD_SEMANTIC_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: fixtures/dead-code-demo/frameworks/detected/plugins/depot-db.js", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.1, "trust_score_v2": 66.1, "rank_v2": 52, "rank_v2_delta": 421, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 14.8, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DeepSeek-Reasonix", "repo": "esengine/DeepSeek-Reasonix", "display_repo": "", "url": "https://github.com/esengine/DeepSeek-Reasonix", "listing_class": "agent", "rank": 465, "previous_rank": 476, "rank_delta": 11, "stars": 35771, "stars_fmt": "35.8k", "forks": 2444, "forks_fmt": "2.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2939, "commits_low_confidence": false, "score": 93.1, "description": "A reliable coding agent for complex software engineering tasks.", "language": "Go", "open_issues": 357, "category": "Coding Agents", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 4, "Signed-Releases": 3, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:30:59Z", "slug": "deepseek-reasonix", "full_fetched_at": "2026-10-12T04:02:32Z", "source_note": "", "github_homepage": "http://reasonix.io/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: internal/contract/tool/mcp_server.go", "Found MCP-related server path: internal/session/control/mcp_servers.go" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (examples/command-notes-kit/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: examples/command-notes-kit/.claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.1, "trust_score_v2": 66.1, "rank_v2": 465, "rank_v2_delta": -34, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BrowserOS", "repo": "browseros-ai/BrowserOS", "display_repo": "", "url": "https://github.com/browseros-ai/BrowserOS", "listing_class": "agent", "rank": 466, "previous_rank": 461, "rank_delta": -5, "stars": 13877, "stars_fmt": "13.9k", "forks": 1487, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 175, "commits_low_confidence": false, "score": 89.7, "description": "🌐 The open-source Agentic browser; alternative to ChatGPT Atlas, Perplexity Comet, Dia.", "language": "TypeScript", "open_issues": 55, "category": "Browser & Computer Use", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T19:48:21Z", "slug": "browseros", "full_fetched_at": "2026-10-12T04:02:16Z", "source_note": "", "github_homepage": "https://BrowserOS.com", "homepage_icon": "/site-icons/75f30d53f811508c.png", "homepage_icon_for": "https://BrowserOS.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/browseros-agent/apps/app/components/mcp/McpServerIcon.tsx", "Found MCP-related server path: packages/browseros-agent/apps/app/lib/mcp/mcpServerStorage.ts", "Found MCP-related server docs path: docs/browseros/troubleshooting/mcp-server-restart.png" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in packages/browseros/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/browseros-agent/scripts/build/plugins/wasm-binary.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 66.1, "trust_score_v2": 66.1, "rank_v2": 466, "rank_v2_delta": 55, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Comet", "repo": "rpamis/comet", "display_repo": "", "url": "https://github.com/rpamis/comet", "listing_class": "skill", "rank": 53, "previous_rank": 52, "rank_delta": -1, "stars": 3179, "stars_fmt": "3.2k", "forks": 304, "forks_fmt": "304", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 25, "commits_low_confidence": false, "score": 75.2, "description": "Comet: agent skill harness for turning ideas into evaluated workflows", "language": "JavaScript", "open_issues": 14, "category": "Agent Skills", "category_rank": 53, "npm_package": "@rpamis/comet", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 976, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:32:25Z", "slug": "comet", "full_fetched_at": "2026-10-12T00:02:13Z", "source_note": "", "github_homepage": "https://docs.comet.rpamis.com", "homepage_icon": "/site-icons/3e0e526e64512206.png", "homepage_icon_for": "https://docs.comet.rpamis.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: domains/comet-plugin/index.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@rpamis/comet' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@rpamis/comet", "version": "0.4.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:13Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.0, "trust_score_v2": 66.0, "rank_v2": 53, "rank_v2_delta": 385, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.3, "identity": 10.8, "transparency": 14.2, "maintenance": 17.6, "adoption": 12.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Herdr", "repo": "herdrdev/herdr", "display_repo": "", "url": "https://github.com/herdrdev/herdr", "listing_class": "skill", "rank": 54, "previous_rank": 49, "rank_delta": -5, "stars": 43571, "stars_fmt": "43.6k", "forks": 3435, "forks_fmt": "3.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 246, "commits_low_confidence": false, "score": 94.2, "description": "the runtime your coding agents live on", "language": "Rust", "open_issues": 321, "category": "Agent Skills", "category_rank": 54, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.86, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-12T06:57:56Z", "slug": "herdr", "full_fetched_at": "2026-10-12T16:02:17Z", "source_note": "", "github_homepage": "https://herdr.dev", "homepage_icon": "/site-icons/506b1bbe789288b3.png", "homepage_icon_for": "https://herdr.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: .pi/extensions/github-issues-autocomplete/index.ts", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 66.0, "trust_score_v2": 66.0, "rank_v2": 54, "rank_v2_delta": 365, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 10.8, "transparency": 13.3, "maintenance": 20.0, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Semantic Kernel", "repo": "microsoft/semantic-kernel", "display_repo": "", "url": "https://github.com/microsoft/semantic-kernel", "listing_class": "agent", "rank": 467, "previous_rank": 468, "rank_delta": 1, "stars": 28654, "stars_fmt": "28.7k", "forks": 4818, "forks_fmt": "4.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 20, "commits_low_confidence": false, "score": 85.3, "description": "Integrate cutting-edge LLM technology quickly and easily into your apps", "language": "C#", "open_issues": 131, "category": "Agent Frameworks", "category_rank": 39, "npm_package": "", "crate_package": "", "pypi_package": "semantic-kernel", "docker_image": "", "vscode_extension": "", "weekly_downloads": 71459, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 2, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:43:30Z", "slug": "semantic-kernel", "full_fetched_at": "2026-10-12T08:02:05Z", "source_note": "", "github_homepage": "https://aka.ms/semantic-kernel", "homepage_icon": "/site-icons/f32e12cc8e0875ff.png", "homepage_icon_for": "https://aka.ms/semantic-kernel", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: python/samples/concepts/mcp/azure_ai_agent_with_local_server.py", "Found MCP-related server path: python/samples/concepts/mcp/local_agent_with_local_server.py", "Found MCP-related server test path: python/tests/assets/test_plugins/TestMCPPlugin/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Azure OpenAI", "Google Gemini", "Mistral AI", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Redis", "Weaviate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in python/pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in python/pyproject.toml", "Found Google Gemini dependency 'google-genai' in python/pyproject.toml", "Found Mistral AI dependency 'mistralai' in python/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: dotnet/samples/Concepts/Plugins/ApiManifestBasedPlugins.cs", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'redis' in python/pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'semantic-kernel' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "semantic-kernel", "version": "1.45.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:05Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 66.0, "trust_score_v2": 66.0, "rank_v2": 467, "rank_v2_delta": -179, "trust_v2_adjustment": -4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.3, "maintenance": 17.3, "adoption": 17.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Multica", "repo": "multica-ai/multica", "display_repo": "", "url": "https://github.com/multica-ai/multica", "listing_class": "agent", "rank": 468, "previous_rank": 465, "rank_delta": -3, "stars": 52588, "stars_fmt": "52.6k", "forks": 6855, "forks_fmt": "6.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 299, "commits_low_confidence": false, "score": 96.1, "description": "Make humans and AI agents work as one team — open-source and self-hostable.", "language": "Go", "open_issues": 1013, "category": "Multi-Agent Systems", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:54:48Z", "slug": "multica", "full_fetched_at": "2026-10-12T08:02:10Z", "source_note": "", "github_homepage": "https://multica.ai", "homepage_icon": "/site-icons/50ed7397f9037769.png", "homepage_icon_for": "https://multica.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: packages/views/agents/components/tabs/mcp-server-dialog.tsx", "Found MCP-related server path: packages/views/common/mcp-server-row.tsx", "Found MCP-related server test path: packages/views/agents/components/tabs/mcp-server-dialog.test.tsx", "Found MCP-related server test path: packages/views/common/mcp-server-row.test.tsx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: examples/plugins/deploy-sentinel/README.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 66.0, "trust_score_v2": 66.0, "rank_v2": 468, "rank_v2_delta": -32, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Odysseus", "repo": "odysseus-dev/odysseus", "display_repo": "", "url": "https://github.com/odysseus-dev/odysseus", "listing_class": "agent", "rank": 469, "previous_rank": 462, "rank_delta": -7, "stars": 92986, "stars_fmt": "93.0k", "forks": 1527, "forks_fmt": "1.5k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 445, "commits_low_confidence": false, "score": 94.2, "description": "Self-hosted AI workspace. ", "language": "Python", "open_issues": 1161, "category": "UI & App Builders", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 12, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 7.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:49:23Z", "slug": "odysseus", "full_fetched_at": "2026-10-12T08:02:13Z", "source_note": "", "github_homepage": "https://odysseus-dev.github.io/odysseus", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp_servers/__init__.py", "Found MCP-related server path: mcp_servers/email_server.py", "Found MCP-related server test path: tests/test_multiple_mcp_servers_timeout.py" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in requirements.txt", "Found Postgres credential/config marker 'DATABASE_URL'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: integrations/codex/.codex-plugin/plugin.json", "Found shell dependency 'subprocess' in setup.py" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 65.9, "trust_score_v2": 65.9, "rank_v2": 469, "rank_v2_delta": -80, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 15.0, "maintenance": 19.7, "adoption": 11.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Design System Extractor", "repo": "freema/mcp-design-system-extractor", "display_repo": "", "url": "https://github.com/freema/mcp-design-system-extractor", "listing_class": "agent", "rank": 470, "previous_rank": 466, "rank_delta": -4, "stars": 70, "stars_fmt": "70", "forks": 14, "forks_fmt": "14", "last_push": "2026-09-19", "days_ago": 23, "weekly_commits": 1, "commits_low_confidence": false, "score": 42.2, "description": "MCP (Model Context Protocol) server that enables AI assistants to interact with Storybook design systems. Extract component HTML, analyze styles, and help with design system adoption and refactoring.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 272, "npm_package": "mcp-design-system-extractor", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 200, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.333, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:08:01Z", "slug": "mcp-design-system-extractor", "full_fetched_at": "2026-10-12T16:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/mcp-servers.png", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude/design-system/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: plugins/claude/design-system/.claude-plugin/plugin.json", "Found browser dependency 'puppeteer' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-design-system-extractor' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-design-system-extractor", "version": "1.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:04Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.9, "trust_score_v2": 65.9, "rank_v2": 470, "rank_v2_delta": 221, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 18.0, "transparency": 10.8, "maintenance": 11.7, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Open SWE", "repo": "langchain-ai/open-swe", "display_repo": "", "url": "https://github.com/langchain-ai/open-swe", "listing_class": "agent", "rank": 471, "previous_rank": 467, "rank_delta": -4, "stars": 11006, "stars_fmt": "11.0k", "forks": 1304, "forks_fmt": "1.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 821, "commits_low_confidence": false, "score": 88.7, "description": "An Open-Source Cloud Software Factory", "language": "Python", "open_issues": 0, "category": "Coding Agents", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:20:27Z", "slug": "open-swe", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://www.langchain.com/blog/open-swe-an-open-source-framework-for-internal-coding-agents", "homepage_icon": "/site-icons/50c70ed46aa9ccd4.png", "homepage_icon_for": "https://www.langchain.com/blog/open-swe-an-open-source-framework-for-internal-coding-agents", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: openswe/mcp/server.py" ] }, "external_service_dependencies": { "providers": [ "Fireworks AI", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Fireworks AI dependency 'fireworks-ai' in pyproject.toml", "Found Postgres dependency 'asyncpg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.8, "trust_score_v2": 65.8, "rank_v2": 471, "rank_v2_delta": -60, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Garak", "repo": "NVIDIA/garak", "display_repo": "", "url": "https://github.com/NVIDIA/garak", "listing_class": "agent", "rank": 472, "previous_rank": 473, "rank_delta": 1, "stars": 9537, "stars_fmt": "9.5k", "forks": 1363, "forks_fmt": "1.4k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 35, "commits_low_confidence": false, "score": 82.6, "description": "the LLM vulnerability scanner", "language": "Python", "open_issues": 273, "category": "Security & Guardrails", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "garak", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9718, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.72, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:17:38Z", "slug": "garak", "full_fetched_at": "2026-10-12T08:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Replicate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Mistral AI dependency 'mistralai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: tests/plugins/__init__.py", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'garak' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "garak", "version": "0.17.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:03Z" }, "evidence_grade": "B", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.7, "trust_score_v2": 65.7, "rank_v2": 472, "rank_v2_delta": -26, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 12.6, "maintenance": 18.1, "adoption": 14.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Crush", "repo": "charmbracelet/crush", "display_repo": "", "url": "https://github.com/charmbracelet/crush", "listing_class": "agent", "rank": 473, "previous_rank": 469, "rank_delta": -4, "stars": 28600, "stars_fmt": "28.6k", "forks": 2329, "forks_fmt": "2.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 120, "commits_low_confidence": false, "score": 92.4, "description": "Glamourous agentic coding for all 💘", "language": "Go", "open_issues": 470, "category": "Coding Agents", "category_rank": 27, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.59, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-06T22:34:16Z", "slug": "crush", "full_fetched_at": "2026-10-12T04:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Azure OpenAI", "DeepSeek", "Google Gemini", "Groq", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 65.6, "trust_score_v2": 65.6, "rank_v2": 473, "rank_v2_delta": -88, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.7, "identity": 10.8, "transparency": 14.4, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pdf MCP", "repo": "jztan/pdf-mcp", "display_repo": "", "url": "https://github.com/jztan/pdf-mcp", "listing_class": "agent", "rank": 474, "previous_rank": 471, "rank_delta": -3, "stars": 150, "stars_fmt": "150", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 200, "commits_low_confidence": false, "score": 68.0, "description": "MCP server that lets Claude Code and other AI agents read and search large PDFs, one file or a whole folder: agentic RAG with hybrid semantic + keyword search, selective page reads, tables, images, OCR, chart data, and multi-column/CJK layouts.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 273, "npm_package": "", "crate_package": "", "pypi_package": "pdf-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1091, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.04, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-10T15:16:20Z", "slug": "pdf-mcp", "full_fetched_at": "2026-10-12T16:02:37Z", "source_note": "", "github_homepage": "https://pdf-mcp.jztan.com", "homepage_icon": "/site-icons/3db6de0cf3f1e13d.png", "homepage_icon_for": "https://pdf-mcp.jztan.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "README/docs also mention Amazon Bedrock", "Found credential/config marker 'PDF_MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in scripts/demo-recorder/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'pdf-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pdf-mcp", "version": "3.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:37Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.6, "trust_score_v2": 65.6, "rank_v2": 474, "rank_v2_delta": 201, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 13.5, "maintenance": 19.7, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Image", "repo": "shinpr/mcp-image", "display_repo": "", "url": "https://github.com/shinpr/mcp-image", "listing_class": "agent", "rank": 475, "previous_rank": 470, "rank_delta": -5, "stars": 172, "stars_fmt": "172", "forks": 39, "forks_fmt": "39", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 21, "commits_low_confidence": false, "score": 61.9, "description": "MCP server for AI image generation and editing with automatic prompt optimization and quality presets. Supports Nano Banana (Gemini), OpenAI GPT Image, and BytePlus Seedream.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 274, "npm_package": "mcp-image", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6983, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.48, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-07T22:43:46Z", "slug": "mcp-image", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency '@google/genai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-image' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-image", "version": "0.18.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:10Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.6, "trust_score_v2": 65.6, "rank_v2": 475, "rank_v2_delta": 193, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.4, "identity": 10.8, "transparency": 13.3, "maintenance": 17.1, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Atlassian", "repo": "sooperset/mcp-atlassian", "display_repo": "", "url": "https://github.com/sooperset/mcp-atlassian", "listing_class": "agent", "rank": 476, "previous_rank": 464, "rank_delta": -12, "stars": 5988, "stars_fmt": "6.0k", "forks": 1392, "forks_fmt": "1.4k", "last_push": "2026-09-19", "days_ago": 23, "weekly_commits": 3, "commits_low_confidence": false, "score": 66.6, "description": "MCP server for Atlassian tools (Confluence, Jira)", "language": "Python", "open_issues": 171, "category": "MCP Servers", "category_rank": 275, "npm_package": "", "crate_package": "", "pypi_package": "mcp-atlassian", "docker_image": "", "vscode_extension": "", "weekly_downloads": 163903, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:57:25Z", "slug": "mcp-atlassian", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://mcp-atlassian.soomiles.com", "homepage_icon": "/site-icons/abae2e362cb08958.png", "homepage_icon_for": "https://mcp-atlassian.soomiles.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'JIRA_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-atlassian' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-atlassian", "version": "0.23.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:28Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.6, "trust_score_v2": 65.6, "rank_v2": 476, "rank_v2_delta": 37, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.1, "maintenance": 12.9, "adoption": 16.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TrueForge", "repo": "truefoundry/trueforge", "display_repo": "", "url": "https://github.com/truefoundry/trueforge", "listing_class": "agent", "rank": 477, "previous_rank": 482, "rank_delta": 5, "stars": 6172, "stars_fmt": "6.2k", "forks": 507, "forks_fmt": "507", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 218, "commits_low_confidence": false, "score": 85.3, "description": "The open-source agent harness - the runtime layer that turns an LLM into a working agent.", "language": "TypeScript", "open_issues": 41, "category": "Agent Frameworks", "category_rank": 40, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T16:45:19Z", "slug": "trueforge", "full_fetched_at": "2026-10-12T16:02:23Z", "source_note": "", "github_homepage": "https://trueforge.dev", "homepage_icon": "/site-icons/8df47c1df0fb59e9.png", "homepage_icon_for": "https://trueforge.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: packages/trueforge-core/src/core/mcp/IMCPServer.ts", "Found MCP-related server path: packages/trueforge-core/src/core/mcp/convertMCPServers.ts", "Found MCP-related server docs path: docs/mcp-servers.mdx", "Found MCP-related server test path: packages/trueforge-core/tests/core/mcp/remoteMcpServer.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in benchmark/setup.py", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: packages/trueforge-ui/src/plugins/trueforge-agent-server-adapter/agentMetricsServer.ts" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.5, "trust_score_v2": 65.5, "rank_v2": 477, "rank_v2_delta": -64, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Gateway", "repo": "agentgateway/agentgateway", "display_repo": "", "url": "https://github.com/agentgateway/agentgateway", "listing_class": "agent", "rank": 478, "previous_rank": 477, "rank_delta": -1, "stars": 5294, "stars_fmt": "5.3k", "forks": 938, "forks_fmt": "938", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 286, "commits_low_confidence": false, "score": 86.1, "description": "Next Generation Agentic Proxy for AI Agents and MCP servers", "language": "Rust", "open_issues": 222, "category": "Protocols & Tool Integration", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 5, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:40:11Z", "slug": "agent-gateway", "full_fetched_at": "2026-10-12T00:02:33Z", "source_note": "", "github_homepage": "https://agentgateway.dev", "homepage_icon": "/site-icons/cc00a3727d13663c.png", "homepage_icon_for": "https://agentgateway.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/mcp-authzen/apps/payments_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: controller/pkg/agentgateway/plugins/a2a_plugin.go", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.5, "trust_score_v2": 65.5, "rank_v2": 478, "rank_v2_delta": -21, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 20.0, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Obscura", "repo": "h4ckf0r0day/obscura", "display_repo": "", "url": "https://github.com/h4ckf0r0day/obscura", "listing_class": "agent", "rank": 479, "previous_rank": 478, "rank_delta": -1, "stars": 28805, "stars_fmt": "28.8k", "forks": 2140, "forks_fmt": "2.1k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 322, "commits_low_confidence": false, "score": 92.2, "description": "The headless browser for AI agents and web scraping", "language": "Rust", "open_issues": 102, "category": "Browser & Computer Use", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.49, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-05T18:07:13Z", "slug": "obscura", "full_fetched_at": "2026-10-12T16:02:12Z", "source_note": "", "github_homepage": "https://obscura.sh", "homepage_icon": "/site-icons/0fc614fe3b3e6f31.png", "homepage_icon_for": "https://obscura.sh", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/Use-the-MCP-server.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OBSCURA_CDP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.5, "trust_score_v2": 65.5, "rank_v2": 479, "rank_v2_delta": 38, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 13.4, "maintenance": 19.9, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ruflo", "repo": "ruvnet/ruflo", "display_repo": "", "url": "https://github.com/ruvnet/ruflo", "listing_class": "agent", "rank": 480, "previous_rank": 463, "rank_delta": -17, "stars": 74411, "stars_fmt": "74.4k", "forks": 8848, "forks_fmt": "8.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1838, "commits_low_confidence": false, "score": 97.6, "description": "🌊 The original agent harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build conversational AI systems. Features adaptive memory, self-learning intelligence, federation, vector RAG integration, and native Claude Code / Codex / Hermes and many more Integrated", "language": "TypeScript", "open_issues": 682, "category": "Multi-Agent Systems", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 6, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T23:40:27Z", "slug": "ruflo", "full_fetched_at": "2026-10-12T08:02:21Z", "source_note": "", "github_homepage": "https://Cognitum.One", "homepage_icon": "/site-icons/2b10944b15cf5ba5.png", "homepage_icon_for": "https://Cognitum.One", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .claude/mcp.json", "Found MCP-related server path: ruflo/src/ruvocal/src/lib/components/mcp/AddServerForm.svelte", "Found MCP-related server test path: tests/docker-regression/scripts/test-mcp-server.sh" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in v3/goal_ui/package.json", "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "filesystem" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/README.md", "README/docs also mention a marketplace plugin/integration surface", "Found filesystem dependency 'fs-extra' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.5, "trust_score_v2": 65.5, "rank_v2": 480, "rank_v2_delta": 27, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 13.3, "maintenance": 20.0, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TradingAgents", "repo": "TauricResearch/TradingAgents", "display_repo": "", "url": "https://github.com/TauricResearch/TradingAgents", "listing_class": "agent", "rank": 481, "previous_rank": 472, "rank_delta": -9, "stars": 110772, "stars_fmt": "110.8k", "forks": 21339, "forks_fmt": "21.3k", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 192, "commits_low_confidence": false, "score": 98.9, "description": "TradingAgents: Multi-Agents LLM Financial Trading Framework", "language": "Python", "open_issues": 42, "category": "Multi-Agent Systems", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 480, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T21:05:00Z", "slug": "tradingagents", "full_fetched_at": "2026-10-12T00:02:19Z", "source_note": "", "github_homepage": "https://arxiv.org/pdf/2412.20138", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "https://arxiv.org/pdf/2412.20138", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Groq", "Mistral AI", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.5, "trust_score_v2": 65.5, "rank_v2": 481, "rank_v2_delta": -167, "trust_v2_adjustment": -4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 12.6, "maintenance": 19.4, "adoption": 15.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Notion Server", "repo": "suekou/mcp-notion-server", "display_repo": "", "url": "https://github.com/suekou/mcp-notion-server", "listing_class": "agent", "rank": 482, "previous_rank": 474, "rank_delta": -8, "stars": 920, "stars_fmt": "920", "forks": 180, "forks_fmt": "180", "last_push": "2026-07-31", "days_ago": 73, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.2, "description": "A Model Context Protocol server for connecting Notion to MCP-compatible clients", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 276, "npm_package": "@suekou/mcp-notion-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 919, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.12, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:35:56Z", "slug": "mcp-notion-server", "full_fetched_at": "2026-10-12T00:02:18Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: src/mcp/server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'NOTION_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@suekou/mcp-notion-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@suekou/mcp-notion-server", "version": "2.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:18Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.5, "trust_score_v2": 65.5, "rank_v2": 482, "rank_v2_delta": 208, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 18.0, "transparency": 11.6, "maintenance": 7.1, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "agent-swarm", "repo": "desplega-ai/agent-swarm", "display_repo": "", "url": "https://github.com/desplega-ai/agent-swarm", "listing_class": "agent", "rank": 483, "previous_rank": 481, "rank_delta": -2, "stars": 876, "stars_fmt": "876", "forks": 119, "forks_fmt": "119", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 539, "commits_low_confidence": false, "score": 77.4, "description": "Your Company Agentic Operating System", "language": "TypeScript", "open_issues": 25, "category": "Multi-Agent Systems", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 6, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T01:54:31Z", "slug": "agent-swarm", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "https://agent-swarm.dev", "homepage_icon": "/site-icons/c1d3c5d7651803a8.png", "homepage_icon_for": "https://agent-swarm.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: apps/ui/src/api/hooks/use-mcp-servers.ts", "Found MCP-related server path: apps/ui/src/pages/mcp-servers/[id]/mcp-oauth-panel.tsx", "Found MCP-related server docs path: docs-site/content/docs/api-reference/mcp-servers.mdx", "Found MCP-related server test path: src/tests/mcp-server-codex-oauth-env.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "E2B", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found E2B dependency 'e2b' in package.json", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.4, "trust_score_v2": 65.4, "rank_v2": 483, "rank_v2_delta": 4, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 10.8, "transparency": 14.1, "maintenance": 20.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Holmesgpt", "repo": "HolmesGPT/holmesgpt", "display_repo": "", "url": "https://github.com/HolmesGPT/holmesgpt", "listing_class": "agent", "rank": 484, "previous_rank": 488, "rank_delta": 4, "stars": 3573, "stars_fmt": "3.6k", "forks": 520, "forks_fmt": "520", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 50, "commits_low_confidence": false, "score": 80.2, "description": "SRE Agent - CNCF Sandbox Project", "language": "Python", "open_issues": 136, "category": "Observability & Evaluation", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "holmesgpt", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2133, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Maintained": 10, "Code-Review": 10, "Security-Policy": 10, "Token-Permissions": 0, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "CII-Best-Practices": 2, "Signed-Releases": 0, "License": 10, "Pinned-Dependencies": 0, "Vulnerabilities": 0, "SAST": 0, "Packaging": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "Branch-Protection": -1, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:32Z", "slug": "holmesgpt", "full_fetched_at": "2026-10-12T04:02:44Z", "source_note": "", "github_homepage": "https://holmesgpt.dev/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: helm/holmes/templates/mcp-servers/aws/_helpers.tpl", "Found MCP-related server path: helm/holmes/templates/mcp-servers/aws/deployment.yaml", "Found MCP-related server docs path: docs/data-sources/oauth-mcp-servers.md", "Found MCP-related server docs path: docs/data-sources/remote-mcp-servers.md" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-cloud-aiplatform' in pyproject.toml", "README/docs also mention Google Gemini", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: holmes/plugins/__init__.py", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'pg' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'holmesgpt' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "holmesgpt", "version": "0.43.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:44Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.4, "trust_score_v2": 65.4, "rank_v2": 484, "rank_v2_delta": -134, "trust_v2_adjustment": -3.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 13.5, "maintenance": 18.8, "adoption": 13.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Conductor", "repo": "conductor-oss/conductor", "display_repo": "", "url": "https://github.com/conductor-oss/conductor", "listing_class": "agent", "rank": 485, "previous_rank": 483, "rank_delta": -2, "stars": 32279, "stars_fmt": "32.3k", "forks": 1031, "forks_fmt": "1.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 55, "commits_low_confidence": false, "score": 87.9, "description": "Conductor is an event driven agentic workflow engine providing durable and highly resilient execution engine for applications and AI Agents", "language": "Java", "open_issues": 165, "category": "Workflow Platforms", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T16:47:04Z", "slug": "conductor", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://docs.conductor-oss.org/", "homepage_icon": "/site-icons/c10b4c45984ec2da.png", "homepage_icon_for": "https://docs.conductor-oss.org/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: grpc-client/src/test/resources/mockito-extensions/org.mockito.plugins.MockMaker", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.4, "trust_score_v2": 65.4, "rank_v2": 485, "rank_v2_delta": -41, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 10.8, "transparency": 13.5, "maintenance": 19.0, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tlive", "repo": "y49/tlive", "display_repo": "", "url": "https://github.com/y49/tlive", "listing_class": "skill", "rank": 55, "previous_rank": 54, "rank_delta": -1, "stars": 215, "stars_fmt": "215", "forks": 31, "forks_fmt": "31", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.4, "description": "Self-hosted remote approvals + live monitoring for Claude Code / Codex — via Telegram, Feishu, or a web terminal. Any subscription or API key.", "language": "TypeScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 55, "npm_package": "tlive", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 15, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.672, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:56:44Z", "slug": "tlive", "full_fetched_at": "2026-10-12T04:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude/plugins/tlive/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'tlive' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "tlive", "version": "5.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:03Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.4, "trust_score_v2": 65.4, "rank_v2": 55, "rank_v2_delta": 584, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.2, "identity": 18.0, "transparency": 11.5, "maintenance": 9.8, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Graft", "repo": "trailhq/Graft", "display_repo": "", "url": "https://github.com/trailhq/Graft", "listing_class": "agent", "rank": 486, "previous_rank": 486, "rank_delta": 0, "stars": 9906, "stars_fmt": "9.9k", "forks": 876, "forks_fmt": "876", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 34, "commits_low_confidence": false, "score": 82.0, "description": "Turbocharge Claude Code, Cursor, Codex, Gemini & every coding agent: faster, cheaper, with contextual understanding specific to your codebase.", "language": "TypeScript", "open_issues": 116, "category": "Protocols & Tool Integration", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 7.1, "scorecard_checks": { "Maintained": 10, "Code-Review": 0, "Dependency-Update-Tool": 10, "Packaging": -1, "Dangerous-Workflow": 10, "Security-Policy": 10, "Binary-Artifacts": 10, "Token-Permissions": 10, "CII-Best-Practices": 0, "Pinned-Dependencies": 8, "Vulnerabilities": 7, "SAST": 9, "Fuzzing": 0, "License": 10, "Branch-Protection": 3, "Signed-Releases": -1, "CI-Tests": 10, "Contributors": 0 }, "scorecard_scanned_at": "2026-10-11T20:04:00Z", "slug": "graft", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "https://trailhq.com/graft", "homepage_icon": "/site-icons/035ded4fd4298894.png", "homepage_icon_for": "https://trailhq.com/graft", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: test/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.3, "trust_score_v2": 65.3, "rank_v2": 486, "rank_v2_delta": -7, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 14.5, "maintenance": 18.2, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sim", "repo": "simstudioai/sim", "display_repo": "", "url": "https://github.com/simstudioai/sim", "listing_class": "agent", "rank": 487, "previous_rank": 492, "rank_delta": 5, "stars": 29811, "stars_fmt": "29.8k", "forks": 3852, "forks_fmt": "3.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 911, "commits_low_confidence": false, "score": 93.5, "description": "Sim is the collaborative workspace to build, deploy, and monitor AI agents and workflows. Used by 100,000+ builders.", "language": "TypeScript", "open_issues": 127, "category": "Workflow Platforms", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:06:26Z", "slug": "sim", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://www.sim.ai", "homepage_icon": "/site-icons/83a7a8dde325fa4a.png", "homepage_icon_for": "https://www.sim.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: apps/sim/app/api/mcp/servers/[id]/refresh/route.ts", "Found MCP-related server path: apps/sim/app/api/mcp/servers/[id]/route.ts", "Found MCP-related server docs path: apps/docs/content/docs/cli/mcp-servers.mdx", "Found MCP-related server docs path: apps/docs/content/docs/cli/workflow-mcp-servers.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Browserbase", "E2B", "Google Gemini", "Groq", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/sim/package.json", "Found Anthropic dependency 'anthropic' in apps/sim/package.json", "Found Google Gemini dependency '@google/genai' in apps/sim/package.json", "Found Groq dependency 'groq' in apps/sim/package.json", "Found Browserbase dependency 'browserbase' in apps/sim/package.json", "Found E2B dependency 'e2b' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'postgres' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.3, "trust_score_v2": 65.3, "rank_v2": 487, "rank_v2_delta": -67, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 10.8, "transparency": 13.2, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Faf MCP", "repo": "Wolfe-Jam/claude-faf-mcp", "display_repo": "", "url": "https://github.com/Wolfe-Jam/claude-faf-mcp", "listing_class": "agent", "rank": 488, "previous_rank": 479, "rank_delta": -9, "stars": 23, "stars_fmt": "23", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 35, "commits_low_confidence": false, "score": 56.4, "description": "Persistent Project Context for Claude — IANA-registered .faf format · Core 14 MCP tools (30 with FAF_TOOLS=all) + 2 prompts · MCP Registry #2759", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 277, "npm_package": "claude-faf-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 554, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.72, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-28T11:58:42Z", "slug": "claude-faf-mcp", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "https://faf.one", "homepage_icon": "/site-icons/3da06801c9d5baf9.png", "homepage_icon_for": "https://faf.one", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .well-known/mcp/server-card.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in examples/test-project/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'claude-faf-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "claude-faf-mcp", "version": "7.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:40Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.3, "trust_score_v2": 65.3, "rank_v2": 488, "rank_v2_delta": 258, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 13.2, "maintenance": 17.8, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Go", "repo": "mark3labs/mcp-go", "display_repo": "", "url": "https://github.com/mark3labs/mcp-go", "listing_class": "agent", "rank": 489, "previous_rank": 484, "rank_delta": -5, "stars": 9157, "stars_fmt": "9.2k", "forks": 903, "forks_fmt": "903", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 51, "commits_low_confidence": false, "score": 83.5, "description": "A Go implementation of the Model Context Protocol (MCP), enabling seamless integration between LLM applications and external data sources and tools.", "language": "Go", "open_issues": 19, "category": "Protocols & Tool Integration", "category_rank": 27, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:14:28Z", "slug": "mcp-go", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "http://mcp-go.dev/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.3, "trust_score_v2": 65.3, "rank_v2": 489, "rank_v2_delta": 87, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.5, "identity": 10.8, "transparency": 12.9, "maintenance": 18.6, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Llmfit", "repo": "AlexsJones/llmfit", "display_repo": "", "url": "https://github.com/AlexsJones/llmfit", "listing_class": "skill", "rank": 56, "previous_rank": 57, "rank_delta": 1, "stars": 37844, "stars_fmt": "37.8k", "forks": 2429, "forks_fmt": "2.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 76, "commits_low_confidence": false, "score": 91.7, "description": "Hundreds of models & providers. One command to find what runs on your hardware.", "language": "Rust", "open_issues": 35, "category": "Agent Skills", "category_rank": 56, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:12:26Z", "slug": "llmfit", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: llmfit-tui/src/mcp_server.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.3, "trust_score_v2": 65.3, "rank_v2": 56, "rank_v2_delta": 422, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 19.5, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AG-UI", "repo": "ag-ui-protocol/ag-ui", "display_repo": "", "url": "https://github.com/ag-ui-protocol/ag-ui", "listing_class": "agent", "rank": 490, "previous_rank": 494, "rank_delta": 4, "stars": 16476, "stars_fmt": "16.5k", "forks": 1501, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 664, "commits_low_confidence": false, "score": 90.1, "description": "AG-UI: the Agent-User Interaction Protocol. Bring Agents into Frontend Applications.", "language": "TypeScript", "open_issues": 268, "category": "Protocols & Tool Integration", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.3, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 4, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 3, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:13:07Z", "slug": "ag-ui", "full_fetched_at": "2026-10-12T00:02:42Z", "source_note": "", "github_homepage": "https://ag-ui.com", "homepage_icon": "/site-icons/328d99e5f130dba4.png", "homepage_icon_for": "https://ag-ui.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/dojo/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in apps/dojo/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.2, "trust_score_v2": 65.2, "rank_v2": 490, "rank_v2_delta": -47, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 14.6, "maintenance": 20.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server for Excel", "repo": "sbroenne/mcp-server-excel", "display_repo": "", "url": "https://github.com/sbroenne/mcp-server-excel", "listing_class": "agent", "rank": 491, "previous_rank": 491, "rank_delta": 0, "stars": 816, "stars_fmt": "816", "forks": 98, "forks_fmt": "98", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 176, "commits_low_confidence": false, "score": 76.8, "description": "Automate real Microsoft Excel with AI via MCP Server or CLI — Power Query, DAX, VBA, PivotTables, charts, and 326 operations.", "language": "C#", "open_issues": 18, "category": "MCP Servers", "category_rank": 278, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.87, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-05T01:53:47Z", "slug": "mcp-server-for-excel", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "https://excelmcpserver.dev/", "homepage_icon": "/site-icons/74bafe86e6e90196.png", "homepage_icon_for": "https://excelmcpserver.dev/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/ISSUE_TEMPLATE/mcp_server_issue.yml", "Found MCP-related server path: .github/plugins/excel-mcp/mcp.json", "Found MCP-related server docs path: docs/INSTALLATION-MCP-SERVER.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .github/plugins/excel-cli/README.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.2, "trust_score_v2": 65.2, "rank_v2": 491, "rank_v2_delta": 76, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "IWE", "repo": "iwe-org/iwe", "display_repo": "", "url": "https://github.com/iwe-org/iwe", "listing_class": "agent", "rank": 492, "previous_rank": 485, "rank_delta": -7, "stars": 1768, "stars_fmt": "1.8k", "forks": 93, "forks_fmt": "93", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 14, "commits_low_confidence": false, "score": 67.8, "description": "Markdown knowledge graph — LSP for your editor, CLI + MCP memory for your AI agents", "language": "Rust", "open_issues": 1, "category": "Memory & Knowledge", "category_rank": 29, "npm_package": "", "crate_package": "iwe", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 130, "dl_source": "crates.io", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-09-30T13:23:49Z", "slug": "iwe", "full_fetched_at": "2026-10-11T16:02:20Z", "source_note": "", "github_homepage": "https://iwe.md", "homepage_icon": "/site-icons/ad4b41d7bd31ff33.png", "homepage_icon_for": "https://iwe.md", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "crates.io package 'iwe' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "crates.io", "name": "iwe", "version": "0.26.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:20Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.2, "trust_score_v2": 65.2, "rank_v2": 492, "rank_v2_delta": 256, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 12.6, "maintenance": 16.4, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Octopus", "repo": "nyldn/claude-octopus", "display_repo": "", "url": "https://github.com/nyldn/claude-octopus", "listing_class": "skill", "rank": 57, "previous_rank": 56, "rank_delta": -1, "stars": 4210, "stars_fmt": "4.2k", "forks": 396, "forks_fmt": "396", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 81, "commits_low_confidence": false, "score": 82.6, "description": "Run multiple AI models against the same research, design, or coding task. Surface disagreements before you ship.", "language": "Shell", "open_issues": 6, "category": "Agent Skills", "category_rank": 57, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T22:17:05Z", "slug": "claude-octopus", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server/check-node-version.js", "Found MCP-related server path: mcp-server/dist/index.d.ts", "Found MCP-related server test path: tests/unit/test-mcp-server.sh" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "OpenRouter", "Perplexity", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found xAI Grok credential/config marker 'XAI_API_KEY'", "README/docs also mention xAI Grok", "Found Perplexity credential/config marker 'PERPLEXITY_API_KEY'", "README/docs also mention Perplexity" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/PLUGIN_NAME_LOCK.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.1, "trust_score_v2": 65.1, "rank_v2": 57, "rank_v2_delta": 376, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 10.8, "transparency": 14.1, "maintenance": 19.6, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Eliza", "repo": "elizaOS/eliza", "display_repo": "", "url": "https://github.com/elizaOS/eliza", "listing_class": "agent", "rank": 493, "previous_rank": 480, "rank_delta": -13, "stars": 19577, "stars_fmt": "19.6k", "forks": 5801, "forks_fmt": "5.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8970, "commits_low_confidence": false, "score": 93.3, "description": "Open source agentic operating system", "language": "TypeScript", "open_issues": 3, "category": "Agent Frameworks", "category_rank": 41, "npm_package": "@elizaos/core", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7218, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.53, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-07-11T07:03:08Z", "slug": "eliza", "full_fetched_at": "2026-10-12T04:02:33Z", "source_note": "", "github_homepage": "https://elizaresearch.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: packages/benchmarks/suites/nl2repo/test_files/arxiv-mcp-server/start.md", "Found MCP-related server path: packages/benchmarks/suites/nl2repo/test_files/arxiv-mcp-server/test_case_count.txt", "Found MCP-related server test path: plugins/plugin-agent-orchestrator/src/__tests__/config-mcp-servers.test.ts", "Found MCP-related server test path: plugins/plugin-mcp/__tests__/integration/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found Postgres dependency 'pg' in package.json", "Found Redis dependency 'redis' in packages/app/package.json", "Found credential/config marker 'ELIZA_DEV_CLOUD_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: packages/app/platforms/android/capacitor-cordova-android-plugins/build.gradle", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json", "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@elizaos/core' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.1, "trust_score_v2": 65.1, "rank_v2": 493, "rank_v2_delta": -126, "trust_v2_adjustment": -2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 15.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SigNoz MCP Server", "repo": "SigNoz/signoz-mcp-server", "display_repo": "", "url": "https://github.com/SigNoz/signoz-mcp-server", "listing_class": "agent", "rank": 494, "previous_rank": 510, "rank_delta": 16, "stars": 127, "stars_fmt": "127", "forks": 46, "forks_fmt": "46", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 29, "commits_low_confidence": false, "score": 63.8, "description": "MCP Server for SigNoz", "language": "Go", "open_issues": 8, "category": "MCP Servers", "category_rank": 279, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/signoz/signoz-mcp-server:v0.11.0", "vscode_extension": "", "weekly_downloads": 87762, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-07T10:03:58Z", "slug": "signoz-mcp-server", "full_fetched_at": "2026-10-12T00:02:11Z", "source_note": "", "github_homepage": "https://signoz.io/docs/ai/signoz-mcp-server/", "homepage_icon": "/site-icons/8c123ba96d860b9a.png", "homepage_icon_for": "https://signoz.io/docs/ai/signoz-mcp-server/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: internal/mcp-server/contract_budget_test.go", "Found MCP-related server path: internal/mcp-server/docs_http_test.go", "Found MCP dependency 'modelcontextprotocol' in tools/mcp-ci/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SIGNOZ_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.1, "trust_score_v2": 65.1, "rank_v2": 494, "rank_v2_delta": 41, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 17.9, "adoption": 11.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Codex Control Plane MCP", "repo": "aresyn/codex-control-plane-mcp", "display_repo": "", "url": "https://github.com/aresyn/codex-control-plane-mcp", "listing_class": "agent", "rank": 495, "previous_rank": 490, "rank_delta": -5, "stars": 124, "stars_fmt": "124", "forks": 5, "forks_fmt": "5", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.6, "description": "Durable MCP control plane for long-running Codex Desktop tasks", "language": "Python", "open_issues": 8, "category": "MCP Servers", "category_rank": 280, "npm_package": "", "crate_package": "", "pypi_package": "codex-control-plane-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 61, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.067, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:46:37Z", "slug": "codex-control-plane-mcp", "full_fetched_at": "2026-10-12T12:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'codex-control-plane-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "codex-control-plane-mcp", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:23Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 65.1, "trust_score_v2": 65.1, "rank_v2": 495, "rank_v2_delta": 258, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.3, "identity": 18.0, "transparency": 11.6, "maintenance": 9.8, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCPProxy", "repo": "smart-mcp-proxy/mcpproxy-go", "display_repo": "", "url": "https://github.com/smart-mcp-proxy/mcpproxy-go", "listing_class": "agent", "rank": 496, "previous_rank": 496, "rank_delta": 0, "stars": 388, "stars_fmt": "388", "forks": 59, "forks_fmt": "59", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 241, "commits_low_confidence": false, "score": 73.8, "description": "Supercharge AI Agents, Safely", "language": "Go", "open_issues": 19, "category": "MCP Servers", "category_rank": 281, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 4, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:36:31Z", "slug": "mcpproxy", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "https://mcpproxy.app", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: internal/server/mcp_server_view.go", "Found MCP-related server test path: tests/malicious-mcp-server/.gitignore", "Found MCP-related server test path: tests/malicious-mcp-server/index.js" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: specs/039-security-scanner-plugins/autonomous_summary.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "B", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.0, "trust_score_v2": 65.0, "rank_v2": 496, "rank_v2_delta": 81, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.7, "maintenance": 20.0, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Maya MCP", "repo": "GimbalGoats/GG_MayaMCP", "display_repo": "", "url": "https://github.com/GimbalGoats/GG_MayaMCP", "listing_class": "agent", "rank": 497, "previous_rank": 499, "rank_delta": 2, "stars": 25, "stars_fmt": "25", "forks": 6, "forks_fmt": "6", "last_push": "2026-08-14", "days_ago": 59, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.2, "description": "Local, typed MCP server for controlling Autodesk Maya via commandPort", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 282, "npm_package": "", "crate_package": "", "pypi_package": "maya-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 183, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.28, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:01:11Z", "slug": "maya-mcp", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "https://gimbalgoats.github.io/GG_MayaMCP/", "homepage_icon": "/site-icons/45922c1ae14260a4.png", "homepage_icon_for": "https://gimbalgoats.github.io/GG_MayaMCP/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'maya-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "maya-mcp", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:07Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 65.0, "trust_score_v2": 65.0, "rank_v2": 497, "rank_v2_delta": 261, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 18.0, "transparency": 12.2, "maintenance": 8.1, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Korea Stock MCP", "repo": "jjlabsio/korea-stock-mcp", "display_repo": "", "url": "https://github.com/jjlabsio/korea-stock-mcp", "listing_class": "agent", "rank": 498, "previous_rank": 512, "rank_delta": 14, "stars": 177, "stars_fmt": "177", "forks": 39, "forks_fmt": "39", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 0, "commits_low_confidence": true, "score": 45.9, "description": "MCP Server for Korean stock analysis. 한국 주식 분석을 위한 MCP 서버입니다. ", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 283, "npm_package": "korea-stock-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 130, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T12:04:13Z", "slug": "korea-stock-mcp", "full_fetched_at": "2026-10-12T16:02:33Z", "source_note": "", "github_homepage": "https://korea-stock-mcp-landing.vercel.app/", "homepage_icon": "/site-icons/70dd027bafae2282.png", "homepage_icon_for": "https://korea-stock-mcp-landing.vercel.app/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DART_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'korea-stock-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "korea-stock-mcp", "version": "1.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:33Z" }, "evidence_grade": "B", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "ISC", "license_type": "open", "license_override": "", "trust_score": 65.0, "trust_score_v2": 65.0, "rank_v2": 498, "rank_v2_delta": 215, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 18.0, "transparency": 10.7, "maintenance": 12.0, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "arcade-mcp", "repo": "ArcadeAI/arcade-mcp", "display_repo": "", "url": "https://github.com/ArcadeAI/arcade-mcp", "listing_class": "agent", "rank": 499, "previous_rank": 502, "rank_delta": 3, "stars": 1049, "stars_fmt": "1.0k", "forks": 120, "forks_fmt": "120", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 12, "commits_low_confidence": false, "score": 66.4, "description": "MCP Server Framework and Tool Development library for building custom capabilities into agents. ", "language": "Python", "open_issues": 12, "category": "Protocols & Tool Integration", "category_rank": 29, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:36:32Z", "slug": "arcade-mcp", "full_fetched_at": "2026-10-12T08:02:45Z", "source_note": "", "github_homepage": "https://docs.arcade.dev", "homepage_icon": "/site-icons/6d5e1321ef798748.png", "homepage_icon_for": "https://docs.arcade.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/evals/eval_http_mcp_server.py", "Found MCP-related server path: examples/evals/eval_stdio_mcp_server.py", "Found MCP-related server test path: libs/tests/arcade_mcp_server/__init__.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 499, "rank_v2_delta": 73, "trust_v2_adjustment": 1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.3, "identity": 10.8, "transparency": 14.8, "maintenance": 16.2, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google Workspace MCP", "repo": "taylorwilsdon/google_workspace_mcp", "display_repo": "", "url": "https://github.com/taylorwilsdon/google_workspace_mcp", "listing_class": "agent", "rank": 500, "previous_rank": 495, "rank_delta": -5, "stars": 3326, "stars_fmt": "3.3k", "forks": 1039, "forks_fmt": "1.0k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 354, "commits_low_confidence": false, "score": 84.7, "description": "Control Gmail, Google Calendar, Docs, Sheets, Slides, Chat, Forms, Tasks, Search & Drive with AI - Comprehensive Google Workspace MCP Server & CLI Tool", "language": "Python", "open_issues": 90, "category": "MCP Servers", "category_rank": 284, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 6.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 2, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:13:22Z", "slug": "google-workspace-mcp", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://workspacemcp.com", "homepage_icon": "/site-icons/7f5fab490ae03b44.png", "homepage_icon_for": "https://workspacemcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP-related server path: fastmcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 500, "rank_v2_delta": 80, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 14.4, "maintenance": 19.8, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Better Telegram MCP", "repo": "n24q02m/better-telegram-mcp", "display_repo": "", "url": "https://github.com/n24q02m/telegram", "listing_class": "agent", "rank": 501, "previous_rank": 489, "rank_delta": -12, "stars": 11, "stars_fmt": "11", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 19, "commits_low_confidence": false, "score": 51.6, "description": "Telegram for AI agents -- messages, chats, media, and contacts across both bot and full user-account modes.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 285, "npm_package": "", "crate_package": "", "pypi_package": "better-telegram-mcp", "docker_image": "docker.io/n24q02m/better-telegram-mcp:latest", "vscode_extension": "", "weekly_downloads": 17660, "dl_source": "docker+pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.8, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:47:20Z", "slug": "better-telegram-mcp", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://mcp.n24q02m.com/servers/better-telegram-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in pyproject.toml", "Found credential/config marker 'TELEGRAM_BOT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'better-telegram-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "better-telegram-mcp", "version": "4.22.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 501, "rank_v2_delta": 203, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 13.1, "maintenance": 17.2, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenExecutive", "repo": "SenteLabsAI/OpenExecutive", "display_repo": "", "url": "https://github.com/SenteLabsAI/OpenExecutive", "listing_class": "agent", "rank": 502, "previous_rank": 504, "rank_delta": 2, "stars": 5585, "stars_fmt": "5.6k", "forks": 595, "forks_fmt": "595", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 428, "commits_low_confidence": false, "score": 85.4, "description": "AI-powered virtual executive team — a single coherent executive persona backed by 8 specialist agents (FastAPI + Next.js).", "language": "Python", "open_issues": 4, "category": "Multi-Agent Systems", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-03T13:22:09Z", "slug": "openexecutive", "full_fetched_at": "2026-10-12T16:02:16Z", "source_note": "", "github_homepage": "https://openexecutive.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/core/mcp_servers.json.example", "Found MCP-related server path: packages/core/openexecutive/architecture/prebuilt/mcp_server.json", "Found MCP-related server test path: packages/core/tests/unit/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in packages/core/pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 502, "rank_v2_delta": 20, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.0, "maintenance": 20.0, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Voyager", "repo": "voyager-crew/voyager", "display_repo": "", "url": "https://github.com/voyager-crew/voyager", "listing_class": "skill", "rank": 58, "previous_rank": 58, "rank_delta": 0, "stars": 20360, "stars_fmt": "20.4k", "forks": 683, "forks_fmt": "683", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 914, "commits_low_confidence": false, "score": 89.0, "description": "Enhancement suite for Gemini, AI Studio, Claude, ChatGPT & DeepSeek — plus a prompt manager for any website, DeepSeek Harness included. / 面向 Gemini、AI Studio、Claude、ChatGPT 与 DeepSeek 的增强套件；其中的提示词管理器可用于任意网站，如 DeepSeek Harness。", "language": "TypeScript", "open_issues": 13, "category": "Agent Skills", "category_rank": 58, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2112, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 7, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:12:20Z", "slug": "voyager", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://voyager.nagi.fun/en", "homepage_icon": "/site-icons/a04f74e9c159c40c.png", "homepage_icon_for": "https://voyager.nagi.fun/en", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/create-voyager-plugin/SKILL.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 58, "rank_v2_delta": 427, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 12.9, "maintenance": 19.9, "adoption": 14.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Chroma", "repo": "chroma-core/chroma", "display_repo": "", "url": "https://github.com/chroma-core/chroma", "listing_class": "agent", "rank": 503, "previous_rank": 505, "rank_delta": 2, "stars": 29485, "stars_fmt": "29.5k", "forks": 2561, "forks_fmt": "2.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 41, "commits_low_confidence": false, "score": 87.8, "description": "Search infrastructure for AI", "language": "Rust", "open_issues": 362, "category": "Memory & Knowledge", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "chromadb", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1849738, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Code-Review": 9, "Maintained": 10, "CII-Best-Practices": 0, "Dangerous-Workflow": 10, "Security-Policy": 0, "Token-Permissions": 0, "License": 10, "Binary-Artifacts": 10, "Branch-Protection": -1, "Signed-Releases": 0, "Fuzzing": 0, "Packaging": 10, "SAST": 0, "Pinned-Dependencies": 0 }, "scorecard_scanned_at": "2026-10-12T04:06:20Z", "slug": "chroma", "full_fetched_at": "2026-10-12T04:02:22Z", "source_note": "", "github_homepage": "https://www.trychroma.com/", "homepage_icon": "/site-icons/2d2db827b2f57d9d.png", "homepage_icon_for": "https://www.trychroma.com/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: rust/foundation-api/src/routes/mcp/server.rs" ] }, "external_service_dependencies": { "providers": [ "Cohere", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in clients/js/package.json", "Found Google Gemini dependency '@google/generative-ai' in clients/js/package.json", "Found Cohere dependency 'cohere-ai' in clients/js/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'chromadb' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "chromadb", "version": "1.5.9" } ], "found": [ { "id": "GHSA-36p7-vc44-83pf", "aliases": [ "CVE-2026-45833", "PYSEC-2026-3814" ], "summary": "ChromaDB has a code injection vulnerability", "severity": "CRITICAL", "published": "2026-06-12", "package": "chromadb", "version": "1.5.9" }, { "id": "GHSA-f4j7-r4q5-qw2c", "aliases": [ "CVE-2026-45829", "PYSEC-2026-311" ], "summary": "ChromaDB Python project has a pre-authentication code injection vulnerability", "severity": "CRITICAL", "published": "2026-05-18", "package": "chromadb", "version": "1.5.9" }, { "id": "GHSA-2wm9-hf6c-p5cr", "aliases": [ "CVE-2026-45830", "PYSEC-2026-3813" ], "summary": "ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection", "severity": "HIGH", "published": "2026-06-12", "package": "chromadb", "version": "1.5.9" }, { "id": "GHSA-xph7-9rjv-w5fr", "aliases": [ "CVE-2026-45831", "PYSEC-2026-3815" ], "summary": "ChromaDB's SimpleRBACAuthorizationProvider doesn't check which tenant, database, or collection a permission applies to", "severity": "HIGH", "published": "2026-06-12", "package": "chromadb", "version": "1.5.9" } ], "worst": "CRITICAL", "checked_at": "2026-10-12T04:02:22Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 503, "rank_v2_delta": -260, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 10.8, "transparency": 12.8, "maintenance": 18.5, "adoption": 19.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Lobehub", "repo": "lobehub/lobehub", "display_repo": "", "url": "https://github.com/lobehub/lobehub", "listing_class": "skill", "rank": 59, "previous_rank": 59, "rank_delta": 0, "stars": 83170, "stars_fmt": "83.2k", "forks": 15973, "forks_fmt": "16.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 936, "commits_low_confidence": false, "score": 99.0, "description": "🤯 LobeHub is your Chief Agent Operator, organizing your agents into 7×24 operations by hiring, scheduling, and reporting on your entire AI team.", "language": "TypeScript", "open_issues": 392, "category": "Agent Skills", "category_rank": 59, "npm_package": "@lobehub/lobehub", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 673, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T17:58:28Z", "slug": "lobehub", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "https://lobehub.com", "homepage_icon": "/site-icons/e80827535fe997ad.png", "homepage_icon_for": "https://lobehub.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/openapi/src/controllers/mcp-server.controller.ts", "Found MCP-related server path: packages/openapi/src/routes/mcp-servers.route.ts", "Found MCP-related server test path: packages/openapi/src/services/mcp-server.service.test.ts", "Found MCP-related server test path: packages/openapi/src/types/mcp-server.type.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Google Gemini dependency '@google/genai' in package.json", "Found Postgres dependency 'pg' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: packages/builtin-tool-agent-builder/src/client/Inspector/InstallPlugin/index.tsx", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in e2e/package.json", "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@lobehub/lobehub' points to lobehub/lobe-chat (same owner as lobehub/lobehub, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@lobehub/lobehub", "version": "2.1.26" } ], "found": [ { "id": "GHSA-xmwj-c75x-6346", "aliases": [ "CVE-2026-54157" ], "summary": "LobeHub: Unauthenticated SSRF in `/webapi/proxy`", "severity": "CRITICAL", "published": "2026-06-16", "package": "@lobehub/lobehub", "version": "2.1.26" }, { "id": "GHSA-xq4x-622m-q8fq", "aliases": [ "CVE-2026-42045" ], "summary": "LobeHub has a Cross-Site Scripting issue that escalates to Remote Code Execution", "severity": "MODERATE", "published": "2026-05-05", "package": "@lobehub/lobehub", "version": "2.1.26" }, { "id": "GHSA-5mwj-v5jw-5c97", "aliases": [ "CVE-2026-39411" ], "summary": "LobeHub: Unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header", "severity": "MODERATE", "published": "2026-04-08", "package": "@lobehub/lobehub", "version": "2.1.26" } ], "worst": "CRITICAL", "checked_at": "2026-10-11T20:02:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 59, "rank_v2_delta": 290, "trust_v2_adjustment": -1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 12.0, "maintenance": 20.0, "adoption": 15.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nocobase", "repo": "nocobase/nocobase", "display_repo": "", "url": "https://github.com/nocobase/nocobase", "listing_class": "agent", "rank": 504, "previous_rank": 506, "rank_delta": 2, "stars": 24542, "stars_fmt": "24.5k", "forks": 2910, "forks_fmt": "2.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 79, "commits_low_confidence": false, "score": 91.1, "description": "NocoBase is an open-source AI + no-code platform for building business systems fast. Instead of generating everything from scratch, AI works on top of production-proven infrastructure and a WYSIWYG no-code interface, so you get both speed and reliability.", "language": "TypeScript", "open_issues": 118, "category": "Workflow Platforms", "category_rank": 12, "npm_package": "nocobase", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 19, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 3.9, "scorecard_checks": { "Code-Review": 0, "Maintained": 10, "CII-Best-Practices": 0, "Security-Policy": 10, "License": 9, "Token-Permissions": 0, "Dangerous-Workflow": 0, "Signed-Releases": -1, "Branch-Protection": -1, "Binary-Artifacts": 10, "Packaging": 10, "Pinned-Dependencies": 0, "Fuzzing": 0, "SAST": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:13Z", "slug": "nocobase", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://www.nocobase.com", "homepage_icon": "/site-icons/1d5bc72878526303.png", "homepage_icon_for": "https://www.nocobase.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: packages/plugins/@nocobase/plugin-mcp-server/.npmignore", "Found MCP-related server path: packages/plugins/@nocobase/plugin-mcp-server/README.md", "Found MCP-related server docs path: docs/docs/cn/plugins/@nocobase/plugin-mcp-server/index.md", "Found MCP-related server docs path: docs/docs/de/plugins/@nocobase/plugin-mcp-server/index.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/core/ai/package.json", "Found Anthropic dependency 'anthropic' in packages/core/ai/package.json", "Found Google Gemini dependency 'google-genai' in packages/core/ai/package.json", "Found DeepSeek dependency 'deepseek' in packages/core/ai/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: docs/docs/cn/api/cli/license/plugins/clean.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'nocobase' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "nocobase", "version": "0.1.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:25Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 504, "rank_v2_delta": 97, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 11.8, "maintenance": 19.6, "adoption": 12.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Yuque MCP Server", "repo": "yuque/yuque-mcp-server", "display_repo": "", "url": "https://github.com/yuque/yuque-mcp-server", "listing_class": "agent", "rank": 505, "previous_rank": 507, "rank_delta": 2, "stars": 249, "stars_fmt": "249", "forks": 27, "forks_fmt": "27", "last_push": "2026-07-15", "days_ago": 89, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.7, "description": "Yuque MCP Server - Model Context Protocol server for Yuque API", "language": "TypeScript", "open_issues": 12, "category": "MCP Servers", "category_rank": 286, "npm_package": "yuque-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 324, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.505, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:44:07Z", "slug": "yuque-mcp-server", "full_fetched_at": "2026-10-12T04:02:30Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/mcp/server-manifest-contract.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'YUQUE_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'yuque-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "yuque-mcp", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:30Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 505, "rank_v2_delta": 210, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.9, "identity": 18.0, "transparency": 11.8, "maintenance": 6.1, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Npm Sentinel MCP", "repo": "Nekzus/npm-sentinel-mcp", "display_repo": "", "url": "https://github.com/Nekzus/npm-sentinel-mcp", "listing_class": "agent", "rank": 506, "previous_rank": 500, "rank_delta": -6, "stars": 18, "stars_fmt": "18", "forks": 10, "forks_fmt": "10", "last_push": "2026-08-24", "days_ago": 49, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.8, "description": "A powerful Model Context Protocol (MCP) server that revolutionizes NPM package analysis through AI.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 287, "npm_package": "@nekzus/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 385, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:45:57Z", "slug": "npm-sentinel-mcp", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@nekzus/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@nekzus/mcp-server", "version": "1.26.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 506, "rank_v2_delta": 256, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 18.0, "transparency": 11.7, "maintenance": 8.7, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Screaming Frog SEO Spider MCP Server", "repo": "bzsasson/screaming-frog-mcp", "display_repo": "", "url": "https://github.com/bzsasson/screaming-frog-mcp", "listing_class": "agent", "rank": 507, "previous_rank": 501, "rank_delta": -6, "stars": 92, "stars_fmt": "92", "forks": 17, "forks_fmt": "17", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.8, "description": "Headless MCP server for Screaming Frog SEO Spider – run crawls, export and analyze crawl data via the CLI. Small locked-down tool surface for scheduled audits, CI, and unattended AI agents.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 288, "npm_package": "", "crate_package": "", "pypi_package": "screaming-frog-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 123, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.104, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T17:06:49Z", "slug": "screaming-frog-seo-spider-mcp-server", "full_fetched_at": "2026-10-12T12:02:48Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'screaming-frog-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "screaming-frog-mcp", "version": "0.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:48Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.9, "trust_score_v2": 64.9, "rank_v2": 507, "rank_v2_delta": 253, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 18.0, "transparency": 11.6, "maintenance": 9.2, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CAMEL", "repo": "camel-ai/camel", "display_repo": "", "url": "https://github.com/camel-ai/camel", "listing_class": "agent", "rank": 508, "previous_rank": 530, "rank_delta": 22, "stars": 17873, "stars_fmt": "17.9k", "forks": 2113, "forks_fmt": "2.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 4, "commits_low_confidence": true, "score": 74.7, "description": "🐫 CAMEL: The first and the best multi-agent framework. Finding the Scaling Law of Agents. https://www.camel-ai.org", "language": "Python", "open_issues": 263, "category": "Multi-Agent Systems", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "camel-ai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 20129, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.56, "scorecard_score": 6.8, "scorecard_checks": { "Security-Policy": 10, "Code-Review": 3, "Maintained": 10, "Token-Permissions": 9, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Signed-Releases": 0, "Dependency-Update-Tool": 10, "Vulnerabilities": 0, "Pinned-Dependencies": 5, "Packaging": 10, "License": 10, "SAST": 10, "Fuzzing": 0, "Branch-Protection": -1, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:24Z", "slug": "camel", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "https://docs.camel-ai.org/", "homepage_icon": "/site-icons/49ddce4f1ecb4767.png", "homepage_icon_for": "https://docs.camel-ai.org/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/agents/mcp_agent/mcp_servers_config.json", "Found MCP-related server path: examples/toolkits/mcp/mcp_arxiv_toolkit/arxiv_toolkit_server.py", "Found MCP-related server docs path: docs/mcp/camel_toolkits_as_an_mcp_server.md", "Found MCP-related server docs path: docs/mcp/export_camel_agent_as_mcp_server.md" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "E2B", "Firecrawl", "Google Gemini", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Qdrant", "Redis", "Tavily", "Weaviate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Mistral AI dependency 'mistralai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'pg' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'camel-ai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "camel-ai", "version": "0.2.90" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:29Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.8, "trust_score_v2": 64.8, "rank_v2": 508, "rank_v2_delta": -47, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.3, "identity": 10.8, "transparency": 14.3, "maintenance": 13.4, "adoption": 15.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mastra", "repo": "mastra-ai/mastra", "display_repo": "", "url": "https://github.com/mastra-ai/mastra", "listing_class": "agent", "rank": 509, "previous_rank": 493, "rank_delta": -16, "stars": 28738, "stars_fmt": "28.7k", "forks": 2963, "forks_fmt": "3.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1775, "commits_low_confidence": false, "score": 92.9, "description": "Mastra is the modern TypeScript framework for AI-powered applications and agents.", "language": "TypeScript", "open_issues": 276, "category": "Agent Frameworks", "category_rank": 42, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 99, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.85, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 9, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:56:54Z", "slug": "mastra", "full_fetched_at": "2026-10-12T04:02:52Z", "source_note": "", "github_homepage": "https://mastra.ai", "homepage_icon": "/site-icons/9c46081850e39b4f.png", "homepage_icon_for": "https://mastra.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: client-sdks/react/src/hooks/mcps/use-mcp-server-tool.ts", "Found MCP-related server docs path: docs/src/content/en/reference/tools/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "filesystem" ], "confidence": "high", "evidence": [ "Found declared path: deployers/cloudflare/src/plugins/__fixtures__/basic.js", "README/docs also mention a declared plugin/integration surface", "Found filesystem dependency 'fs-extra' in docs/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 64.8, "trust_score_v2": 64.8, "rank_v2": 509, "rank_v2_delta": -39, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 13.0, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ghidra MCP", "repo": "bethington/ghidra-mcp", "display_repo": "", "url": "https://github.com/bethington/ghidra-mcp", "listing_class": "agent", "rank": 510, "previous_rank": 508, "rank_delta": -2, "stars": 5509, "stars_fmt": "5.5k", "forks": 300, "forks_fmt": "300", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 139, "commits_low_confidence": false, "score": 83.6, "description": "Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention enforcement, batch operations, Ghidra Server integration, and Docker deployment.", "language": "Java", "open_issues": 16, "category": "MCP Servers", "category_rank": 289, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 7, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:44:24Z", "slug": "ghidra-mcp", "full_fetched_at": "2026-10-12T04:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GHIDRA_MCP_INBOUND_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/main/java/ghidra/app/plugin/core/archive/ArchiveBridge.java", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.7, "trust_score_v2": 64.7, "rank_v2": 510, "rank_v2_delta": 29, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 14.3, "maintenance": 19.8, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Anythingmcp", "repo": "HelpCode-ai/anythingmcp", "display_repo": "", "url": "https://github.com/HelpCode-ai/anythingmcp", "listing_class": "agent", "rank": 511, "previous_rank": 513, "rank_delta": 2, "stars": 730, "stars_fmt": "730", "forks": 84, "forks_fmt": "84", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 379, "commits_low_confidence": false, "score": 76.2, "description": "Open-source, self-hosted MCP gateway: turn any REST/OpenAPI, SOAP, GraphQL, OData or SQL API into MCP tools for Claude, ChatGPT & Copilot. 331 connectors incl. SAP S/4HANA & Business One, ERP, e-commerce.", "language": "TypeScript", "open_issues": 35, "category": "MCP Servers", "category_rank": 290, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-10T23:19:19Z", "slug": "anythingmcp", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "https://anythingmcp.com", "homepage_icon": "/site-icons/90e7cacf269cb69d.png", "homepage_icon_for": "https://anythingmcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/backend/prisma/migrations/20260303_multi_mcp_servers/migration.sql", "Found MCP-related server path: packages/backend/prisma/migrations/20260304135618_add_mcp_server_to_invocations/migration.sql", "Found MCP-related server test path: packages/frontend/tests/e2e/mcp-server-assignments.spec.ts" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'pg' in packages/backend/package.json", "README/docs also mention Postgres", "Found credential/config marker 'LOGIN_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in scripts/demo-video/director/package.json", "Found database dependency 'pg' in packages/backend/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 64.7, "trust_score_v2": 64.7, "rank_v2": 511, "rank_v2_delta": 14, "trust_v2_adjustment": 0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 13.8, "maintenance": 20.0, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MiniMax Code", "repo": "MiniMax-AI/minimax-code", "display_repo": "", "url": "https://github.com/MiniMax-AI/minimax-code", "listing_class": "agent", "rank": 512, "previous_rank": 1344, "rank_delta": 832, "stars": 2021, "stars_fmt": "2.0k", "forks": 254, "forks_fmt": "254", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 155, "commits_low_confidence": false, "score": 80.9, "description": "An open-source coding agent for your terminal, powered by MiniMax.", "language": "TypeScript", "open_issues": 156, "category": "Coding Agents", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.96, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:09:23Z", "slug": "minimax-code", "full_fetched_at": "2026-10-12T12:02:37Z", "source_note": "", "github_homepage": "https://agent.minimax.io/download", "homepage_icon": "/site-icons/bdddb1a5cb7052f0.png", "homepage_icon_for": "https://agent.minimax.io/download", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/agent-tools/src/desktop/matrix-mcp-server.ts", "Found MCP-related server path: packages/local-runtime-v2/src/service/mcp/runtime/session-servers.ts", "Found MCP-related server test path: packages/agent-modules/mcp/test/connection-pool-server-override.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCODE_PROVIDER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/local-runtime-v2/src/infra/db/migrations/plugin/migration-0005-adopt-plugin-state.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.7, "trust_score_v2": 64.7, "rank_v2": 512, "rank_v2_delta": 28, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.4, "maintenance": 19.9, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Marvin", "repo": "PrefectHQ/marvin", "display_repo": "", "url": "https://github.com/PrefectHQ/marvin", "listing_class": "agent", "rank": 513, "previous_rank": 509, "rank_delta": -4, "stars": 6203, "stars_fmt": "6.2k", "forks": 415, "forks_fmt": "415", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 3, "commits_low_confidence": false, "score": 65.0, "description": "an ambient intelligence library", "language": "Python", "open_issues": 66, "category": "Agent Frameworks", "category_rank": 43, "npm_package": "", "crate_package": "", "pypi_package": "marvin", "docker_image": "", "vscode_extension": "", "weekly_downloads": 53024, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.9, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:38:53Z", "slug": "marvin", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "https://marvin.mintlify.app", "homepage_icon": "/site-icons/14c189bb4f08d669.png", "homepage_icon_for": "https://marvin.mintlify.app", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/fastmcp/hello.py", "Found MCP-related server path: src/marvin/_internal/integrations/fastmcp.py", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in examples/slack_search/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'marvin' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "marvin", "version": "3.2.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:19Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.7, "trust_score_v2": 64.7, "rank_v2": 513, "rank_v2_delta": 16, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.3, "maintenance": 13.1, "adoption": 15.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Unifi MCP Server", "repo": "enuno/unifi-mcp-server", "display_repo": "", "url": "https://github.com/enuno/unifi-mcp-server", "listing_class": "agent", "rank": 514, "previous_rank": 524, "rank_delta": 10, "stars": 286, "stars_fmt": "286", "forks": 55, "forks_fmt": "55", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 48, "commits_low_confidence": false, "score": 68.9, "description": "An MCP server that leverages official UniFi API", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 291, "npm_package": "unifi-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 27, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.81, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-09T16:59:03Z", "slug": "unifi-mcp-server", "full_fetched_at": "2026-10-12T16:01:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .agents/skills/fastmcp/CLAUDE.md", "Found MCP-related server path: .agents/skills/fastmcp/SKILL.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in .agents/skills/mcp-builder/scripts/requirements.txt", "README/docs also mention Anthropic", "Found Postgres dependency 'pg' in pyproject.toml", "README/docs also mention Postgres", "Found Redis dependency 'redis' in pyproject.toml", "Found Redis credential/config marker 'REDIS_URL'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pg' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'unifi-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "unifi-mcp-server", "version": "0.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:52Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.7, "trust_score_v2": 64.7, "rank_v2": 514, "rank_v2_delta": 157, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 13.0, "maintenance": 18.7, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Engram", "repo": "Gentleman-Programming/engram", "display_repo": "", "url": "https://github.com/Gentleman-Programming/engram", "listing_class": "agent", "rank": 515, "previous_rank": 522, "rank_delta": 7, "stars": 7147, "stars_fmt": "7.1k", "forks": 740, "forks_fmt": "740", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 260, "commits_low_confidence": false, "score": 86.4, "description": "Persistent memory system for AI coding agents. Agent-agnostic Go binary with SQLite + FTS5, MCP server, HTTP API, CLI, and TUI.", "language": "Go", "open_issues": 84, "category": "Needs review", "category_rank": 2, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:03:47Z", "slug": "engram", "full_fetched_at": "2026-10-12T04:02:36Z", "source_note": "", "github_homepage": "https://engram.gentlemanprogramming.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: internal/mcp/serverinstructions_length_test.go" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/claude-code/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.7, "trust_score_v2": 64.7, "rank_v2": 515, "rank_v2_delta": 72, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Visual Explainer", "repo": "nicobailon/visual-explainer", "display_repo": "", "url": "https://github.com/nicobailon/visual-explainer", "listing_class": "skill", "rank": 60, "previous_rank": 62, "rank_delta": 2, "stars": 10371, "stars_fmt": "10.4k", "forks": 673, "forks_fmt": "673", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 16, "commits_low_confidence": false, "score": 77.6, "description": "Agent skill that generates rich HTML pages or slide decks for diagrams, diff reviews, plan audits, data tables, and project recaps", "language": "JavaScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 60, "npm_package": "visual-explainer", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 512, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.412, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:51:22Z", "slug": "visual-explainer", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/visual-explainer/mcp/server.mjs", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'visual-explainer' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "visual-explainer", "version": "0.12.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.7, "trust_score_v2": 64.7, "rank_v2": 60, "rank_v2_delta": 683, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 11.6, "maintenance": 16.9, "adoption": 13.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Vibe-Trading", "repo": "HKUDS/Vibe-Trading", "display_repo": "", "url": "https://github.com/HKUDS/Vibe-Trading", "listing_class": "agent", "rank": 516, "previous_rank": 487, "rank_delta": -29, "stars": 35303, "stars_fmt": "35.3k", "forks": 5735, "forks_fmt": "5.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 777, "commits_low_confidence": false, "score": 94.8, "description": "\"Vibe-Trading: Your Personal Trading Agent\"", "language": "Python", "open_issues": 14, "category": "Research & Data", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.12, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:30:45Z", "slug": "vibe-trading", "full_fetched_at": "2026-10-12T04:02:43Z", "source_note": "", "github_homepage": "https://vibetrading.wiki/", "homepage_icon": "/site-icons/1fea152f12fde1cd.png", "homepage_icon_for": "https://vibetrading.wiki/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: agent/mcp_server.py", "Found MCP-related server test path: agent/tests/fixtures/fake_mcp_server.py", "Found MCP-related server test path: agent/tests/test_mcp_server_http_transport.py" ] }, "external_service_dependencies": { "providers": [ "DeepSeek", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.6, "trust_score_v2": 64.6, "rank_v2": 516, "rank_v2_delta": -8, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 14.1, "maintenance": 20.0, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nanocoder", "repo": "Nano-Collective/nanocoder", "display_repo": "", "url": "https://github.com/Nano-Collective/nanocoder", "listing_class": "agent", "rank": 517, "previous_rank": 516, "rank_delta": -1, "stars": 2508, "stars_fmt": "2.5k", "forks": 356, "forks_fmt": "356", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 490, "commits_low_confidence": false, "score": 82.3, "description": "An open coding agent for your terminal, built by a community collective rather than a company. Bring your own model, keep your code on your machine, and owe nothing to anyone.", "language": "TypeScript", "open_issues": 135, "category": "Coding Agents", "category_rank": 29, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:42:35Z", "slug": "nanocoder", "full_fetched_at": "2026-10-12T08:02:09Z", "source_note": "", "github_homepage": "https://docs.nanocollective.org/nanocoder", "homepage_icon": "/site-icons/50b70b93e3c508b1.png", "homepage_icon_for": "https://docs.nanocollective.org/nanocoder", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: .changeset/mcp-server-health-checks.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: plugins/voice/.gitignore", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 64.6, "trust_score_v2": 64.6, "rank_v2": 517, "rank_v2_delta": 37, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Hud", "repo": "jarrodwatts/claude-hud", "display_repo": "", "url": "https://github.com/jarrodwatts/claude-hud", "listing_class": "skill", "rank": 61, "previous_rank": 63, "rank_delta": 2, "stars": 28464, "stars_fmt": "28.5k", "forks": 1315, "forks_fmt": "1.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 72, "commits_low_confidence": false, "score": 89.4, "description": "A Claude Code plugin that shows what's happening - context usage, active tools, running agents, and todo progress", "language": "JavaScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 61, "npm_package": "claude-hud", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 25, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.53, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-07T09:55:14Z", "slug": "claude-hud", "full_fetched_at": "2026-10-12T16:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'claude-hud' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "claude-hud", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:31Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.6, "trust_score_v2": 64.6, "rank_v2": 61, "rank_v2_delta": 391, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 13.3, "maintenance": 19.4, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenBot", "repo": "CopilotKit/OpenBot", "display_repo": "", "url": "https://github.com/CopilotKit/OpenBot", "listing_class": "agent", "rank": 518, "previous_rank": 1349, "rank_delta": 831, "stars": 6388, "stars_fmt": "6.4k", "forks": 872, "forks_fmt": "872", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 223, "commits_low_confidence": false, "score": 86.5, "description": "Open-source AI coworkers that each get a computer of their own: a browser, files and tools, with every action decided before it happens and recorded after. Bring any AG-UI agent.", "language": "TypeScript", "open_issues": 14, "category": "Multi-Agent Systems", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:53:52Z", "slug": "openbot", "full_fetched_at": "2026-10-12T12:03:07Z", "source_note": "", "github_homepage": "https://www.copilotkit.ai/openbot", "homepage_icon": "/site-icons/6f563ea59d2418a1.png", "homepage_icon_for": "https://www.copilotkit.ai/openbot", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in server/package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Postgres dependency 'postgres' in server/package.json", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: app/src/components/plugins/account-mode-dialog.tsx", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json", "Found database dependency 'postgres' in server/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.6, "trust_score_v2": 64.6, "rank_v2": 518, "rank_v2_delta": -26, "trust_v2_adjustment": -0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 10.8, "transparency": 13.2, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "mcp-use", "repo": "mcp-use/mcp-use", "display_repo": "", "url": "https://github.com/mcp-use/mcp-use", "listing_class": "agent", "rank": 519, "previous_rank": 514, "rank_delta": -5, "stars": 10748, "stars_fmt": "10.7k", "forks": 1505, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 39, "commits_low_confidence": false, "score": 84.0, "description": "The fullstack MCP framework to develop MCP Apps for ChatGPT / Claude & MCP Servers for AI Agents.", "language": "TypeScript", "open_issues": 37, "category": "Protocols & Tool Integration", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:45:34Z", "slug": "mcp-use", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "https://manufact.com", "homepage_icon": "/site-icons/743175e08553c5d4.png", "homepage_icon_for": "https://manufact.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: libraries/python/mcp_use/server/__fastmcp.py", "Found MCP-related server path: libraries/typescript/packages/agent/src/managers/tools/acquire_active_mcp_server.ts", "Found MCP-related server docs path: docs/typescript/api-reference/server/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "E2B" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found E2B dependency 'e2b' in libraries/python/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.6, "trust_score_v2": 64.6, "rank_v2": 519, "rank_v2_delta": 72, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 18.4, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "open-science", "repo": "aipoch/open-science", "display_repo": "", "url": "https://github.com/aipoch/open-science", "listing_class": "agent", "rank": 520, "previous_rank": 517, "rank_delta": -3, "stars": 5527, "stars_fmt": "5.5k", "forks": 513, "forks_fmt": "513", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 821, "commits_low_confidence": false, "score": 85.1, "description": "The open-source AI research workbench for scientific research and agent workflows. Local-first, model-agnostic desktop app with extensible skills, MCP tools and connectors, Python/R execution and traceable artifacts for reproducible research on macOS, Windows and Linux.", "language": "TypeScript", "open_issues": 18, "category": "Research & Data", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 3, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-11T03:36:33Z", "slug": "open-science", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "https://aipoch.com/open-science", "homepage_icon": "/site-icons/942d61027f443f1b.png", "homepage_icon_for": "https://aipoch.com/open-science", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: src/main/artifacts/mcp-server.ts", "Found MCP-related server path: src/main/literature/library-mcp-server.ts", "Found MCP-related server test path: src/main/artifacts/mcp-server.test.ts", "Found MCP-related server test path: src/main/literature/library-mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "high", "evidence": [ "Found marketplace path: src/main/skill-marketplace/__fixtures__/marketplace/README.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.6, "trust_score_v2": 64.6, "rank_v2": 520, "rank_v2_delta": 39, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Anilist MCP", "repo": "yuna0x0/anilist-mcp", "display_repo": "", "url": "https://github.com/yuna0x0/anilist-mcp", "listing_class": "agent", "rank": 521, "previous_rank": 511, "rank_delta": -10, "stars": 91, "stars_fmt": "91", "forks": 19, "forks_fmt": "19", "last_push": "2026-07-13", "days_ago": 91, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.2, "description": "AniList MCP server for accessing anime and manga data", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 292, "npm_package": "anilist-mcp", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/yuna0x0/anilist-mcp:1.4.0", "vscode_extension": "", "weekly_downloads": 146, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.984, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:36:38Z", "slug": "anilist-mcp", "full_fetched_at": "2026-10-12T04:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ANILIST_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'anilist-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "anilist-mcp", "version": "1.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:11Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.6, "trust_score_v2": 64.6, "rank_v2": 521, "rank_v2_delta": 206, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.7, "identity": 18.0, "transparency": 11.4, "maintenance": 5.9, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Umbraco CMS MCP Dev", "repo": "umbraco/Umbraco-CMS-MCP-Dev", "display_repo": "", "url": "https://github.com/umbraco/Umbraco-CMS-MCP-Dev", "listing_class": "agent", "rank": 522, "previous_rank": 521, "rank_delta": -1, "stars": 39, "stars_fmt": "39", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 13, "commits_low_confidence": false, "score": 52.5, "description": "", "language": "TypeScript", "open_issues": 16, "category": "MCP Servers", "category_rank": 293, "npm_package": "@umbraco-cms/mcp-dev", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 602, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.92, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:09:22Z", "slug": "umbraco-cms-mcp-dev", "full_fetched_at": "2026-10-12T00:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins-server/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@umbraco-cms/mcp-dev' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@umbraco-cms/mcp-dev", "version": "18.1.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:31Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.5, "trust_score_v2": 64.5, "rank_v2": 522, "rank_v2_delta": 244, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 12.8, "maintenance": 16.6, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Domain Search MCP", "repo": "dorukardahan/domain-search-mcp", "display_repo": "", "url": "https://github.com/dorukardahan/domain-search-mcp", "listing_class": "agent", "rank": 523, "previous_rank": 518, "rank_delta": -5, "stars": 28, "stars_fmt": "28", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 0, "commits_low_confidence": true, "score": 37.2, "description": "Zero-config domain availability MCP server for Claude & ChatGPT. Live pricing via Porkbun, premium/auction detection via GoDaddy, AI suggestions, RDAP/WHOIS fallback. Stdio + HTTP.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 294, "npm_package": "domain-search-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 205, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 5, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:36:14Z", "slug": "domain-search-mcp", "full_fetched_at": "2026-10-12T12:03:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'pg' in cache-backend/package.json", "Found Redis credential/config marker 'REDIS_URL'", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pg' in cache-backend/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'domain-search-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "domain-search-mcp", "version": "1.13.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:08Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.5, "trust_score_v2": 64.5, "rank_v2": 523, "rank_v2_delta": 176, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 18.0, "transparency": 11.8, "maintenance": 11.5, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Persistent Project Context for xAI Grok", "repo": "Wolfe-Jam/grok-faf-mcp", "display_repo": "", "url": "https://github.com/Wolfe-Jam/grok-faf-mcp", "listing_class": "agent", "rank": 524, "previous_rank": 532, "rank_delta": 8, "stars": 19, "stars_fmt": "19", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 28, "commits_low_confidence": false, "score": 53.2, "description": "Persistent Project Context for xAI Grok — IANA-registered .faf format · MCP server on a URL", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 295, "npm_package": "grok-faf-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 414, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.53, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-01T16:05:41Z", "slug": "persistent-project-context-for-xai-grok", "full_fetched_at": "2026-10-12T00:02:39Z", "source_note": "", "github_homepage": "https://faf.one", "homepage_icon": "/site-icons/3da06801c9d5baf9.png", "homepage_icon_for": "https://faf.one", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Redis dependency 'redis' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'grok-faf-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "grok-faf-mcp", "version": "2.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:39Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.4, "trust_score_v2": 64.4, "rank_v2": 524, "rank_v2_delta": 245, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 13.5, "maintenance": 17.8, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Instructor", "repo": "567-labs/instructor", "display_repo": "", "url": "https://github.com/567-labs/instructor", "listing_class": "agent", "rank": 525, "previous_rank": 503, "rank_delta": -22, "stars": 14006, "stars_fmt": "14.0k", "forks": 1302, "forks_fmt": "1.3k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 16, "commits_low_confidence": false, "score": 79.6, "description": "structured outputs for llms ", "language": "Python", "open_issues": 45, "category": "LLM Gateways & Infra", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "instructor", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2249474, "dl_source": "pypi", "hn_mentions_30d": 4, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.28, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:00:53Z", "slug": "instructor", "full_fetched_at": "2026-10-12T00:02:42Z", "source_note": "", "github_homepage": "https://python.useinstructor.com/", "homepage_icon": "/site-icons/571c009daeae834e.png", "homepage_icon_for": "https://python.useinstructor.com/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Fireworks AI", "Google Gemini", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Redis", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'instructor' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "instructor", "version": "1.17.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:42Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.4, "trust_score_v2": 64.4, "rank_v2": 525, "rank_v2_delta": -143, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 13.3, "maintenance": 16.8, "adoption": 18.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nanoclaw", "repo": "nanocoai/nanoclaw", "display_repo": "", "url": "https://github.com/nanocoai/nanoclaw", "listing_class": "skill", "rank": 62, "previous_rank": 60, "rank_delta": -2, "stars": 30929, "stars_fmt": "30.9k", "forks": 12756, "forks_fmt": "12.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 164, "commits_low_confidence": false, "score": 96.0, "description": "A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK", "language": "TypeScript", "open_issues": 294, "category": "Agent Skills", "category_rank": 62, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:25:45Z", "slug": "nanoclaw", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://nanoclaw.dev", "homepage_icon": "/site-icons/7f1fd5eb23dd04d6.png", "homepage_icon_for": "https://nanoclaw.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in container/agent-runner/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Firecrawl", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in .github/skill-pins/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in .github/skill-pins/package.json", "README/docs also mention Anthropic", "Found Firecrawl dependency 'firecrawl' in .github/skill-pins/package.json", "Found credential/config marker 'ANTHROPIC_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.4, "trust_score_v2": 64.4, "rank_v2": 62, "rank_v2_delta": 368, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.2, "maintenance": 20.0, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "IvanMurzak Unity MCP", "repo": "IvanMurzak/Unity-MCP", "display_repo": "", "url": "https://github.com/IvanMurzak/Unity-MCP", "listing_class": "agent", "rank": 526, "previous_rank": 515, "rank_delta": -11, "stars": 4423, "stars_fmt": "4.4k", "forks": 391, "forks_fmt": "391", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 75, "commits_low_confidence": false, "score": 82.5, "description": "AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for free.", "language": "C#", "open_issues": 47, "category": "MCP Servers", "category_rank": 296, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/ivanmurzakdev/unity-mcp-server:0.17.1", "vscode_extension": "", "weekly_downloads": 17414, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.49, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T21:27:20Z", "slug": "ivanmurzak-unity-mcp", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "https://ai-game.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/configs/mcp-servers.json", "Found MCP-related server docs path: docs/mcp-server.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_PLUGIN_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: Unity-MCP-Plugin/.claude/settings.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.4, "trust_score_v2": 64.4, "rank_v2": 526, "rank_v2_delta": 27, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 11.8, "maintenance": 19.4, "adoption": 14.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Hackmd MCP", "repo": "yuna0x0/hackmd-mcp", "display_repo": "", "url": "https://github.com/yuna0x0/hackmd-mcp", "listing_class": "agent", "rank": 527, "previous_rank": 528, "rank_delta": 1, "stars": 68, "stars_fmt": "68", "forks": 17, "forks_fmt": "17", "last_push": "2026-07-13", "days_ago": 91, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.2, "description": "A Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 297, "npm_package": "hackmd-mcp", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/yuna0x0/hackmd-mcp:1.5.7", "vscode_extension": "", "weekly_downloads": 108, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:32:15Z", "slug": "hackmd-mcp", "full_fetched_at": "2026-10-12T04:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'HACKMD_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'hackmd-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "hackmd-mcp", "version": "1.5.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.4, "trust_score_v2": 64.4, "rank_v2": 527, "rank_v2_delta": 211, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.9, "identity": 18.0, "transparency": 11.5, "maintenance": 5.9, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Parallel Browser MCP", "repo": "etairl/parallel-browser-mcp", "display_repo": "", "url": "https://github.com/etairl/parallel-browser-mcp", "listing_class": "agent", "rank": 528, "previous_rank": 526, "rank_delta": -2, "stars": 42, "stars_fmt": "42", "forks": 6, "forks_fmt": "6", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.3, "description": "An MCP server for parallel browser automation by AI agents with multiple cloud providers", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 298, "npm_package": "parallel-browser-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 80, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.773, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:03:11Z", "slug": "parallel-browser-mcp", "full_fetched_at": "2026-10-12T16:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Browserbase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in examples/local/package.json", "Found Browserbase dependency 'browserbase' in package.json", "Found Browserbase credential/config marker 'BROWSERBASE_API_KEY'", "README/docs also mention Browserbase" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'parallel-browser-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "parallel-browser-mcp", "version": "0.1.14" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.4, "trust_score_v2": 64.4, "rank_v2": 528, "rank_v2_delta": 177, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.9, "identity": 18.0, "transparency": 10.9, "maintenance": 9.9, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "GitLab MCP Server", "repo": "jmrplens/gitlab-mcp-server", "display_repo": "", "url": "https://github.com/jmrplens/gitlab-mcp-server", "listing_class": "agent", "rank": 529, "previous_rank": 529, "rank_delta": 0, "stars": 45, "stars_fmt": "45", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 343, "commits_low_confidence": false, "score": 63.6, "description": "Open source GitLab MCP server for AI assistants: 2-tool dynamic find/execute over 850+ GitLab actions (1,000+ Enterprise), stdio/HTTP/OAuth, safe/read-only modes.", "language": "Go", "open_issues": 118, "category": "MCP Servers", "category_rank": 299, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": -1, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-04T22:39:58Z", "slug": "gitlab-mcp-server", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "https://jmrp.io/docs/gitlab-mcp-server", "homepage_icon": "/site-icons/a712867f4feac27f.png", "homepage_icon_for": "https://jmrp.io/docs/gitlab-mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/instructions/go-mcp-server.instructions.md", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server test path: test/e2e/gitlab/common/mcp_server_test.go" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker '22GITLAB_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.3, "trust_score_v2": 64.3, "rank_v2": 529, "rank_v2_delta": 34, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.1, "identity": 10.8, "transparency": 14.7, "maintenance": 20.0, "adoption": 4.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "InsForge", "repo": "InsForge/InsForge", "display_repo": "", "url": "https://github.com/InsForge/InsForge", "listing_class": "agent", "rank": 530, "previous_rank": 519, "rank_delta": -11, "stars": 13102, "stars_fmt": "13.1k", "forks": 1220, "forks_fmt": "1.2k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 46, "commits_low_confidence": false, "score": 85.0, "description": "The all-in-one, open-source backend platform for agentic coding. InsForge gives your coding agent database, auth, storage, compute, hosting, and AI gateway to ship full-stack apps end-to-end.", "language": "TypeScript", "open_issues": 93, "category": "Workflow Platforms", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.51, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-11T10:55:10Z", "slug": "insforge", "full_fetched_at": "2026-10-12T04:02:46Z", "source_note": "", "github_homepage": "https://insforge.dev", "homepage_icon": "/site-icons/df53e1991f6c4ea9.png", "homepage_icon_for": "https://insforge.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in backend/package.json", "README/docs also mention OpenAI", "Found Postgres dependency 'pg' in package.json", "README/docs also mention Postgres", "Found credential/config marker 'ACCESS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "Found database dependency 'pg' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.3, "trust_score_v2": 64.3, "rank_v2": 530, "rank_v2_delta": -7, "trust_v2_adjustment": -0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 14.2, "maintenance": 18.6, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "EvoScientist", "repo": "EvoScientist/EvoScientist", "display_repo": "", "url": "https://github.com/EvoScientist/EvoScientist", "listing_class": "agent", "rank": 531, "previous_rank": 527, "rank_delta": -4, "stars": 4977, "stars_fmt": "5.0k", "forks": 331, "forks_fmt": "331", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 61, "commits_low_confidence": false, "score": 81.0, "description": "🔬 Harness Vibe Research with Self-evolving AI Scientists", "language": "Python", "open_issues": 52, "category": "Research & Data", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-09T03:07:54Z", "slug": "evoscientist", "full_fetched_at": "2026-10-12T16:01:54Z", "source_note": "", "github_homepage": "https://EvoScientist.ai/", "homepage_icon": "/site-icons/1fd5949d1521485a.png", "homepage_icon_for": "https://EvoScientist.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "OpenRouter", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.3, "trust_score_v2": 64.3, "rank_v2": 531, "rank_v2_delta": -67, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 14.1, "maintenance": 19.0, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Addyosmani Agent Skills", "repo": "addyosmani/agent-skills", "display_repo": "", "url": "https://github.com/addyosmani/agent-skills", "listing_class": "skill", "rank": 63, "previous_rank": 61, "rank_delta": -2, "stars": 105426, "stars_fmt": "105.4k", "forks": 11002, "forks_fmt": "11.0k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 153, "commits_low_confidence": false, "score": 98.5, "description": "Production-grade engineering skills for AI coding agents.", "language": "JavaScript", "open_issues": 59, "category": "Agent Skills", "category_rank": 63, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.6, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T20:33:40Z", "slug": "addyosmani-agent-skills", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://skills.addy.ie", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.3, "trust_score_v2": 64.3, "rank_v2": 63, "rank_v2_delta": 443, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 12.7, "maintenance": 19.9, "adoption": 12.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Jan", "repo": "janhq/jan", "display_repo": "", "url": "https://github.com/janhq/jan", "listing_class": "agent", "rank": 532, "previous_rank": 535, "rank_delta": 3, "stars": 44911, "stars_fmt": "44.9k", "forks": 3087, "forks_fmt": "3.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 442, "commits_low_confidence": false, "score": 94.1, "description": "Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.", "language": "Rust", "open_issues": 406, "category": "LLM Gateways & Infra", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 30, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:07:02Z", "slug": "jan", "full_fetched_at": "2026-10-12T04:02:47Z", "source_note": "", "github_homepage": "https://jan.ai/", "homepage_icon": "/site-icons/dc2f1670eff22e75.png", "homepage_icon_for": "https://jan.ai/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: web-app/src/locales/ca/mcp-servers.json", "Found MCP-related server path: web-app/src/locales/cs/mcp-servers.json", "Found MCP-related server docs path: docs/src/pages/docs/desktop/_assets/mcp-server-settings.png" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: core/src/browser/extensions/assistant.test.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 64.3, "trust_score_v2": 64.3, "rank_v2": 532, "rank_v2_delta": -37, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PageIndex MCP", "repo": "VectifyAI/pageindex-mcp", "display_repo": "", "url": "https://github.com/VectifyAI/pageindex-mcp", "listing_class": "agent", "rank": 533, "previous_rank": 525, "rank_delta": -8, "stars": 400, "stars_fmt": "400", "forks": 52, "forks_fmt": "52", "last_push": "2026-07-25", "days_ago": 79, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.6, "description": "MCP server for PageIndex. PageIndex is a vectorless reasoning-based RAG system which uses multi-step reasoning and tree search to retrieve information like a human expert would.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 300, "npm_package": "@pageindex/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 75, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.49, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T20:50:58Z", "slug": "pageindex-mcp", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "https://pageindex.ai/mcp", "homepage_icon": "/site-icons/c487a35cc5a6112d.png", "homepage_icon_for": "https://pageindex.ai/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@pageindex/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@pageindex/mcp", "version": "1.8.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:32Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.3, "trust_score_v2": 64.3, "rank_v2": 533, "rank_v2_delta": 260, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 11.1, "maintenance": 6.7, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "neuro-san-studio", "repo": "cognizant-ai-lab/neuro-san-studio", "display_repo": "", "url": "https://github.com/cognizant-ai-lab/neuro-san-studio", "listing_class": "agent", "rank": 534, "previous_rank": 536, "rank_delta": 2, "stars": 1142, "stars_fmt": "1.1k", "forks": 310, "forks_fmt": "310", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 201, "commits_low_confidence": false, "score": 79.9, "description": "A playground for neuro-san", "language": "Python", "open_issues": 115, "category": "Agent Frameworks", "category_rank": 44, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 8.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-07T22:39:45Z", "slug": "neuro-san-studio", "full_fetched_at": "2026-10-12T12:02:55Z", "source_note": "", "github_homepage": "https://decisionai.ml/neuro-san", "homepage_icon": "/site-icons/9dd933c6b49d5938.png", "homepage_icon_for": "https://decisionai.ml/neuro-san", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: coded_tools/agent_network_editor/mcp_servers_load.py", "Found MCP-related server path: servers/mcp/bmi_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: neuro_san_studio/plugins/__init__.py", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.2, "trust_score_v2": 64.2, "rank_v2": 534, "rank_v2_delta": -107, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 15.6, "maintenance": 20.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google Analytics MCP", "repo": "surendranb/google-analytics-mcp", "display_repo": "", "url": "https://github.com/surendranb/google-analytics-mcp", "listing_class": "agent", "rank": 535, "previous_rank": 523, "rank_delta": -12, "stars": 242, "stars_fmt": "242", "forks": 48, "forks_fmt": "48", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 22, "commits_low_confidence": false, "score": 63.8, "description": "Google Analytics 4 data to AI agents, agentic workflows, and MCP clients. Give agents analysis-ready access to website traffic, user behavior, and performance data with schema discovery, server-side aggregation, and safe defaults that reduce data wrangling.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 301, "npm_package": "", "crate_package": "", "pypi_package": "google-analytics-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1924, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.05, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:40:40Z", "slug": "google-analytics-mcp", "full_fetched_at": "2026-10-12T00:02:20Z", "source_note": "", "github_homepage": "https://ga4mcp.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'google-analytics-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "google-analytics-mcp", "version": "2.11.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:20Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.2, "trust_score_v2": 64.2, "rank_v2": 535, "rank_v2_delta": 221, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.5, "identity": 10.8, "transparency": 13.4, "maintenance": 17.2, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Mailtrap", "repo": "mailtrap/mailtrap-mcp", "display_repo": "", "url": "https://github.com/mailtrap/mailtrap-mcp", "listing_class": "agent", "rank": 536, "previous_rank": 544, "rank_delta": 8, "stars": 65, "stars_fmt": "65", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 34, "commits_low_confidence": false, "score": 60.5, "description": "Official mailtrap.io MCP server", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 302, "npm_package": "mcp-mailtrap", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 546, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:48:10Z", "slug": "mailtrap", "full_fetched_at": "2026-10-11T20:02:00Z", "source_note": "", "github_homepage": "https://mailtrap.io", "homepage_icon": "/site-icons/101b9e413a4fa77b.png", "homepage_icon_for": "https://mailtrap.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MAILTRAP_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-mailtrap' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-mailtrap", "version": "0.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:00Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.2, "trust_score_v2": 64.2, "rank_v2": 536, "rank_v2_delta": 215, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 13.1, "maintenance": 18.2, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Docling MCP", "repo": "docling-project/docling-mcp", "display_repo": "", "url": "https://github.com/docling-project/docling-mcp", "listing_class": "agent", "rank": 537, "previous_rank": 534, "rank_delta": -3, "stars": 770, "stars_fmt": "770", "forks": 143, "forks_fmt": "143", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 6, "commits_low_confidence": true, "score": 62.0, "description": "Making docling agentic through MCP", "language": "Python", "open_issues": 12, "category": "MCP Servers", "category_rank": 303, "npm_package": "", "crate_package": "", "pypi_package": "docling-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6127, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.79, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-12T00:14:01Z", "slug": "docling-mcp", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: docling_mcp/servers/mcp_server.py", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found credential/config marker 'DOCLING_MCP_SERVICE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'docling-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "docling-mcp", "version": "3.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.2, "trust_score_v2": 64.2, "rank_v2": 537, "rank_v2_delta": 213, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.3, "identity": 10.8, "transparency": 12.8, "maintenance": 13.3, "adoption": 12.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Flowise", "repo": "FlowiseAI/Flowise", "display_repo": "", "url": "https://github.com/FlowiseAI/Flowise", "listing_class": "agent", "rank": 538, "previous_rank": 531, "rank_delta": -7, "stars": 55494, "stars_fmt": "55.5k", "forks": 25054, "forks_fmt": "25.1k", "last_push": "2026-08-13", "days_ago": 60, "weekly_commits": 0, "commits_low_confidence": false, "score": 65.2, "description": "Build AI Agents, Visually", "language": "TypeScript", "open_issues": 701, "category": "Workflow Platforms", "category_rank": 14, "npm_package": "flowise", "crate_package": "", "pypi_package": "", "docker_image": "flowiseai/flowise", "vscode_extension": "", "weekly_downloads": 7064471, "dl_source": "npm+docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:13:39Z", "slug": "flowise", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "https://flowiseai.com", "homepage_icon": "/site-icons/d5f3e9d45d5cddb9.png", "homepage_icon_for": "https://flowiseai.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/components/nodes/tools/MCP/CustomMcpServerTool/CustomMcpServerTool.ts", "Found MCP-related server path: packages/server/src/controllers/custom-mcp-servers/index.ts", "Found MCP-related server test path: packages/server/src/controllers/custom-mcp-servers/index.test.ts", "Found MCP-related server test path: packages/server/src/services/custom-mcp-servers/index.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found Anthropic dependency 'anthropic' in package.json", "Found Google Gemini dependency '@google/generative-ai' in package.json", "Found Qdrant dependency 'qdrant' in package.json", "Found Postgres dependency 'pg' in packages/server/package.json", "Found Redis dependency 'redis' in packages/server/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'qdrant' in package.json" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'flowise' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "flowise", "version": "3.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:35Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "FlowiseAI/Flowise", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 64.1, "trust_score_v2": 64.1, "rank_v2": 538, "rank_v2_delta": -42, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 13.6, "maintenance": 8.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cloudflare MCP Server", "repo": "cloudflare/mcp-server-cloudflare", "display_repo": "", "url": "https://github.com/cloudflare/mcp-server-cloudflare", "listing_class": "agent", "rank": 539, "previous_rank": 537, "rank_delta": -2, "stars": 4370, "stars_fmt": "4.4k", "forks": 554, "forks_fmt": "554", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 20, "commits_low_confidence": false, "score": 75.7, "description": "", "language": "TypeScript", "open_issues": 40, "category": "MCP Servers", "category_rank": 304, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 6, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T17:20:10Z", "slug": "cloudflare-mcp-server", "full_fetched_at": "2026-10-12T04:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.1, "trust_score_v2": 64.1, "rank_v2": 539, "rank_v2_delta": 87, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 13.4, "maintenance": 17.1, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "smolagents", "repo": "huggingface/smolagents", "display_repo": "", "url": "https://github.com/huggingface/smolagents", "listing_class": "agent", "rank": 540, "previous_rank": 520, "rank_delta": -20, "stars": 29799, "stars_fmt": "29.8k", "forks": 3071, "forks_fmt": "3.1k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 5, "commits_low_confidence": true, "score": 77.0, "description": "🤗 smolagents: a barebones library for agents that think in code.", "language": "Python", "open_issues": 377, "category": "Agent Frameworks", "category_rank": 45, "npm_package": "", "crate_package": "", "pypi_package": "smolagents", "docker_image": "", "vscode_extension": "", "weekly_downloads": 123109, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:11:45Z", "slug": "smolagents", "full_fetched_at": "2026-10-12T04:02:44Z", "source_note": "", "github_homepage": "https://huggingface.co/docs/smolagents", "homepage_icon": "/site-icons/71612e4c2c8d1e76.png", "homepage_icon_for": "https://huggingface.co/docs/smolagents", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Azure OpenAI", "E2B", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "Together AI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in examples/open_deep_research/requirements.txt", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'selenium' in pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'smolagents' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "smolagents", "version": "1.26.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:44Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.1, "trust_score_v2": 64.1, "rank_v2": 540, "rank_v2_delta": -106, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.1, "maintenance": 13.2, "adoption": 17.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Deepchat", "repo": "ThinkInAIXYZ/deepchat", "display_repo": "", "url": "https://github.com/ThinkInAIXYZ/deepchat", "listing_class": "skill", "rank": 64, "previous_rank": 64, "rank_delta": 0, "stars": 6360, "stars_fmt": "6.4k", "forks": 756, "forks_fmt": "756", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 308, "commits_low_confidence": false, "score": 86.2, "description": "🐬DeepChat - A smart assistant that connects powerful AI to your personal world", "language": "TypeScript", "open_issues": 3, "category": "Agent Skills", "category_rank": 64, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:07:43Z", "slug": "deepchat", "full_fetched_at": "2026-10-12T00:02:36Z", "source_note": "", "github_homepage": "https://deepchat.thinkinai.xyz/", "homepage_icon": "/site-icons/a0ec8f02747075da.png", "homepage_icon_for": "https://deepchat.thinkinai.xyz/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: resources/skills/mcp-builder/reference/node_mcp_server.md", "Found MCP-related server path: resources/skills/mcp-builder/reference/python_mcp_server.md", "Found MCP-related server test path: test/main/mcp/builtinKnowledgeServer.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: docs/features/acp-lody-extensions/plan.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 64.1, "trust_score_v2": 64.1, "rank_v2": 64, "rank_v2_delta": 515, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 12.6, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Beads", "repo": "gastownhall/beads", "display_repo": "", "url": "https://github.com/gastownhall/beads", "listing_class": "agent", "rank": 541, "previous_rank": 498, "rank_delta": -43, "stars": 27824, "stars_fmt": "27.8k", "forks": 1883, "forks_fmt": "1.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 448, "commits_low_confidence": false, "score": 91.9, "description": "Beads - A memory upgrade for your coding agent", "language": "Go", "open_issues": 1036, "category": "Memory & Knowledge", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:15:50Z", "slug": "beads", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "https://beads.gascity.com", "homepage_icon": "/site-icons/221f85f8783fdaa1.png", "homepage_icon_for": "https://beads.gascity.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: docs/integrations/mcp-server.md", "Found MCP-related server test path: integrations/beads-mcp/tests/test_mcp_server_integration.py", "Found MCP dependency 'fastmcp' in integrations/beads-mcp/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/beads/.claude-plugin/plugin.json)", "Found credential/config marker 'BEADS_HTTP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.0, "trust_score_v2": 64.0, "rank_v2": 541, "rank_v2_delta": -64, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Superpowers Zh", "repo": "jnMetaCode/superpowers-zh", "display_repo": "", "url": "https://github.com/jnMetaCode/superpowers-zh", "listing_class": "skill", "rank": 65, "previous_rank": 65, "rank_delta": 0, "stars": 8297, "stars_fmt": "8.3k", "forks": 770, "forks_fmt": "770", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 21, "commits_low_confidence": false, "score": 78.0, "description": "🦸 AI 编程超能力 · 中文增强版 — superpowers（250k+ ⭐）完整汉化 + 4 个中国原创 skills，让 Claude Code / Copilot CLI / Hermes Agent / Cursor / Windsurf / Kiro / Gemini CLI / Qoder 等 26 款 AI 编程工具真正会干活", "language": "JavaScript", "open_issues": 8, "category": "Agent Skills", "category_rank": 65, "npm_package": "superpowers-zh", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 794, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T19:17:42Z", "slug": "superpowers-zh", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "https://sp.aiolaola.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'superpowers-zh' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "superpowers-zh", "version": "1.7.14" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:49Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 64.0, "trust_score_v2": 64.0, "rank_v2": 65, "rank_v2_delta": 698, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 12.2, "maintenance": 17.1, "adoption": 13.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent Plugins", "repo": "awslabs/agent-plugins", "display_repo": "", "url": "https://github.com/awslabs/agent-plugins", "listing_class": "skill", "rank": 66, "previous_rank": 66, "rank_delta": 0, "stars": 918, "stars_fmt": "918", "forks": 162, "forks_fmt": "162", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 4, "commits_low_confidence": true, "score": 61.5, "description": "Agent Plugins for AWS equip AI coding agents with the skills to help you architect, deploy, and operate on AWS.", "language": "Python", "open_issues": 13, "category": "Agent Skills", "category_rank": 66, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 8.4, "scorecard_checks": { "Dependency-Update-Tool": 10, "Code-Review": 10, "Maintained": 10, "Packaging": -1, "Dangerous-Workflow": 10, "Security-Policy": 10, "Binary-Artifacts": 10, "Token-Permissions": 10, "Pinned-Dependencies": 8, "Vulnerabilities": 10, "CII-Best-Practices": 0, "SAST": 10, "Signed-Releases": 0, "Fuzzing": 0, "License": 10, "Branch-Protection": 10, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T12:06:22Z", "slug": "agent-plugins", "full_fetched_at": "2026-10-12T12:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/amazon-location-service/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.9, "trust_score_v2": 63.9, "rank_v2": 66, "rank_v2_delta": 558, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 15.5, "identity": 10.8, "transparency": 15.6, "maintenance": 13.2, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Trailofbits Skills", "repo": "trailofbits/skills", "display_repo": "", "url": "https://github.com/trailofbits/skills", "listing_class": "skill", "rank": 67, "previous_rank": 67, "rank_delta": 0, "stars": 7493, "stars_fmt": "7.5k", "forks": 638, "forks_fmt": "638", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 14, "commits_low_confidence": false, "score": 75.6, "description": "Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows", "language": "Python", "open_issues": 29, "category": "Agent Skills", "category_rank": 67, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:39:44Z", "slug": "trailofbits-skills", "full_fetched_at": "2026-10-12T00:02:28Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/agentic-actions-auditor/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "CC-BY-SA-4.0", "license_type": "open", "license_override": "", "trust_score": 63.9, "trust_score_v2": 63.9, "rank_v2": 67, "rank_v2_delta": 461, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.4, "identity": 10.8, "transparency": 14.2, "maintenance": 16.5, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Budibase", "repo": "Budibase/budibase", "display_repo": "", "url": "https://github.com/Budibase/budibase", "listing_class": "agent", "rank": 542, "previous_rank": 540, "rank_delta": -2, "stars": 28330, "stars_fmt": "28.3k", "forks": 2232, "forks_fmt": "2.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 560, "commits_low_confidence": false, "score": 92.3, "description": "AI agents, automations and apps that run your operations. Model agnostic.", "language": "TypeScript", "open_issues": 240, "category": "Workflow Platforms", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.71, "scorecard_score": 5.1, "scorecard_checks": { "Maintained": 10, "Code-Review": 6, "Security-Policy": 10, "CII-Best-Practices": 0, "Dangerous-Workflow": 10, "Token-Permissions": 0, "License": 9, "Binary-Artifacts": 6, "Branch-Protection": 5, "Signed-Releases": 0, "SAST": 0, "Fuzzing": 0, "Packaging": 10, "Pinned-Dependencies": 2 }, "scorecard_scanned_at": "2026-10-12T04:06:17Z", "slug": "budibase", "full_fetched_at": "2026-10-12T04:02:18Z", "source_note": "", "github_homepage": "https://budibase.com", "homepage_icon": "/site-icons/c9d945bf4f21ed69.png", "homepage_icon_for": "https://budibase.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in packages/pro/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: packages/backend-core/src/plugin/index.ts" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 63.9, "trust_score_v2": 63.9, "rank_v2": 542, "rank_v2_delta": -15, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server For ISO27001", "repo": "Sushegaad/MCP-Server-for-ISO27001", "display_repo": "", "url": "https://github.com/Sushegaad/MCP-Server-for-ISO27001", "listing_class": "agent", "rank": 543, "previous_rank": 538, "rank_delta": -5, "stars": 32, "stars_fmt": "32", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.0, "description": "Model Context Protocol (MCP) server for ISO27001: A stateful Model Context Protocol (MCP) server that gives Claude a complete ISO 27001:2022 Information Security Management System (ISMS). Ask Claude to run gap assessments, manage risks, generate policies, track evidence, and run audits — all…", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 305, "npm_package": "iso27001-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 50, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T13:17:27Z", "slug": "mcp-server-for-iso27001", "full_fetched_at": "2026-10-12T00:02:20Z", "source_note": "", "github_homepage": "https://sushegaad.github.io/MCP-Server-for-ISO27001/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'iso27001-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "iso27001-mcp", "version": "0.9.83" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:20Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.9, "trust_score_v2": 63.9, "rank_v2": 543, "rank_v2_delta": 218, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 18.0, "transparency": 12.3, "maintenance": 9.5, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "LLM Gateway", "repo": "theopenco/llmgateway", "display_repo": "", "url": "https://github.com/theopenco/llmgateway", "listing_class": "agent", "rank": 544, "previous_rank": 541, "rank_delta": -3, "stars": 1684, "stars_fmt": "1.7k", "forks": 192, "forks_fmt": "192", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 452, "commits_low_confidence": false, "score": 80.0, "description": "Route, manage, and analyze your LLM requests across multiple providers with a unified API interface.", "language": "TypeScript", "open_issues": 35, "category": "LLM Gateways & Infra", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 3, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-23T07:23:01Z", "slug": "llm-gateway", "full_fetched_at": "2026-10-12T08:02:33Z", "source_note": "", "github_homepage": "https://llmgateway.io", "homepage_icon": "/site-icons/b70a131a002f8a6f.png", "homepage_icon_for": "https://llmgateway.io", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in apps/api/package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/api/package.json", "README/docs also mention OpenAI", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 63.8, "trust_score_v2": 63.8, "rank_v2": 544, "rank_v2_delta": -64, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "n8n-MCP", "repo": "czlonkowski/n8n-mcp", "display_repo": "", "url": "https://github.com/czlonkowski/n8n-mcp", "listing_class": "agent", "rank": 545, "previous_rank": 542, "rank_delta": -3, "stars": 23054, "stars_fmt": "23.1k", "forks": 3660, "forks_fmt": "3.7k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 70, "commits_low_confidence": false, "score": 90.1, "description": "A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you ", "language": "TypeScript", "open_issues": 28, "category": "Protocols & Tool Integration", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.42, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:41:55Z", "slug": "n8n-mcp", "full_fetched_at": "2026-10-12T04:02:25Z", "source_note": "", "github_homepage": "https://www.n8n-mcp.com/", "homepage_icon": "/site-icons/e0fbc380f7681976.png", "homepage_icon_for": "https://www.n8n-mcp.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: tests/helpers/fake-official-mcp-server.ts", "Found MCP-related server test path: tests/test-mcp-server-extraction.js" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found credential/config marker 'N8N_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.7, "trust_score_v2": 63.7, "rank_v2": 545, "rank_v2_delta": 57, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 13.3, "maintenance": 19.0, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "QwenPaw", "repo": "agentscope-ai/QwenPaw", "display_repo": "", "url": "https://github.com/agentscope-ai/QwenPaw", "listing_class": "agent", "rank": 546, "previous_rank": 549, "rank_delta": 3, "stars": 35626, "stars_fmt": "35.6k", "forks": 3171, "forks_fmt": "3.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 142, "commits_low_confidence": false, "score": 93.6, "description": "Your Personal AI Assistant; easy to install, deploy on your own machine or on the cloud; supports multiple chat apps with easily extensible capabilities.", "language": "TypeScript", "open_issues": 671, "category": "Agent Frameworks", "category_rank": 46, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T12:06:43Z", "slug": "qwenpaw", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "http://qwenpaw.agentscope.io/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server test path: tests/fixtures/mcp/http_echo_server.py", "Found MCP-related server test path: tests/fixtures/mcp/oauth_fake_server.py" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini", "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: console/src/plugins/PawAppAccessGate.test.tsx", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.7, "trust_score_v2": 63.7, "rank_v2": 546, "rank_v2_delta": -109, "trust_v2_adjustment": -2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.0, "maintenance": 20.0, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Archify", "repo": "tt-a1i/archify", "display_repo": "", "url": "https://github.com/tt-a1i/archify", "listing_class": "skill", "rank": 68, "previous_rank": 68, "rank_delta": 0, "stars": 82452, "stars_fmt": "82.5k", "forks": 5563, "forks_fmt": "5.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 610, "commits_low_confidence": false, "score": 96.9, "description": "Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more.", "language": "JavaScript", "open_issues": 130, "category": "Agent Skills", "category_rank": 68, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.41, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-06T04:48:33Z", "slug": "archify", "full_fetched_at": "2026-10-12T00:02:30Z", "source_note": "", "github_homepage": "https://archify.si", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.7, "trust_score_v2": 63.7, "rank_v2": 68, "rank_v2_delta": 484, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "CodeGraph", "repo": "colbymchenry/codegraph", "display_repo": "", "url": "https://github.com/colbymchenry/codegraph", "listing_class": "agent", "rank": 547, "previous_rank": 546, "rank_delta": -1, "stars": 73811, "stars_fmt": "73.8k", "forks": 4763, "forks_fmt": "4.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 399, "commits_low_confidence": false, "score": 96.3, "description": "Pre-indexed code knowledge graph, auto syncs on code changes, for Claude Code, Codex, Gemini, Cursor, OpenCode, AntiGravity, Kiro, CoPilot, and Hermes Agent — fewer tokens, fewer tool calls, 100% local", "language": "C", "open_issues": 160, "category": "Protocols & Tool Integration", "category_rank": 32, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:15:22Z", "slug": "codegraph", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://colbymchenry.github.io/codegraph/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server-instructions.ts", "Found MCP-related server test path: __tests__/mcp-server-discover.test.ts", "Found MCP-related server docs path: site/src/content/docs/reference/mcp-server.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.7, "trust_score_v2": 63.7, "rank_v2": 547, "rank_v2_delta": 89, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 10.8, "maintenance": 20.0, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Obsidian Second Brain", "repo": "eugeniughelbur/obsidian-second-brain", "display_repo": "", "url": "https://github.com/eugeniughelbur/obsidian-second-brain", "listing_class": "agent", "rank": 548, "previous_rank": 569, "rank_delta": 21, "stars": 4735, "stars_fmt": "4.7k", "forks": 583, "forks_fmt": "583", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 109, "commits_low_confidence": false, "score": 84.9, "description": "Persistent memory for Claude Code and 6 other CLI agents, stored as plain markdown in your Obsidian vault. Stop re-explaining your projects, decisions and people every session. 45 commands: hybrid semantic search, self-rewriting notes, key-less web research, and scheduled agents that maintain the…", "language": "Python", "open_issues": 9, "category": "Needs review", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.7, "scorecard_score": 6.6, "scorecard_checks": { "Dependency-Update-Tool": 10, "Dangerous-Workflow": 10, "Security-Policy": 10, "Code-Review": 4, "Packaging": -1, "Maintained": 10, "Token-Permissions": 10, "Binary-Artifacts": 10, "Pinned-Dependencies": 2, "CII-Best-Practices": 0, "Vulnerabilities": 0, "SAST": 0, "Fuzzing": 0, "Signed-Releases": -1, "License": 10, "Branch-Protection": -1, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T04:06:23Z", "slug": "obsidian-second-brain", "full_fetched_at": "2026-10-12T04:02:28Z", "source_note": "", "github_homepage": "https://theaioperator.io", "homepage_icon": "/site-icons/857af56c85c34d9b.png", "homepage_icon_for": "https://theaioperator.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: integrations/obsidian-mcp-server/README.md", "Found MCP-related server path: integrations/obsidian-mcp-server/server.py", "Found MCP-related server test path: integrations/obsidian-mcp-server/live_test.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "OpenRouter", "Perplexity", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.6, "trust_score_v2": 63.6, "rank_v2": 548, "rank_v2_delta": -76, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 14.1, "maintenance": 19.9, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Waggle MCP", "repo": "Abhigyan-Shekhar/Waggle-mcp", "display_repo": "", "url": "https://github.com/Abhigyan-Shekhar/Waggle-mcp", "listing_class": "agent", "rank": 549, "previous_rank": 555, "rank_delta": 6, "stars": 44, "stars_fmt": "44", "forks": 139, "forks_fmt": "139", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 22, "commits_low_confidence": false, "score": 61.6, "description": "MCP server for external memory layer for AI agents + more . Download from pypi , and get started ", "language": "Python", "open_issues": 170, "category": "MCP Servers", "category_rank": 306, "npm_package": "", "crate_package": "", "pypi_package": "waggle-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.87, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:56:13Z", "slug": "waggle-mcp", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/waggle/protocol/mcp/server.py", "Found MCP dependency '@modelcontextprotocol/sdk' in apps/vscode-extension/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "E2B", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found E2B dependency 'e2b' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'waggle-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "waggle-mcp", "version": "0.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:24Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.6, "trust_score_v2": 63.6, "rank_v2": 549, "rank_v2_delta": 188, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 13.8, "maintenance": 17.2, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "A2UI", "repo": "a2ui-project/a2ui", "display_repo": "", "url": "https://github.com/a2ui-project/a2ui", "listing_class": "agent", "rank": 550, "previous_rank": 556, "rank_delta": 6, "stars": 16668, "stars_fmt": "16.7k", "forks": 1329, "forks_fmt": "1.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 222, "commits_low_confidence": false, "score": 89.8, "description": "", "language": "TypeScript", "open_issues": 351, "category": "Protocols & Tool Integration", "category_rank": 33, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:59:47Z", "slug": "a2ui", "full_fetched_at": "2026-10-12T04:02:04Z", "source_note": "", "github_homepage": "https://a2ui.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: samples/community/mcp/a2ui-in-mcpapps/server/server.py", "Found MCP-related server path: samples/community/mcp/a2ui-over-mcp-recipe/server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in eval/pyproject.toml", "Found Anthropic dependency 'anthropic' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found extension-based path: conformance/extensions/a2a/a2a_integration.yaml", "Found browser dependency 'playwright' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.6, "trust_score_v2": 63.6, "rank_v2": 550, "rank_v2_delta": -125, "trust_v2_adjustment": -2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 20.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Snyk Agent Scan", "repo": "snyk/agent-scan", "display_repo": "", "url": "https://github.com/snyk/agent-scan", "listing_class": "agent", "rank": 551, "previous_rank": 547, "rank_delta": -4, "stars": 3132, "stars_fmt": "3.1k", "forks": 288, "forks_fmt": "288", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 34, "commits_low_confidence": false, "score": 76.3, "description": "Security scanner for AI agents, MCP servers and agent skills.", "language": "Python", "open_issues": 10, "category": "Security & Guardrails", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 9, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-08T22:46:57Z", "slug": "snyk-agent-scan", "full_fetched_at": "2026-10-12T08:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/mcp_servers/.test-client-invalid/mcp.json", "Found MCP-related server test path: tests/mcp_servers/.test-client-invalid/skills/invalid-skill/SKILL.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in tests/skills/mcp-builder/scripts/requirements.txt", "Found credential/config marker 'SNYK_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.6, "trust_score_v2": 63.6, "rank_v2": 551, "rank_v2_delta": 58, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 13.3, "maintenance": 18.0, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "NetLogo MCP", "repo": "Razee4315/NetLogo-MCP", "display_repo": "", "url": "https://github.com/Razee4315/NetLogo-MCP", "listing_class": "agent", "rank": 552, "previous_rank": 552, "rank_delta": 0, "stars": 27, "stars_fmt": "27", "forks": 3, "forks_fmt": "3", "last_push": "2026-08-01", "days_ago": 72, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.5, "description": "The first MCP (Model Context Protocol) server for NetLogo, enabling AI assistants like Claude to create, run, and analyze agent-based models through natural conversation.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 307, "npm_package": "", "crate_package": "", "pypi_package": "netlogo-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 30, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.258, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 6, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 3, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-20T05:46:10Z", "slug": "netlogo-mcp", "full_fetched_at": "2026-10-12T00:01:56Z", "source_note": "", "github_homepage": "https://razee4315.github.io/NetLogo-MCP/", "homepage_icon": "/site-icons/f267922539935ea1.png", "homepage_icon_for": "https://razee4315.github.io/NetLogo-MCP/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'netlogo-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "netlogo-mcp", "version": "1.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:56Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.6, "trust_score_v2": 63.6, "rank_v2": 552, "rank_v2_delta": 275, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.5, "identity": 18.0, "transparency": 12.4, "maintenance": 7.2, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Server Kalshi", "repo": "9crusher/mcp-server-kalshi", "display_repo": "", "url": "https://github.com/9crusher/mcp-server-kalshi", "listing_class": "agent", "rank": 553, "previous_rank": 553, "rank_delta": 0, "stars": 31, "stars_fmt": "31", "forks": 14, "forks_fmt": "14", "last_push": "2026-09-19", "days_ago": 23, "weekly_commits": 3, "commits_low_confidence": false, "score": 43.8, "description": "A MCP server to interact with Kalshi prediction markets", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 308, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-kalshi", "docker_image": "", "vscode_extension": "", "weekly_downloads": 215, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.209, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:45:44Z", "slug": "mcp-server-kalshi", "full_fetched_at": "2026-10-12T08:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_server_kalshi/__init__.py", "Found MCP-related server path: src/mcp_server_kalshi/config.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'KALSHI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-server-kalshi' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-kalshi", "version": "0.2.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:14Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.6, "trust_score_v2": 63.6, "rank_v2": 553, "rank_v2_delta": 57, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.3, "identity": 18.0, "transparency": 11.7, "maintenance": 12.9, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Web Researcher MCP", "repo": "zoharbabin/web-researcher-mcp", "display_repo": "", "url": "https://github.com/zoharbabin/web-researcher-mcp", "listing_class": "agent", "rank": 554, "previous_rank": 554, "rank_delta": 0, "stars": 66, "stars_fmt": "66", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 34, "commits_low_confidence": false, "score": 60.0, "description": "Give your AI assistant real web search, full-page reading, and multi-source research with citations that are never fabricated.", "language": "Go", "open_issues": 5, "category": "MCP Servers", "category_rank": 309, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/zoharbabin/web-researcher-mcp:1.47.1", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 8.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:18:45Z", "slug": "web-researcher-mcp", "full_fetched_at": "2026-10-12T04:02:20Z", "source_note": "", "github_homepage": "https://zoharbabin.github.io/web-researcher-mcp/", "homepage_icon": "/site-icons/a563ac91795fef2b.png", "homepage_icon_for": "https://zoharbabin.github.io/web-researcher-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.5, "trust_score_v2": 63.5, "rank_v2": 554, "rank_v2_delta": -6, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.9, "identity": 10.8, "transparency": 15.5, "maintenance": 18.2, "adoption": 4.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "mcphub", "repo": "samanhappy/mcphub", "display_repo": "", "url": "https://github.com/samanhappy/mcphub", "listing_class": "agent", "rank": 555, "previous_rank": 557, "rank_delta": 2, "stars": 2519, "stars_fmt": "2.5k", "forks": 336, "forks_fmt": "336", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 107, "commits_low_confidence": false, "score": 82.2, "description": "Self-hosted MCP gateway and control plane for connecting, controlling, and operating MCP servers.", "language": "TypeScript", "open_issues": 20, "category": "Protocols & Tool Integration", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-08T10:07:02Z", "slug": "mcphub", "full_fetched_at": "2026-10-12T00:02:04Z", "source_note": "", "github_homepage": "https://mcphub.app", "homepage_icon": "/site-icons/490e89b2e0a72ef1.png", "homepage_icon_for": "https://mcphub.app", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found Google Gemini dependency '@google/genai' in package.json", "Found Postgres dependency 'postgres' in package.json", "README/docs also mention Postgres", "Found Redis dependency 'redis' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: .github/codeql/extensions/mcphub-javascript/codeql-pack.yml", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'postgres' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.5, "trust_score_v2": 63.5, "rank_v2": 555, "rank_v2_delta": -11, "trust_v2_adjustment": -0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.3, "maintenance": 20.0, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "zeroshot", "repo": "the-open-engine/zeroshot", "display_repo": "", "url": "https://github.com/the-open-engine/zeroshot", "listing_class": "agent", "rank": 556, "previous_rank": 548, "rank_delta": -8, "stars": 1956, "stars_fmt": "2.0k", "forks": 184, "forks_fmt": "184", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 107, "commits_low_confidence": false, "score": 80.2, "description": "Enforced QA for Claude Code, Codex and Copilot. Draw the graph: code review, your own reviewers and test agents, any model per node. Slop goes back to repair, and the agent that wrote the code can't skip it.", "language": "Rust", "open_issues": 14, "category": "Coding Agents", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-06T22:20:08Z", "slug": "zeroshot", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "https://zeroshot.sh", "homepage_icon": "/site-icons/ac66b611230f8f5b.png", "homepage_icon_for": "https://zeroshot.sh", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.5, "trust_score_v2": 63.5, "rank_v2": 556, "rank_v2_delta": 10, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.1, "maintenance": 19.9, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Redmine MCP Server", "repo": "jztan/redmine-mcp-server", "display_repo": "", "url": "https://github.com/jztan/redmine-mcp-server", "listing_class": "agent", "rank": 557, "previous_rank": 545, "rank_delta": -12, "stars": 83, "stars_fmt": "83", "forks": 40, "forks_fmt": "40", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 230, "commits_low_confidence": false, "score": 68.2, "description": "MCP server connecting AI assistants to Redmine: issues, projects, wikis, time tracking, agile boards, and CRM, with OAuth2 multi-user support", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 310, "npm_package": "", "crate_package": "", "pypi_package": "redmine-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 440, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.17, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-02T13:44:44Z", "slug": "redmine-mcp-server", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "https://redmine-mcp-server.jztan.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/redmine_mcp_server/__init__.py", "Found MCP-related server path: src/redmine_mcp_server/_annotations.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'REDMINE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'redmine-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "redmine-mcp-server", "version": "2.18.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:38Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.5, "trust_score_v2": 63.5, "rank_v2": 557, "rank_v2_delta": 227, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.8, "maintenance": 19.6, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CrowdSentinels AI MCP", "repo": "thomasxm/CrowdSentinels-AI-MCP", "display_repo": "", "url": "https://github.com/thomasxm/CrowdSentinels-AI-MCP", "listing_class": "agent", "rank": 558, "previous_rank": 550, "rank_delta": -8, "stars": 209, "stars_fmt": "209", "forks": 32, "forks_fmt": "32", "last_push": "2026-07-19", "days_ago": 85, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.3, "description": "AI-powered threat hunting and incident response MCP server for Elasticsearch/OpenSearch", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 311, "npm_package": "", "crate_package": "", "pypi_package": "crowdsentinel-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 128, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.09, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:44:16Z", "slug": "crowdsentinels-ai-mcp", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'crowdsentinel-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "crowdsentinel-mcp-server", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:25Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 63.5, "trust_score_v2": 63.5, "rank_v2": 558, "rank_v2_delta": 199, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.8, "identity": 18.0, "transparency": 12.5, "maintenance": 6.3, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Dyad", "repo": "dyad-sh/dyad", "display_repo": "", "url": "https://github.com/dyad-sh/dyad", "listing_class": "agent", "rank": 559, "previous_rank": 561, "rank_delta": 2, "stars": 21862, "stars_fmt": "21.9k", "forks": 2731, "forks_fmt": "2.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 129, "commits_low_confidence": false, "score": 92.0, "description": "Local, open-source AI app builder for power users ✨ v0 / Lovable / Replit / Bolt alternative 🌟 Star if you like it!", "language": "TypeScript", "open_issues": 306, "category": "UI & App Builders", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 5, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:02:19Z", "slug": "dyad", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "https://dyad.sh", "homepage_icon": "/site-icons/0ee75577596c344c.png", "homepage_icon_for": "https://dyad.sh", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: e2e-tests/helpers/fake_mcp_server.ts", "Found MCP-related server path: src/pro/main/ipc/handlers/local_agent/tools/load_enabled_mcp_server_tools.spec.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Postgres", "Supabase", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found Anthropic dependency 'anthropic' in package.json", "Found xAI Grok dependency '@ai-sdk/xai' in package.json", "Found Supabase dependency 'supabase' in package.json", "Found Postgres dependency 'pg' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: src/components/plugins/AddPluginDialog.tsx", "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 63.5, "trust_score_v2": 63.5, "rank_v2": 559, "rank_v2_delta": -27, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Red Hat Lightspeed MCP", "repo": "RedHatInsights/insights-mcp", "display_repo": "", "url": "https://github.com/RedHatInsights/insights-mcp", "listing_class": "agent", "rank": 560, "previous_rank": 559, "rank_delta": -1, "stars": 26, "stars_fmt": "26", "forks": 40, "forks_fmt": "40", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 77, "commits_low_confidence": false, "score": 64.3, "description": "An MCP server to connect Red Hat Lightspeed functionality to an AI / LLM", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 312, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/redhatinsights/red-hat-lightspeed-mcp", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 5, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-10T08:18:43Z", "slug": "red-hat-lightspeed-mcp", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.4, "trust_score_v2": 63.4, "rank_v2": 560, "rank_v2_delta": 95, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.5, "identity": 10.8, "transparency": 14.3, "maintenance": 19.4, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Beacon Skill", "repo": "Scottcjn/beacon-skill", "display_repo": "", "url": "https://github.com/Scottcjn/beacon-skill", "listing_class": "skill", "rank": 69, "previous_rank": 70, "rank_delta": 1, "stars": 238, "stars_fmt": "238", "forks": 111, "forks_fmt": "111", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 12, "commits_low_confidence": false, "score": 62.4, "description": "Beacon - agent-to-agent pings with optional RTC value attached (BoTTube/Moltbook/RustChain + UDP bus)", "language": "Python", "open_issues": 15, "category": "Agent Skills", "category_rank": 69, "npm_package": "beacon-skill", "crate_package": "", "pypi_package": "beacon-skill", "docker_image": "", "vscode_extension": "", "weekly_downloads": 233, "dl_source": "npm+pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 0.7, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T20:35:07Z", "slug": "beacon-skill", "full_fetched_at": "2026-10-09T00:02:02Z", "source_note": "", "github_homepage": "https://rustchain.org", "homepage_icon": "/site-icons/ac04abe7689cee29.png", "homepage_icon_for": "https://rustchain.org", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp_server/__init__.py", "Found MCP-related server path: mcp_server/beacon_lookup.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'beacon-skill' points to the tracked repo", "pypi package 'beacon-skill' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "beacon-skill", "version": "2.16.0" }, { "ecosystem": "PyPI", "name": "beacon-skill", "version": "2.16.1" } ], "found": [], "worst": null, "checked_at": "2026-10-09T00:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.4, "trust_score_v2": 63.4, "rank_v2": 69, "rank_v2_delta": 667, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 13.2, "maintenance": 16.1, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Suna", "repo": "kortix-ai/suna", "display_repo": "", "url": "https://github.com/kortix-ai/suna", "listing_class": "agent", "rank": 561, "previous_rank": 627, "rank_delta": 66, "stars": 20270, "stars_fmt": "20.3k", "forks": 3436, "forks_fmt": "3.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2771, "commits_low_confidence": false, "score": 92.2, "description": "The open-source AI Operating System", "language": "TypeScript", "open_issues": 0, "category": "Agent Frameworks", "category_rank": 47, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-08-04T11:52:53Z", "slug": "suna", "full_fetched_at": "2026-10-12T04:02:50Z", "source_note": "", "github_homepage": "https://www.kortix.com", "homepage_icon": "/site-icons/337c8d462c68ce4b.png", "homepage_icon_for": "https://www.kortix.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/starter/templates/managed/skills/kortix-system/references/opencode/mcp-servers.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in .deepsec/package.json" ] }, "external_service_dependencies": { "providers": [ "E2B", "Postgres", "Supabase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found E2B dependency 'e2b' in apps/api/package.json", "Found Supabase dependency 'supabase' in apps/api/package.json", "Found Postgres dependency 'postgres' in apps/api/package.json", "Found credential/config marker 'STRIPE_SECRET_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found marketplace path: apps/api/src/marketplace/catalog.test.ts", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'postgres' in apps/api/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 63.4, "trust_score_v2": 63.4, "rank_v2": 561, "rank_v2_delta": -59, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 12.6, "maintenance": 20.0, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -1.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Archon", "repo": "coleam00/Archon", "display_repo": "", "url": "https://github.com/coleam00/Archon", "listing_class": "agent", "rank": 562, "previous_rank": 560, "rank_delta": -2, "stars": 23672, "stars_fmt": "23.7k", "forks": 3496, "forks_fmt": "3.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 309, "commits_low_confidence": false, "score": 92.7, "description": "The first open-source harness builder for AI coding. Make AI coding deterministic and repeatable.", "language": "TypeScript", "open_issues": 255, "category": "Coding Agents", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:56:31Z", "slug": "archon", "full_fetched_at": "2026-10-12T04:02:23Z", "source_note": "", "github_homepage": "https://archon.diy", "homepage_icon": "/site-icons/2789bf4821181ee1.png", "homepage_icon_for": "https://archon.diy", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: packages/docs-web/src/content/docs/guides/mcp-servers.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'POSTHOG_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/docs-web/src/pages/plugins/[...id].astro", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.4, "trust_score_v2": 63.4, "rank_v2": 562, "rank_v2_delta": -61, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 12.6, "maintenance": 20.0, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Speech To Speech", "repo": "huggingface/speech-to-speech", "display_repo": "", "url": "https://github.com/huggingface/speech-to-speech", "listing_class": "agent", "rank": 563, "previous_rank": 575, "rank_delta": 12, "stars": 13431, "stars_fmt": "13.4k", "forks": 1709, "forks_fmt": "1.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 392, "commits_low_confidence": false, "score": 89.8, "description": "Build voice agents with open-source models", "language": "Python", "open_issues": 30, "category": "Voice & Conversational", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:30:35Z", "slug": "speech-to-speech", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.3, "trust_score_v2": 63.3, "rank_v2": 563, "rank_v2_delta": -66, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 14.1, "maintenance": 20.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SandBase Harness", "repo": "sandbaseai/sandbase-harness", "display_repo": "", "url": "https://github.com/sandbaseai/sandbase-harness", "listing_class": "agent", "rank": 564, "previous_rank": 565, "rank_delta": 1, "stars": 707, "stars_fmt": "707", "forks": 79, "forks_fmt": "79", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 479, "commits_low_confidence": false, "score": 75.9, "description": "Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.", "language": "TypeScript", "open_issues": 1, "category": "Agent Frameworks", "category_rank": 48, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.73, "scorecard_score": 6.4, "scorecard_checks": { "Dependency-Update-Tool": 10, "Maintained": 10, "Dangerous-Workflow": 10, "Security-Policy": 10, "Token-Permissions": 10, "Code-Review": 0, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Packaging": 10, "Pinned-Dependencies": 4, "Vulnerabilities": 0, "License": 10, "SAST": 10, "Fuzzing": 0, "Branch-Protection": 0, "Signed-Releases": -1, "Contributors": 0, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-12T00:05:55Z", "slug": "sandbase-harness", "full_fetched_at": "2026-10-12T00:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: agent-plugin/mcp.json", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: tests/fixtures/credential-mcp-server.mjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: agent-plugin/PLUGIN.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.3, "trust_score_v2": 63.3, "rank_v2": 564, "rank_v2_delta": 18, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.9, "maintenance": 20.0, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Financial Modeling Prep MCP Server", "repo": "imbenrabi/Financial-Modeling-Prep-MCP-Server", "display_repo": "", "url": "https://github.com/imbenrabi/Financial-Modeling-Prep-MCP-Server", "listing_class": "agent", "rank": 565, "previous_rank": 584, "rank_delta": 19, "stars": 150, "stars_fmt": "150", "forks": 53, "forks_fmt": "53", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 20, "commits_low_confidence": false, "score": 62.6, "description": "A Model Context Protocol (MCP) implementation for Financial Modeling Prep, enabling AI assistants to access and analyze financial data, stock information, company fundamentals, and market insights.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 313, "npm_package": "financial-modeling-prep-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1087, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:36:51Z", "slug": "financial-modeling-prep-mcp-server", "full_fetched_at": "2026-10-12T16:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FMP_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'financial-modeling-prep-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "financial-modeling-prep-mcp-server", "version": "2.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:25Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.3, "trust_score_v2": 63.3, "rank_v2": 565, "rank_v2_delta": 227, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.8, "maintenance": 17.1, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AntV Chart MCP Server", "repo": "antvis/mcp-server-chart", "display_repo": "", "url": "https://github.com/antvis/mcp-server-chart", "listing_class": "agent", "rank": 566, "previous_rank": 566, "rank_delta": 0, "stars": 4395, "stars_fmt": "4.4k", "forks": 422, "forks_fmt": "422", "last_push": "2026-08-27", "days_ago": 46, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.7, "description": "🤖 A visualization mcp & skills contains 25+ visual charts using @antvis. Using for chart generation and data analysis.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 314, "npm_package": "@antv/mcp-server-chart", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4059, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:29:25Z", "slug": "antv-chart-mcp-server", "full_fetched_at": "2026-10-12T04:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@antv/mcp-server-chart' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@antv/mcp-server-chart", "version": "0.9.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:16Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.3, "trust_score_v2": 63.3, "rank_v2": 566, "rank_v2_delta": 271, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 8.9, "adoption": 13.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Octop", "repo": "TencentCloud/Octop", "display_repo": "", "url": "https://github.com/TencentCloud/Octop", "listing_class": "agent", "rank": 567, "previous_rank": 567, "rank_delta": 0, "stars": 8865, "stars_fmt": "8.9k", "forks": 1092, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 282, "commits_low_confidence": false, "score": 87.8, "description": "A smarter, self-hosted AI assistant — multi-user, multi-agent.", "language": "Python", "open_issues": 390, "category": "Multi-Agent Systems", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "octop", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2598, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.57, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:01:57Z", "slug": "octop", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://octop.cloud", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/octop/infra/agents/experts/library/cvm-ai-doctor/skills/cvm-ai-doctor/commands/ai/mcp/manage-mcp-servers.md", "Found MCP-related server test path: tests/unit/cron/test_cron_mcp_servers.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database", "shell" ], "confidence": "high", "evidence": [ "Found declared path: dashboard/src/pages/Admin/Plugins/InstalledPluginsPanel.tsx", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities", "Found shell dependency 'subprocess' in src/octop/infra/mobile/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'octop' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "octop", "version": "1.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.3, "trust_score_v2": 63.3, "rank_v2": 567, "rank_v2_delta": -122, "trust_v2_adjustment": -2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 12.5, "maintenance": 20.0, "adoption": 14.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "IDA Pro MCP", "repo": "mrexodia/ida-pro-mcp", "display_repo": "", "url": "https://github.com/mrexodia/ida-pro-mcp", "listing_class": "agent", "rank": 568, "previous_rank": 563, "rank_delta": -5, "stars": 12690, "stars_fmt": "12.7k", "forks": 1513, "forks_fmt": "1.5k", "last_push": "2026-09-26", "days_ago": 16, "weekly_commits": 20, "commits_low_confidence": false, "score": 78.7, "description": "AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.", "language": "Python", "open_issues": 35, "category": "MCP Servers", "category_rank": 315, "npm_package": "", "crate_package": "", "pypi_package": "ida-pro-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1602, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.47, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:05:40Z", "slug": "ida-pro-mcp", "full_fetched_at": "2026-10-12T08:02:06Z", "source_note": "", "github_homepage": "https://plugins.hex-rays.com/mrexodia/ida-pro-mcp", "homepage_icon": "/site-icons/e6ae568dcc84083b.png", "homepage_icon_for": "https://plugins.hex-rays.com/mrexodia/ida-pro-mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .codex-plugin/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ida-pro-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ida-pro-mcp", "version": "1.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.3, "trust_score_v2": 63.3, "rank_v2": 568, "rank_v2_delta": 258, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 10.8, "maintenance": 16.2, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Citadel", "repo": "SethGammon/Citadel", "display_repo": "", "url": "https://github.com/SethGammon/Citadel", "listing_class": "skill", "rank": 70, "previous_rank": 69, "rank_delta": -1, "stars": 924, "stars_fmt": "924", "forks": 82, "forks_fmt": "82", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 77, "commits_low_confidence": false, "score": 75.2, "description": "The operating layer for Claude Code + OpenAI Codex: persistent project memory, intent routing, safety hooks, cost telemetry, and parallel agent fleets.", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 70, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 7.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-30T13:20:29Z", "slug": "citadel", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "https://sethgammon.github.io/Citadel/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp-servers/citadel-state/README.md", "Found MCP-related server path: mcp-servers/citadel-state/index.js" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 70, "rank_v2_delta": 498, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.5, "identity": 10.8, "transparency": 14.7, "maintenance": 19.4, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "GitHub Copilot CLI", "repo": "github/copilot-cli", "display_repo": "", "url": "https://github.com/github/copilot-cli", "listing_class": "agent", "rank": 569, "previous_rank": 558, "rank_delta": -11, "stars": 11251, "stars_fmt": "11.3k", "forks": 1962, "forks_fmt": "2.0k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 13, "commits_low_confidence": false, "score": 78.6, "description": "GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal. ", "language": "Shell", "open_issues": 2137, "category": "Coding Agents", "category_rank": 32, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:21:30Z", "slug": "github-copilot-cli", "full_fetched_at": "2026-10-12T04:02:30Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "proprietary", "license_override": "proprietary", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 569, "rank_v2_delta": 94, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 14.6, "maintenance": 16.4, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Burr", "repo": "apache/burr", "display_repo": "", "url": "https://github.com/apache/burr", "listing_class": "agent", "rank": 570, "previous_rank": 475, "rank_delta": -95, "stars": 2569, "stars_fmt": "2.6k", "forks": 205, "forks_fmt": "205", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 1, "commits_low_confidence": true, "score": 59.5, "description": "Build applications that make decisions (chatbots, agents, simulations, etc...). Monitor, trace, persist, and execute on your own infrastructure.", "language": "Python", "open_issues": 52, "category": "Agent Frameworks", "category_rank": 49, "npm_package": "", "crate_package": "", "pypi_package": "burr", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4201, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.92, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:25:32Z", "slug": "burr", "full_fetched_at": "2026-10-12T04:02:49Z", "source_note": "", "github_homepage": "https://burr.apache.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI", "Postgres", "Redis", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'bedrock' in pyproject.toml", "Found Tavily dependency 'tavily' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database", "search" ], "confidence": "high", "evidence": [ "Found search dependency 'tavily' in pyproject.toml", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'burr' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "burr", "version": "0.42.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:49Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 570, "rank_v2_delta": 28, "trust_v2_adjustment": 0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 10.8, "transparency": 14.0, "maintenance": 12.3, "adoption": 13.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MITRE ATT&CK", "repo": "Montimage/mitre-mcp", "display_repo": "", "url": "https://github.com/Montimage/mitre-mcp", "listing_class": "agent", "rank": 571, "previous_rank": 564, "rank_delta": -7, "stars": 15, "stars_fmt": "15", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 96, "commits_low_confidence": false, "score": 58.9, "description": "A Model Context Protocol (MCP) server that provides tools for working with the MITRE ATT&CK framework using the mitreattack-python library and the official MCP Python SDK.", "language": "JavaScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 316, "npm_package": "", "crate_package": "", "pypi_package": "mitre-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 90, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.96, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-04T22:23:48Z", "slug": "mitre-att-ck", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mitre_mcp/mitre_mcp_server.py", "Found MCP-related server test path: tests/unit/test_mitre_mcp_server.py", "Found MCP dependency 'modelcontextprotocol' in frontend/package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in frontend/package.json", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in frontend/package.json", "README/docs also mention Google Gemini", "Found credential/config marker 'MITRE_HTTP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mitre-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mitre-mcp", "version": "0.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 571, "rank_v2_delta": 35, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 13.9, "maintenance": 19.7, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zvec", "repo": "alibaba/zvec", "display_repo": "", "url": "https://github.com/alibaba/zvec", "listing_class": "agent", "rank": 572, "previous_rank": 572, "rank_delta": 0, "stars": 16101, "stars_fmt": "16.1k", "forks": 1011, "forks_fmt": "1.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 29, "commits_low_confidence": false, "score": 82.6, "description": "A lightweight, lightning-fast, in-process vector database", "language": "C++", "open_issues": 41, "category": "Memory & Knowledge", "category_rank": 32, "npm_package": "@zvec/zvec", "crate_package": "", "pypi_package": "zvec", "docker_image": "", "vscode_extension": "", "weekly_downloads": 11734, "dl_source": "npm+pypi", "hn_mentions_30d": 96, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 1, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T06:53:05Z", "slug": "zvec", "full_fetched_at": "2026-10-12T04:02:22Z", "source_note": "", "github_homepage": "https://zvec.org", "homepage_icon": "/site-icons/6521adbf6df01b6b.png", "homepage_icon_for": "https://zvec.org", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "warning", "confidence": "high", "summary": "1 package source mismatch detected", "evidence": [ "npm package '@zvec/zvec' points to zvec-ai/zvec-node, not alibaba/zvec", "pypi package 'zvec' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "zvec", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:22Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 572, "rank_v2_delta": -211, "trust_v2_adjustment": -5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 17.9, "adoption": 15.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": -5.0 }, "pending_signals": false }, { "name": "Unity MCP", "repo": "CoplayDev/unity-mcp", "display_repo": "", "url": "https://github.com/CoplayDev/unity-mcp", "listing_class": "agent", "rank": 573, "previous_rank": 568, "rank_delta": -5, "stars": 14874, "stars_fmt": "14.9k", "forks": 1545, "forks_fmt": "1.5k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 139, "commits_low_confidence": false, "score": 89.4, "description": "Unity MCP acts as a bridge between AI assistants and your Unity Editor. Give your LLM tools to manage assets, control scenes, edit scripts, and automate tasks within Unity.", "language": "C#", "open_issues": 50, "category": "MCP Servers", "category_rank": 317, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.51, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T17:07:34Z", "slug": "unity-mcp", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://coplaydev.github.io/unity-mcp/", "homepage_icon": "/site-icons/281c118e5f5a6f25.png", "homepage_icon_for": "https://coplaydev.github.io/unity-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: .claude/mcp.json", "Found MCP-related server path: website/static/img/v5_04_rebuild_mcp_server.png", "Found MCP-related server docs path: docs/images/v5_04_rebuild_mcp_server.png" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 573, "rank_v2_delta": 88, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.4, "maintenance": 19.7, "adoption": 10.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Outlook MCP", "repo": "mpalermiti/outlook-mcp", "display_repo": "", "url": "https://github.com/mpalermiti/outlook-mcp", "listing_class": "agent", "rank": 574, "previous_rank": 551, "rank_delta": -23, "stars": 38, "stars_fmt": "38", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 37, "commits_low_confidence": false, "score": 58.3, "description": "MCP server for Microsoft Outlook personal accounts via Microsoft Graph API. 68 tools across 13 categories — mail, calendar, contacts, tasks, drafts, attachments, delta queries, digest, bulk read. Community project, not affiliated with Microsoft.", "language": "Python", "open_issues": 9, "category": "MCP Servers", "category_rank": 318, "npm_package": "", "crate_package": "", "pypi_package": "outlook-graph-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1128, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.46, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-02T13:33:21Z", "slug": "outlook-mcp", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'outlook-graph-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "outlook-graph-mcp", "version": "1.25.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 574, "rank_v2_delta": 269, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 12.4, "maintenance": 18.0, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Text To Cad", "repo": "earthtojake/text-to-cad", "display_repo": "", "url": "https://github.com/earthtojake/text-to-cad", "listing_class": "skill", "rank": 71, "previous_rank": 72, "rank_delta": 1, "stars": 19543, "stars_fmt": "19.5k", "forks": 1924, "forks_fmt": "1.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 329, "commits_low_confidence": false, "score": 91.0, "description": "Give your agent CAD superpowers.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 71, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:44:17Z", "slug": "text-to-cad", "full_fetched_at": "2026-10-12T12:03:07Z", "source_note": "", "github_homepage": "https://www.texttocad.dev", "homepage_icon": "/site-icons/22ab48ba5ce92d2b.png", "homepage_icon_for": "https://www.texttocad.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: apps/mcp/src/host/server.ts", "Found MCP-related server path: mcp.json", "Found MCP-related server test path: tests/python/packages/cadgen/mcp/test_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/icon.png", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 71, "rank_v2_delta": 466, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cyberbro MCP Server", "repo": "stanfrbd/mcp-cyberbro", "display_repo": "", "url": "https://github.com/stanfrbd/mcp-cyberbro", "listing_class": "agent", "rank": 575, "previous_rank": 562, "rank_delta": -13, "stars": 19, "stars_fmt": "19", "forks": 10, "forks_fmt": "10", "last_push": "2026-08-04", "days_ago": 69, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.0, "description": "Using MCP is fun with Cyberbro!", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 319, "npm_package": "", "crate_package": "", "pypi_package": "mcp-cyberbro", "docker_image": "", "vscode_extension": "", "weekly_downloads": 34, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.417, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:44:59Z", "slug": "cyberbro-mcp-server", "full_fetched_at": "2026-10-12T00:02:19Z", "source_note": "", "github_homepage": "https://docs.cyberbro.net/integrations/Use-Cyberbro-MCP-for-LLM/", "homepage_icon": "/site-icons/5ca0aa61f6ee6ed7.png", "homepage_icon_for": "https://docs.cyberbro.net/integrations/Use-Cyberbro-MCP-for-LLM/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-cyberbro' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-cyberbro", "version": "0.0.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:19Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.2, "trust_score_v2": 63.2, "rank_v2": 575, "rank_v2_delta": 257, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.8, "identity": 18.0, "transparency": 12.1, "maintenance": 7.4, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ASM", "repo": "luongnv89/asm", "display_repo": "", "url": "https://github.com/luongnv89/asm", "listing_class": "agent", "rank": 576, "previous_rank": 543, "rank_delta": -33, "stars": 955, "stars_fmt": "955", "forks": 82, "forks_fmt": "82", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 31, "commits_low_confidence": false, "score": 70.6, "description": "The universal skill manager for AI coding agents.", "language": "TypeScript", "open_issues": 16, "category": "Needs review", "category_rank": 4, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.85, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:01:47Z", "slug": "asm", "full_fetched_at": "2026-10-12T04:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.1, "trust_score_v2": 63.1, "rank_v2": 576, "rank_v2_delta": 8, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 14.3, "maintenance": 18.0, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cloudflare Skills", "repo": "cloudflare/skills", "display_repo": "", "url": "https://github.com/cloudflare/skills", "listing_class": "skill", "rank": 72, "previous_rank": 71, "rank_delta": -1, "stars": 3043, "stars_fmt": "3.0k", "forks": 308, "forks_fmt": "308", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 36, "commits_low_confidence": false, "score": 77.0, "description": "Skills for teaching agents how to build on Cloudflare.", "language": "Shell", "open_issues": 17, "category": "Agent Skills", "category_rank": 72, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.55, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-30T23:04:15Z", "slug": "cloudflare-skills", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.1, "trust_score_v2": 63.1, "rank_v2": 72, "rank_v2_delta": 580, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 13.7, "maintenance": 18.1, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Galaxy MCP", "repo": "galaxyproject/galaxy-mcp", "display_repo": "", "url": "https://github.com/galaxyproject/galaxy-mcp", "listing_class": "agent", "rank": 577, "previous_rank": 571, "rank_delta": -6, "stars": 39, "stars_fmt": "39", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 237, "commits_low_confidence": false, "score": 65.7, "description": "", "language": "TypeScript", "open_issues": 16, "category": "MCP Servers", "category_rank": 320, "npm_package": "", "crate_package": "", "pypi_package": "galaxy-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 429, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.13, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:20:29Z", "slug": "galaxy-mcp", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in python/pyproject.toml", "Found MCP dependency '@modelcontextprotocol/sdk' in typescript/packages/galaxy-mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GALAXY_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'galaxy-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "galaxy-mcp", "version": "1.11.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.1, "trust_score_v2": 63.1, "rank_v2": 577, "rank_v2_delta": 224, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.9, "maintenance": 19.8, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agency Agents", "repo": "msitarzewski/agency-agents", "display_repo": "", "url": "https://github.com/msitarzewski/agency-agents", "listing_class": "agent", "rank": 578, "previous_rank": 573, "rank_delta": -5, "stars": 159360, "stars_fmt": "159.4k", "forks": 25746, "forks_fmt": "25.7k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 311, "commits_low_confidence": false, "score": 99.4, "description": "A complete AI agency at your fingertips - From frontend wizards to Reddit community ninjas, from whimsy injectors to reality checkers. Each agent is a specialized expert with personality, processes, and proven deliverables.", "language": "Shell", "open_issues": 63, "category": "Multi-Agent Systems", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T21:01:35Z", "slug": "agency-agents", "full_fetched_at": "2026-10-12T08:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.1, "trust_score_v2": 63.1, "rank_v2": 578, "rank_v2_delta": 3, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 12.7, "maintenance": 19.7, "adoption": 12.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MindsHub", "repo": "mindsdb/mindshub", "display_repo": "", "url": "https://github.com/mindsdb/mindshub", "listing_class": "agent", "rank": 579, "previous_rank": 574, "rank_delta": -5, "stars": 39789, "stars_fmt": "39.8k", "forks": 6240, "forks_fmt": "6.2k", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 0, "commits_low_confidence": false, "score": 66.7, "description": "The unified workspace where open-source models get things done for you.", "language": "Makefile", "open_issues": 3, "category": "MCP Servers", "category_rank": 321, "npm_package": "", "crate_package": "", "pypi_package": "mindsdb", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2915, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.57, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:44:14Z", "slug": "mindshub", "full_fetched_at": "2026-10-12T08:02:12Z", "source_note": "", "github_homepage": "https://mindshub.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mindsdb' points to mindsdb/mindsdb (same owner as mindsdb/mindshub, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mindsdb", "version": "26.1.0" } ], "found": [ { "id": "PYSEC-2024-82", "aliases": [ "CVE-2024-45852", "GHSA-7vhj-pfwv-hx3w" ], "summary": "Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.", "severity": null, "published": "2024-09-12", "package": "mindsdb", "version": "26.1.0" }, { "id": "PYSEC-2024-83", "aliases": [ "CVE-2024-45853", "GHSA-q9r8-89xr-4xv4" ], "summary": "Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a", "severity": null, "published": "2024-09-12", "package": "mindsdb", "version": "26.1.0" }, { "id": "PYSEC-2024-84", "aliases": [ "CVE-2024-45854", "GHSA-7vhh-gfjc-x8rm" ], "summary": "Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describ", "severity": null, "published": "2024-09-12", "package": "mindsdb", "version": "26.1.0" }, { "id": "PYSEC-2024-85", "aliases": [ "CVE-2024-45855", "GHSA-fr9q-rgwq-g5r5" ], "summary": "Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when using ‘fin", "severity": null, "published": "2024-09-12", "package": "mindsdb", "version": "26.1.0" } ], "worst": null, "checked_at": "2026-10-12T08:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 63.0, "trust_score_v2": 63.0, "rank_v2": 579, "rank_v2_delta": 10, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.7, "identity": 10.8, "transparency": 14.5, "maintenance": 10.3, "adoption": 15.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "fast-agent", "repo": "evalstate/fast-agent", "display_repo": "", "url": "https://github.com/evalstate/fast-agent", "listing_class": "agent", "rank": 580, "previous_rank": 570, "rank_delta": -10, "stars": 3930, "stars_fmt": "3.9k", "forks": 447, "forks_fmt": "447", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 79, "commits_low_confidence": false, "score": 82.6, "description": "Code, Build and Evaluate agents - excellent Model and Skills/MCP/ACP/A2A Support", "language": "Python", "open_issues": 20, "category": "Agent Frameworks", "category_rank": 50, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:10:55Z", "slug": "fast-agent", "full_fetched_at": "2026-10-12T04:02:32Z", "source_note": "", "github_homepage": "https://fast-agent.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/mcp/a3_styling_server.py", "Found MCP-related server path: examples/mcp/elicitations/sandbox_server.py", "Found MCP-related server docs path: docs/docs/assets/social/mcp/client-servers.png" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: plugins/README.md" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.0, "trust_score_v2": 63.0, "rank_v2": 580, "rank_v2_delta": 15, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.3, "identity": 10.8, "transparency": 13.5, "maintenance": 19.6, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Opensquilla", "repo": "TokenRhythm/opensquilla", "display_repo": "", "url": "https://github.com/TokenRhythm/opensquilla", "listing_class": "skill", "rank": 73, "previous_rank": 83, "rank_delta": 10, "stars": 7099, "stars_fmt": "7.1k", "forks": 580, "forks_fmt": "580", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 208, "commits_low_confidence": false, "score": 86.0, "description": "OpenSquilla — Token-Efficient AI Agent with same budget, higher intelligence density", "language": "Python", "open_issues": 175, "category": "Agent Skills", "category_rank": 73, "npm_package": "", "crate_package": "", "pypi_package": "opensquilla", "docker_image": "", "vscode_extension": "", "weekly_downloads": 20, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-12T00:19:53Z", "slug": "opensquilla", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "https://opensquilla.ai", "homepage_icon": "/site-icons/6eae5bd0a6be8dfd.png", "homepage_icon_for": "https://opensquilla.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/opensquilla/cli/mcp_server_cmd.py", "Found MCP-related server path: src/opensquilla/mcp_server/__init__.py", "Found MCP-related server docs path: docs/mcp-server.md", "Found MCP-related server test path: tests/test_mcp/fixtures/fastmcp_server.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "shell" ], "confidence": "high", "evidence": [ "Found declared path: src/opensquilla/cli/tui/plugins/__init__.py", "Found browser dependency 'playwright' in desktop/electron/package.json", "Found shell dependency 'pty' in pyproject.toml", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'opensquilla' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "opensquilla", "version": "0.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:08Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 63.0, "trust_score_v2": 63.0, "rank_v2": 73, "rank_v2_delta": 398, "trust_v2_adjustment": -2.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 12.6, "maintenance": 20.0, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cli Microsoft365 MCP Server", "repo": "pnp/cli-microsoft365-mcp-server", "display_repo": "", "url": "https://github.com/pnp/cli-microsoft365-mcp-server", "listing_class": "agent", "rank": 581, "previous_rank": 576, "rank_delta": -5, "stars": 132, "stars_fmt": "132", "forks": 28, "forks_fmt": "28", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 0, "commits_low_confidence": true, "score": 43.7, "description": "Manage Microsoft 365 using MCP server", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 322, "npm_package": "@pnp/cli-microsoft365-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 854, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T14:59:58Z", "slug": "cli-microsoft365-mcp-server", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@pnp/cli-microsoft365-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@pnp/cli-microsoft365-mcp-server", "version": "0.1.24" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.9, "trust_score_v2": 62.9, "rank_v2": 581, "rank_v2_delta": 277, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 11.5, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Prometheus MCP", "repo": "prometheus/prometheus-mcp", "display_repo": "", "url": "https://github.com/prometheus/prometheus-mcp", "listing_class": "agent", "rank": 582, "previous_rank": 578, "rank_delta": -4, "stars": 121, "stars_fmt": "121", "forks": 25, "forks_fmt": "25", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 31, "commits_low_confidence": false, "score": 62.8, "description": "MCP server for LLMs to interact with Prometheus", "language": "Go", "open_issues": 4, "category": "MCP Servers", "category_rank": 323, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 7.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-05T08:32:33Z", "slug": "prometheus-mcp", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: charts/prometheus-mcp-server/.helmignore", "Found MCP-related server path: charts/prometheus-mcp-server/Chart.yaml", "Found MCP-related server test path: charts/prometheus-mcp-server/templates/tests/test-connection.yaml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.8, "trust_score_v2": 62.8, "rank_v2": 582, "rank_v2_delta": 97, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 14.9, "maintenance": 17.9, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Webhook MCP Server", "repo": "zebbern/webhook-mcp-server", "display_repo": "", "url": "https://github.com/zebbern/webhook-mcp-server", "listing_class": "agent", "rank": 583, "previous_rank": 577, "rank_delta": -6, "stars": 13, "stars_fmt": "13", "forks": 6, "forks_fmt": "6", "last_push": "2026-09-03", "days_ago": 39, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.5, "description": "MCP to Capture HTTP requests, emails, and DNS lookups test webhooks, debugg API callbacks", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 324, "npm_package": "", "crate_package": "", "pypi_package": "webhook-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 36, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.111, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:30:57Z", "slug": "webhook-mcp-server", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "https://webhook.site", "homepage_icon": "/site-icons/a744bcc7e45f270b.png", "homepage_icon_for": "https://webhook.site", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: evals/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'WEBHOOK_SITE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'webhook-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "webhook-mcp-server", "version": "3.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:29Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.8, "trust_score_v2": 62.8, "rank_v2": 583, "rank_v2_delta": 234, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.4, "identity": 18.0, "transparency": 12.2, "maintenance": 9.4, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Google Maps MCP Server", "repo": "cablate/mcp-google-map", "display_repo": "", "url": "https://github.com/cablate/mcp-google-map", "listing_class": "agent", "rank": 584, "previous_rank": 580, "rank_delta": -4, "stars": 471, "stars_fmt": "471", "forks": 94, "forks_fmt": "94", "last_push": "2026-09-26", "days_ago": 16, "weekly_commits": 33, "commits_low_confidence": false, "score": 67.2, "description": "18 Google Maps tools and 3 Agent Skills for place search, routes, travel planning, and local SEO—via MCP or standalone CLI.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 325, "npm_package": "@cablate/mcp-google-map", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1014, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:46:12Z", "slug": "google-maps-mcp-server", "full_fetched_at": "2026-10-12T12:02:48Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json", "Found credential/config marker 'GOOGLE_MAPS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@cablate/mcp-google-map' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@cablate/mcp-google-map", "version": "0.0.69" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:48Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.8, "trust_score_v2": 62.8, "rank_v2": 584, "rank_v2_delta": 216, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 12.1, "maintenance": 17.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "iCloud MCP", "repo": "MrGo2/icloud-mcp", "display_repo": "", "url": "https://github.com/MrGo2/icloud-mcp", "listing_class": "agent", "rank": 585, "previous_rank": 585, "rank_delta": 0, "stars": 66, "stars_fmt": "66", "forks": 20, "forks_fmt": "20", "last_push": "2026-08-11", "days_ago": 62, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.5, "description": "MCP server for Apple services — Mail, Calendar, Contacts, Reminders, Notes, Messages, Safari — via AppleScript (local) or iCloud IMAP/CalDAV/CardDAV (cloud)", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 326, "npm_package": "mcp-icloud", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 184, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-07T02:23:47Z", "slug": "icloud-mcp", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-icloud' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-icloud", "version": "2.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.8, "trust_score_v2": 62.8, "rank_v2": 585, "rank_v2_delta": 280, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 18.0, "transparency": 11.5, "maintenance": 7.9, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "BrowserGym agents", "repo": "ServiceNow/BrowserGym", "display_repo": "", "url": "https://github.com/ServiceNow/BrowserGym", "listing_class": "agent", "rank": 586, "previous_rank": 581, "rank_delta": -5, "stars": 1398, "stars_fmt": "1.4k", "forks": 205, "forks_fmt": "205", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 2, "commits_low_confidence": true, "score": 59.9, "description": "🌎💪 BrowserGym, a Gym environment for web task automation", "language": "Python", "open_issues": 22, "category": "Browser & Computer Use", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "browsergym", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6311, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.94, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "browsergym-agents", "full_fetched_at": "2026-10-12T08:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: browsergym/core/src/browsergym/utils/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'browsergym' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "browsergym", "version": "0.14.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:22Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 62.8, "trust_score_v2": 62.8, "rank_v2": 586, "rank_v2_delta": -37, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 18.0, "transparency": 8.5, "maintenance": 12.5, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AG2", "repo": "ag2ai/ag2", "display_repo": "", "url": "https://github.com/ag2ai/ag2", "listing_class": "agent", "rank": 587, "previous_rank": 586, "rank_delta": -1, "stars": 4992, "stars_fmt": "5.0k", "forks": 742, "forks_fmt": "742", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 115, "commits_low_confidence": false, "score": 85.6, "description": "AG2 (formerly AutoGen): The Open-Source AgentOS.Join us at: https://discord.gg/sNGSwQME3x", "language": "Python", "open_issues": 20, "category": "Agent Frameworks", "category_rank": 51, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-09-28T11:50:39Z", "slug": "ag2", "full_fetched_at": "2026-10-12T00:02:41Z", "source_note": "", "github_homepage": "https://ag2.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: ag2/mcp/server.py", "Found MCP-related server path: ag2/tools/builtin/mcp_server.py", "Found MCP-related server test path: test/config/anthropic/tools/test_mcp_server.py", "Found MCP-related server test path: test/config/openai/tools/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "ElevenLabs", "Google Gemini", "Mistral AI", "OpenAI", "Perplexity", "Redis", "Tavily", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database", "search" ], "confidence": "high", "evidence": [ "Found extension-based path: ag2/extensions/__init__.py", "Found search dependency 'tavily' in pyproject.toml", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 587, "rank_v2_delta": -216, "trust_v2_adjustment": -5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.4, "identity": 10.8, "transparency": 14.8, "maintenance": 20.0, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Xdebug MCP", "repo": "kpanuragh/xdebug-mcp", "display_repo": "", "url": "https://github.com/kpanuragh/xdebug-mcp", "listing_class": "agent", "rank": 588, "previous_rank": 582, "rank_delta": -6, "stars": 28, "stars_fmt": "28", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 6, "commits_low_confidence": false, "score": 47.5, "description": "MCP server for PHP Xdebug debugging - enables AI-assisted PHP debugging through the Model Context Protocol with Unix socket and TCP support", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 327, "npm_package": "xdebug-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 170, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.429, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-05T17:53:12Z", "slug": "xdebug-mcp", "full_fetched_at": "2026-10-11T16:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'xdebug-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "xdebug-mcp", "version": "1.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:20Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 588, "rank_v2_delta": 282, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 14.2, "maintenance": 14.7, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Uptime Kuma", "repo": "DavidFuchs/mcp-uptime-kuma", "display_repo": "", "url": "https://github.com/DavidFuchs/mcp-uptime-kuma", "listing_class": "agent", "rank": 589, "previous_rank": 583, "rank_delta": -6, "stars": 54, "stars_fmt": "54", "forks": 23, "forks_fmt": "23", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 5, "commits_low_confidence": true, "score": 51.5, "description": "A Model Context Protocol (MCP) server for Uptime Kuma version 2.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 328, "npm_package": "@davidfuchs/mcp-uptime-kuma", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 310, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.71, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 6, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:01:33Z", "slug": "mcp-uptime-kuma", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'UPTIME_KUMA_2FA_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@davidfuchs/mcp-uptime-kuma' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@davidfuchs/mcp-uptime-kuma", "version": "0.12.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:00Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 589, "rank_v2_delta": 235, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 14.1, "maintenance": 13.5, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "adk-js", "repo": "google/adk-js", "display_repo": "", "url": "https://github.com/google/adk-js", "listing_class": "agent", "rank": 590, "previous_rank": 595, "rank_delta": 5, "stars": 1435, "stars_fmt": "1.4k", "forks": 218, "forks_fmt": "218", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 91, "commits_low_confidence": false, "score": 79.3, "description": "An open-source, code-first Typescript toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.", "language": "TypeScript", "open_issues": 47, "category": "Agent Frameworks", "category_rank": 52, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:50:10Z", "slug": "adk-js", "full_fetched_at": "2026-10-12T16:02:09Z", "source_note": "", "github_homepage": "https://adk.dev", "homepage_icon": "/site-icons/8ad0a34f2c062822.png", "homepage_icon_for": "https://adk.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: tests/e2e/tools/mcp/mcp_resource_server.mjs", "Found MCP dependency '@modelcontextprotocol/sdk' in core/package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency '@google/genai' in core/package.json", "README/docs also mention Google Gemini", "Found Postgres dependency 'postgres' in dev/package.json", "Found credential/config marker 'GOOGLE_GENAI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: core/src/plugins/_reflect_retry_utils.ts", "Found database dependency 'postgres' in dev/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 590, "rank_v2_delta": -92, "trust_v2_adjustment": -2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 10.8, "transparency": 13.8, "maintenance": 19.8, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Unreal MCP", "repo": "ChiR24/Unreal_mcp", "display_repo": "", "url": "https://github.com/ChiR24/Unreal_mcp", "listing_class": "agent", "rank": 591, "previous_rank": 591, "rank_delta": 0, "stars": 919, "stars_fmt": "919", "forks": 175, "forks_fmt": "175", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 988, "commits_low_confidence": false, "score": 77.9, "description": "A comprehensive Model Context Protocol (MCP) server that enables AI assistants to control Unreal Engine through the native C++ Automation Bridge plugin. Built with TypeScript and C++.", "language": "C++", "open_issues": 11, "category": "MCP Servers", "category_rank": 329, "npm_package": "unreal-engine-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 696, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:37:18Z", "slug": "unreal-mcp", "full_fetched_at": "2026-10-12T12:02:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/McpAutomationBridge/Resources/MCP/server-info.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'UNREAL_MCP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/McpAutomationBridge/AGENTS.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'unreal-engine-mcp-server' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 591, "rank_v2_delta": 39, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 13.3, "maintenance": 19.9, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OfficeCLI", "repo": "iOfficeAI/OfficeCLI", "display_repo": "", "url": "https://github.com/iOfficeAI/OfficeCLI", "listing_class": "skill", "rank": 74, "previous_rank": 77, "rank_delta": 3, "stars": 31900, "stars_fmt": "31.9k", "forks": 2172, "forks_fmt": "2.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 108, "commits_low_confidence": false, "score": 92.5, "description": "OfficeCLI is the first and best Office suite purpose-built for AI agents to read, edit, and automate Word, Excel, and PowerPoint files. Free, open-source, single binary, no Office installation required.", "language": "C#", "open_issues": 39, "category": "Agent Skills", "category_rank": 74, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.11, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T13:33:38Z", "slug": "officecli", "full_fetched_at": "2026-10-12T16:02:28Z", "source_note": "", "github_homepage": "https://officecli.ai", "homepage_icon": "/site-icons/1227d3b94005827f.png", "homepage_icon_for": "https://officecli.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/plugin-protocol.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 74, "rank_v2_delta": 595, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Kimi Code", "repo": "MoonshotAI/kimi-code", "display_repo": "", "url": "https://github.com/MoonshotAI/kimi-code", "listing_class": "agent", "rank": 592, "previous_rank": 587, "rank_delta": -5, "stars": 7844, "stars_fmt": "7.8k", "forks": 1285, "forks_fmt": "1.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 142, "commits_low_confidence": false, "score": 87.9, "description": "Kimi Code CLI — The Starting Point for Next-Gen Agents", "language": "TypeScript", "open_issues": 1098, "category": "Coding Agents", "category_rank": 33, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 9, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 4, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:52:45Z", "slug": "kimi-code", "full_fetched_at": "2026-10-12T08:02:07Z", "source_note": "", "github_homepage": "https://www.kimi.com/code/docs/", "homepage_icon": "/site-icons/1e1ec3c043808ac9.png", "homepage_icon_for": "https://www.kimi.com/code/docs/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: apps/kimi-code/src/tui/utils/mcp-server-status.ts", "Found MCP-related server path: packages/agent-core-v2/src/session/mcp/ephemeralMcpServers.ts", "Found MCP-related server test path: packages/migration-legacy/test/fixtures/golden/.kimi/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/agent-core-v2/src/agent/plugin/agentPlugin.ts", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 592, "rank_v2_delta": -6, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Jarvis Registry", "repo": "ascending-llc/jarvis-registry", "display_repo": "", "url": "https://github.com/ascending-llc/jarvis-registry", "listing_class": "agent", "rank": 593, "previous_rank": 593, "rank_delta": 0, "stars": 3544, "stars_fmt": "3.5k", "forks": 538, "forks_fmt": "538", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 46, "commits_low_confidence": false, "score": 79.9, "description": "Connect any AI copilot or autonomous agent to your enterprise tools — through a single, secure MCP/Agent gateway with built-in identity, access control, and full observability.", "language": "Python", "open_issues": 0, "category": "Protocols & Tool Integration", "category_rank": 35, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:23:56Z", "slug": "jarvis-registry", "full_fetched_at": "2026-10-12T12:02:26Z", "source_note": "", "github_homepage": "https://jarvisregistry.com", "homepage_icon": "/site-icons/d6d9b4991ab9d898.png", "homepage_icon_for": "https://jarvisregistry.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: docker/Dockerfile.mcp-server", "Found MCP-related server path: registry-pkgs/src/registry_pkgs/models/_generated/mcp_server.py", "Found MCP-related server docs path: docs/img/cursor-mcp-server.png" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 593, "rank_v2_delta": 89, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 12.2, "maintenance": 18.7, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mattpocock Skills", "repo": "mattpocock/skills", "display_repo": "", "url": "https://github.com/mattpocock/skills", "listing_class": "skill", "rank": 75, "previous_rank": 76, "rank_delta": 1, "stars": 287509, "stars_fmt": "287.5k", "forks": 24130, "forks_fmt": "24.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 86, "commits_low_confidence": false, "score": 99.2, "description": "Skills for Real Engineers. Straight from my .agents directory.", "language": "Shell", "open_issues": 148, "category": "Agent Skills", "category_rank": 75, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-11T21:04:05Z", "slug": "mattpocock-skills", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "https://aihero.dev/skills", "homepage_icon": "/site-icons/5e2d03f1702c245f.png", "homepage_icon_for": "https://aihero.dev/skills", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 75, "rank_v2_delta": 510, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.2, "maintenance": 19.7, "adoption": 13.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sharedoc MCP", "repo": "AugustusW/sharedoc-mcp", "display_repo": "", "url": "https://github.com/AugustusW/sharedoc-mcp", "listing_class": "agent", "rank": 594, "previous_rank": 588, "rank_delta": -6, "stars": 12, "stars_fmt": "12", "forks": 0, "forks_fmt": "0", "last_push": "2026-09-01", "days_ago": 41, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.1, "description": "Share agent-generated Markdown as links — GitHub gists or self-hosted, via MCP", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 330, "npm_package": "sharedoc-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 51, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.125, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:01:05Z", "slug": "sharedoc-mcp", "full_fetched_at": "2026-10-12T12:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'sharedoc-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "sharedoc-mcp", "version": "2.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:36Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.7, "trust_score_v2": 62.7, "rank_v2": 594, "rank_v2_delta": 277, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 18.0, "transparency": 11.6, "maintenance": 9.3, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DocsGPT", "repo": "arc53/DocsGPT", "display_repo": "", "url": "https://github.com/arc53/DocsGPT", "listing_class": "agent", "rank": 595, "previous_rank": 589, "rank_delta": -6, "stars": 18319, "stars_fmt": "18.3k", "forks": 2200, "forks_fmt": "2.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1406, "commits_low_confidence": false, "score": 91.1, "description": "Private AI platform for agents, assistants and enterprise search. Built-in Agent Builder, Deep research, Document analysis, Multi-model support, and API connectivity for agents.", "language": "Python", "open_issues": 39, "category": "Agent Frameworks", "category_rank": 53, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:38:07Z", "slug": "docsgpt", "full_fetched_at": "2026-10-12T08:02:45Z", "source_note": "", "github_homepage": "https://app.docsgpt.cloud/", "homepage_icon": "/site-icons/622d4c3bbf684354.png", "homepage_icon_for": "https://app.docsgpt.cloud/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: docsgpt/mcp_server.py", "Found MCP-related server docs path: docs/content/API/mcp-server.mdx", "Found MCP-related server test path: tests/services/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "ElevenLabs", "Firecrawl", "Google Gemini", "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found ElevenLabs dependency 'elevenlabs' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: docs/content/Extensions/Chatwoot-extension.mdx", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'pg' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.6, "trust_score_v2": 62.6, "rank_v2": 595, "rank_v2_delta": -77, "trust_v2_adjustment": -1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 13.8, "maintenance": 20.0, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Arr MCP", "repo": "bardesss/arr-mcp", "display_repo": "", "url": "https://github.com/bardesss/arr-mcp", "listing_class": "agent", "rank": 596, "previous_rank": 590, "rank_delta": -6, "stars": 78, "stars_fmt": "78", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 110, "commits_low_confidence": false, "score": 65.0, "description": "One MCP server for the whole self-hosted media stack: Radarr, Sonarr, Whisparr, Prowlarr, Bazarr, Jellyfin, Plex, Seerr, SABnzbd, Transmission, qBittorent and Profilarr.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 331, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:01:37Z", "slug": "arr-mcp", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.6, "trust_score_v2": 62.6, "rank_v2": 596, "rank_v2_delta": 88, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.3, "maintenance": 19.9, "adoption": 4.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Appwrite MCP", "repo": "appwrite/mcp", "display_repo": "", "url": "https://github.com/appwrite/mcp", "listing_class": "agent", "rank": 597, "previous_rank": 598, "rank_delta": 1, "stars": 72, "stars_fmt": "72", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 25, "commits_low_confidence": false, "score": 59.9, "description": "Appwrite’s MCP server. Operating your backend has never been easier.", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 332, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-appwrite", "docker_image": "", "vscode_extension": "", "weekly_downloads": 57976, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.52, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:03:30Z", "slug": "appwrite-mcp", "full_fetched_at": "2026-10-12T12:02:22Z", "source_note": "", "github_homepage": "https://appwrite.io/", "homepage_icon": "/site-icons/28fc4a4365342542.png", "homepage_icon_for": "https://appwrite.io/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_server_appwrite/__init__.py", "Found MCP-related server path: src/mcp_server_appwrite/__main__.py", "Found MCP-related server docs path: docs/images/claude-desktop-local-mcp-servers.png" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-server-appwrite' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.6, "trust_score_v2": 62.6, "rank_v2": 597, "rank_v2_delta": 88, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 12.7, "maintenance": 17.6, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Autoharness", "repo": "tigerless-labs/autoharness", "display_repo": "", "url": "https://github.com/tigerless-labs/autoharness", "listing_class": "skill", "rank": 76, "previous_rank": 79, "rank_delta": 3, "stars": 11022, "stars_fmt": "11.0k", "forks": 617, "forks_fmt": "617", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 102, "commits_low_confidence": false, "score": 87.3, "description": "Autoharness — a self-learning skill layer for Claude Code — distills skills from your real sessions, updates them as you work, and prunes the ones that stop getting used. No daemon, no benchmark.", "language": "Python", "open_issues": 20, "category": "Agent Skills", "category_rank": 76, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:27:10Z", "slug": "autoharness", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.6, "trust_score_v2": 62.6, "rank_v2": 76, "rank_v2_delta": 597, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 12.6, "maintenance": 20.0, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DSH Vision Toolkit", "repo": "Anionex/dsh-vision-toolkit", "display_repo": "", "url": "https://github.com/Anionex/dsh-vision-toolkit", "listing_class": "skill", "rank": 77, "previous_rank": 75, "rank_delta": -2, "stars": 888, "stars_fmt": "888", "forks": 46, "forks_fmt": "46", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 39, "commits_low_confidence": false, "score": 69.9, "description": "[dsh]为纯文本模型设计更强大的视觉工具箱：一行安装使用、粘贴图片直接识别、多张图片问答、截图到前端UI 还原等｜DeepSeek Harness-native integration for agent-vision-toolkit: image Q&A, long-screenshot OCR, UI restoration, grounding, pixel diff, Artifacts, and Web UI.", "language": "TypeScript", "open_issues": 4, "category": "Agent Skills", "category_rank": 77, "npm_package": "@anionex/dsh-vision-toolkit", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3652, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:26:23Z", "slug": "dsh-vision-toolkit", "full_fetched_at": "2026-10-12T16:02:45Z", "source_note": "", "github_homepage": "https://agent-vision.anionex.me", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in package.json", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@anionex/dsh-vision-toolkit' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@anionex/dsh-vision-toolkit", "version": "0.1.46" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:45Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.6, "trust_score_v2": 62.6, "rank_v2": 77, "rank_v2_delta": 698, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 11.8, "maintenance": 18.1, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Excel MCP Server", "repo": "haris-musa/excel-mcp-server", "display_repo": "", "url": "https://github.com/haris-musa/excel-mcp-server", "listing_class": "agent", "rank": 598, "previous_rank": 594, "rank_delta": -4, "stars": 4233, "stars_fmt": "4.2k", "forks": 469, "forks_fmt": "469", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 106, "commits_low_confidence": false, "score": 84.1, "description": "Excel MCP server: let AI (Claude, Cursor, Codex) create and edit Excel files with charts, PivotTables, slicers and formulas. No Excel required.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 333, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T10:07:19Z", "slug": "excel-mcp-server", "full_fetched_at": "2026-10-12T16:02:16Z", "source_note": "", "github_homepage": "https://excelmcpserver.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'EXCEL_MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 598, "rank_v2_delta": 48, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 14.0, "maintenance": 19.9, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Oh Story Claudecode", "repo": "zenstory-ai/oh-story-claudecode", "display_repo": "", "url": "https://github.com/zenstory-ai/oh-story-claudecode", "listing_class": "skill", "rank": 78, "previous_rank": 73, "rank_delta": -5, "stars": 7473, "stars_fmt": "7.5k", "forks": 1069, "forks_fmt": "1.1k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 28, "commits_low_confidence": false, "score": 80.2, "description": "Claude Code / Codex / OpenCode agent skills for writing Chinese web novels (网文): 扫榜、拆文、写作、去AI味、封面全流程，长篇短篇都支持 | 13 skills for novel writing and long-form fiction with file-based continuity tracking. MIT.", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 78, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:39:52Z", "slug": "oh-story-claudecode", "full_fetched_at": "2026-10-12T04:02:09Z", "source_note": "", "github_homepage": "https://zenstory.ai/oh-story", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 78, "rank_v2_delta": 518, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.2, "maintenance": 17.7, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Helicone", "repo": "Helicone/helicone", "display_repo": "", "url": "https://github.com/Helicone/helicone", "listing_class": "agent", "rank": 599, "previous_rank": 597, "rank_delta": -2, "stars": 6212, "stars_fmt": "6.2k", "forks": 683, "forks_fmt": "683", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 3, "commits_low_confidence": true, "score": 68.2, "description": "🧊 Open source LLM observability platform. One line of code to monitor, evaluate, and experiment. YC W23 🍓", "language": "TypeScript", "open_issues": 58, "category": "Observability & Evaluation", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "helicone_async", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "pypi", "hn_mentions_30d": 4, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.99, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:36:45Z", "slug": "helicone", "full_fetched_at": "2026-10-12T04:02:42Z", "source_note": "", "github_homepage": "https://www.helicone.ai", "homepage_icon": "/site-icons/08c75b4535dec115.png", "homepage_icon_for": "https://www.helicone.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Postgres", "Supabase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in web/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in web/package.json", "README/docs also mention Anthropic", "Found Supabase dependency 'supabase' in web/package.json", "README/docs also mention Supabase" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in web/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'helicone_async' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "helicone_async", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:42Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 599, "rank_v2_delta": 146, "trust_v2_adjustment": 3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.3, "identity": 10.8, "transparency": 12.8, "maintenance": 13.1, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ToolJet", "repo": "ToolJet/ToolJet", "display_repo": "", "url": "https://github.com/ToolJet/ToolJet", "listing_class": "agent", "rank": 600, "previous_rank": 592, "rank_delta": -8, "stars": 41084, "stars_fmt": "41.1k", "forks": 5497, "forks_fmt": "5.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 691, "commits_low_confidence": false, "score": 95.1, "description": "Open-source foundation of ToolJet AI - the enterprise app generation platform for internal tools, dashboards, business applications, workflows and AI agents. Build visually, from a prompt, or from Claude Code, Codex and Cursor over MCP 🚀", "language": "HTML", "open_issues": 357, "category": "UI & App Builders", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:00:25Z", "slug": "tooljet", "full_fetched_at": "2026-10-12T08:02:36Z", "source_note": "", "github_homepage": "https://tooljet.com", "homepage_icon": "/site-icons/9d2d8390f91b891c.png", "homepage_icon_for": "https://tooljet.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in server/package.json", "Found Anthropic dependency 'anthropic' in server/package.json", "Found Postgres dependency 'pg' in server/package.json", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/create-plugin/SKILL.md", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'pg' in server/package.json", "Found code dependency '@octokit' in server/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 600, "rank_v2_delta": 14, "trust_v2_adjustment": 0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Langroid", "repo": "langroid/langroid", "display_repo": "", "url": "https://github.com/langroid/langroid", "listing_class": "agent", "rank": 601, "previous_rank": 607, "rank_delta": 6, "stars": 4113, "stars_fmt": "4.1k", "forks": 421, "forks_fmt": "421", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 85, "commits_low_confidence": false, "score": 83.0, "description": "Harness LLMs with Multi-Agent Programming", "language": "Python", "open_issues": 42, "category": "Agent Frameworks", "category_rank": 54, "npm_package": "", "crate_package": "", "pypi_package": "langroid", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4158, "dl_source": "pypi", "hn_mentions_30d": 4, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.79, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:01:03Z", "slug": "langroid", "full_fetched_at": "2026-10-12T04:02:50Z", "source_note": "", "github_homepage": "https://langroid.github.io/langroid/", "homepage_icon": "/site-icons/7c3fc5695f1cafbb.png", "homepage_icon_for": "https://langroid.github.io/langroid/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: langroid/agent/tools/mcp/fastmcp_client.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Azure OpenAI", "Firecrawl", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Redis", "Tavily", "Weaviate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code", "database", "search" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'pg' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'langroid' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "langroid", "version": "0.69.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:50Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 601, "rank_v2_delta": -141, "trust_v2_adjustment": -3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 12.2, "maintenance": 19.7, "adoption": 13.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Desktop Commander MCP", "repo": "wonderwhy-er/DesktopCommanderMCP", "display_repo": "", "url": "https://github.com/wonderwhy-er/DesktopCommanderMCP", "listing_class": "agent", "rank": 602, "previous_rank": 652, "rank_delta": 50, "stars": 10004, "stars_fmt": "10.0k", "forks": 1265, "forks_fmt": "1.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 291, "commits_low_confidence": false, "score": 88.4, "description": "This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities", "language": "JavaScript", "open_issues": 211, "category": "MCP Servers", "category_rank": 334, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.76, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T16:09:42Z", "slug": "desktop-commander-mcp", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "https://desktopcommander.app/", "homepage_icon": "/site-icons/b6a3ef138d494bdd.png", "homepage_icon_for": "https://desktopcommander.app/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: test/fixtures/broken-tools-mcp-server.js", "Found MCP-related server test path: test/fixtures/dying-mcp-server.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in package.json", "Ships a Claude Code plugin manifest (plugins/claude/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 602, "rank_v2_delta": 33, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "oh-my-openagent", "repo": "code-yeongyu/oh-my-openagent", "display_repo": "", "url": "https://github.com/code-yeongyu/oh-my-openagent", "listing_class": "agent", "rank": 603, "previous_rank": 599, "rank_delta": -4, "stars": 69973, "stars_fmt": "70.0k", "forks": 5748, "forks_fmt": "5.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 4889, "commits_low_confidence": false, "score": 96.6, "description": "OmO: Just type \"mass ulw\" keyword with your prompt. Now you are the master of graph engineering.", "language": "TypeScript", "open_issues": 780, "category": "Coding Agents", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-16T22:42:35Z", "slug": "oh-my-openagent", "full_fetched_at": "2026-10-12T08:02:27Z", "source_note": "", "github_homepage": "https://omo.dev", "homepage_icon": "/site-icons/2cca7c8f08539a80.png", "homepage_icon_for": "https://omo.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/claude-code-compat-core/src/features/claude-code-plugin-loader/mcp-server-loader.ts", "Found MCP-related server test path: packages/claude-code-compat-core/src/features/claude-code-plugin-loader/mcp-server-loader.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in tests/hashline/package.json", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: packages/omo-codex/plugin/.codex-plugin/plugin.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 603, "rank_v2_delta": 75, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 11.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skill Seekers", "repo": "yusufkaraaslan/Skill_Seekers", "display_repo": "", "url": "https://github.com/yusufkaraaslan/Skill_Seekers", "listing_class": "skill", "rank": 79, "previous_rank": 74, "rank_delta": -5, "stars": 15136, "stars_fmt": "15.1k", "forks": 1541, "forks_fmt": "1.5k", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 47, "commits_low_confidence": false, "score": 84.4, "description": "Convert documentation websites, GitHub repositories, and PDFs into Claude AI skills with automatic conflict detection", "language": "Python", "open_issues": 46, "category": "Agent Skills", "category_rank": 79, "npm_package": "", "crate_package": "", "pypi_package": "skill-seekers", "docker_image": "", "vscode_extension": "", "weekly_downloads": 603, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.29, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:02:34Z", "slug": "skill-seekers", "full_fetched_at": "2026-10-12T04:02:21Z", "source_note": "", "github_homepage": "https://skillseekersweb.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/skill_seekers/mcp/server.py", "Found MCP-related server path: src/skill_seekers/mcp/server_fastmcp.py", "Found MCP-related server docs path: docs/UML/exports/07_mcp_server.png" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "OpenAI", "Pinecone", "Weaviate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-generativeai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "code", "database" ], "confidence": "high", "evidence": [ "Found declared path: .codex-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "Found database dependency 'weaviate' in pyproject.toml", "README/docs also mention database capabilities", "Found code dependency 'gitpython' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'skill-seekers' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "skill-seekers", "version": "3.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:21Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.5, "trust_score_v2": 62.5, "rank_v2": 79, "rank_v2_delta": 583, "trust_v2_adjustment": 1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 12.1, "maintenance": 17.9, "adoption": 13.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -1.2, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Studio MCP", "repo": "snyk/studio-mcp", "display_repo": "", "url": "https://github.com/snyk/studio-mcp", "listing_class": "agent", "rank": 604, "previous_rank": 596, "rank_delta": -8, "stars": 55, "stars_fmt": "55", "forks": 16, "forks_fmt": "16", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 1, "commits_low_confidence": false, "score": 43.5, "description": "", "language": "Go", "open_issues": 0, "category": "MCP Servers", "category_rank": 335, "npm_package": "snyk", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 648190, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:36:37Z", "slug": "studio-mcp", "full_fetched_at": "2026-10-12T00:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: internal/configure/mcp_server.go" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'snyk' points to snyk/snyk (same owner as snyk/studio-mcp, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "snyk", "version": "1.1308.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.4, "trust_score_v2": 62.4, "rank_v2": 604, "rank_v2_delta": 90, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.3, "maintenance": 12.4, "adoption": 11.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Rakazo", "repo": "elie222/rakazo", "display_repo": "", "url": "https://github.com/elie222/rakazo", "listing_class": "agent", "rank": 605, "previous_rank": 533, "rank_delta": -72, "stars": 3782, "stars_fmt": "3.8k", "forks": 650, "forks_fmt": "650", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 396, "commits_low_confidence": false, "score": 84.6, "description": "Open-source Grok Bot alternative. Choose your own model and sandbox.", "language": "TypeScript", "open_issues": 11, "category": "Multi-Agent Systems", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.64, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T12:04:00Z", "slug": "rakazo", "full_fetched_at": "2026-10-12T16:01:51Z", "source_note": "", "github_homepage": "https://rakazo.com", "homepage_icon": "/site-icons/750e03dd8de2df74.png", "homepage_icon_for": "https://rakazo.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/adapters/src/mcp-server-tool.ts", "Found MCP-related server test path: packages/adapters/src/mcp-server-tool.test.ts" ] }, "external_service_dependencies": { "providers": [ "E2B", "OpenRouter", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found E2B dependency 'e2b' in package.json", "README/docs also mention E2B", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/mobile/plugins/with-scene-lifecycle.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.4, "trust_score_v2": 62.4, "rank_v2": 605, "rank_v2_delta": -2, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 13.2, "maintenance": 20.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Kiro Crew", "repo": "kirodotdev/KiroCrew", "display_repo": "", "url": "https://github.com/kirodotdev/KiroCrew", "listing_class": "agent", "rank": 606, "previous_rank": 600, "rank_delta": -6, "stars": 4380, "stars_fmt": "4.4k", "forks": 788, "forks_fmt": "788", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 4024, "commits_low_confidence": false, "score": 85.3, "description": "A persistent workspace for development work that self-improves and continues beyond one session.", "language": "Python", "open_issues": 1915, "category": "Coding Agents", "category_rank": 35, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:36:05Z", "slug": "kiro-crew", "full_fetched_at": "2026-10-11T16:02:20Z", "source_note": "", "github_homepage": "https://kiro.dev/crew/", "homepage_icon": "/site-icons/5fbf09ed368cd3f0.png", "homepage_icon_for": "https://kiro.dev/crew/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/kiro_crew/apps/builtins/auto_improvement/backend/mcp_server.py", "Found MCP-related server path: src/kiro_crew/apps/builtins/mochi/mcp_server.py", "Found MCP-related server docs path: docs/guides/connecting-remote-oauth-mcp-server.md", "Found MCP-related server test path: src/kiro_crew/apps/builtins/auto_improvement/tests/test_backend_mcp_server_cov80.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "shell" ], "confidence": "high", "evidence": [ "Found extension-based path: src/kiro_crew/agent_sdk/gate_extensions/deepseek/kiro_crew_tool_gate.mjs", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in setup.py", "Found shell dependency 'subprocess' in setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.4, "trust_score_v2": 62.4, "rank_v2": 606, "rank_v2_delta": -48, "trust_v2_adjustment": -1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.3, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SkillSpector", "repo": "NVIDIA/SkillSpector", "display_repo": "", "url": "https://github.com/NVIDIA/SkillSpector", "listing_class": "agent", "rank": 607, "previous_rank": 539, "rank_delta": -68, "stars": 20033, "stars_fmt": "20.0k", "forks": 1755, "forks_fmt": "1.8k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 721, "commits_low_confidence": false, "score": 90.6, "description": "Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.", "language": "Python", "open_issues": 64, "category": "Security & Guardrails", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.76, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:55:05Z", "slug": "skillspector", "full_fetched_at": "2026-10-12T08:02:12Z", "source_note": "", "github_homepage": "https://docs.nvidia.com/skills/scanning-agent-skills", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/skillspector/mcp_server.py", "Found MCP-related server test path: tests/unit/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Azure OpenAI", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: extensions/skillspector.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.4, "trust_score_v2": 62.4, "rank_v2": 607, "rank_v2_delta": -69, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 12.8, "maintenance": 19.9, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Linkedin Skills", "repo": "sergebulaev/linkedin-skills", "display_repo": "", "url": "https://github.com/sergebulaev/linkedin-skills", "listing_class": "skill", "rank": 80, "previous_rank": 78, "rank_delta": -2, "stars": 4563, "stars_fmt": "4.6k", "forks": 766, "forks_fmt": "766", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 59, "commits_low_confidence": false, "score": 81.9, "description": "Claude skills for LinkedIn. 11 Claude Code and Codex skills that write human-sounding LinkedIn posts, craft comments that get noticed, analyze your feed, and build a publishing cadence, all from your terminal. Content engineering by Creative Content Crafts. MIT.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 80, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-25T13:20:27Z", "slug": "linkedin-skills", "full_fetched_at": "2026-10-12T00:02:09Z", "source_note": "", "github_homepage": "https://cccrafts.ai", "homepage_icon": "/site-icons/57f6766f17268b83.png", "homepage_icon_for": "https://cccrafts.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'PUBLORA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.3, "trust_score_v2": 62.3, "rank_v2": 80, "rank_v2_delta": 480, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 14.5, "maintenance": 18.8, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ui Ux Pro Max Skill", "repo": "nextlevelbuilder/ui-ux-pro-max-skill", "display_repo": "", "url": "https://github.com/nextlevelbuilder/ui-ux-pro-max-skill", "listing_class": "skill", "rank": 81, "previous_rank": 86, "rank_delta": 5, "stars": 135080, "stars_fmt": "135.1k", "forks": 14357, "forks_fmt": "14.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 20, "commits_low_confidence": false, "score": 90.8, "description": "An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.", "language": "Python", "open_issues": 41, "category": "Agent Skills", "category_rank": 81, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.76, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:56:02Z", "slug": "ui-ux-pro-max-skill", "full_fetched_at": "2026-10-12T00:02:06Z", "source_note": "", "github_homepage": "https://www.uupm.cc/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'GOOGLE_FONTS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.3, "trust_score_v2": 62.3, "rank_v2": 81, "rank_v2_delta": 475, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.3, "identity": 10.8, "transparency": 12.9, "maintenance": 17.3, "adoption": 12.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pinvou Agent", "repo": "Pinvou/pinvou-agent", "display_repo": "", "url": "https://github.com/Pinvou/pinvou-agent", "listing_class": "agent", "rank": 608, "previous_rank": 602, "rank_delta": -6, "stars": 2458, "stars_fmt": "2.5k", "forks": 359, "forks_fmt": "359", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 168, "commits_low_confidence": false, "score": 82.2, "description": "Open-source desktop AI agent for tools, files, knowledge, workflows, and real deliverables.", "language": "Rust", "open_issues": 11, "category": "UI & App Builders", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:08:57Z", "slug": "pinvou-agent", "full_fetched_at": "2026-10-12T12:02:41Z", "source_note": "", "github_homepage": "https://pinvou.com/", "homepage_icon": "/site-icons/995a4a6a36a85b90.png", "homepage_icon_for": "https://pinvou.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: pinvou3-app/resources/mcp-servers/canva-mcp/manifest.json", "Found MCP-related server path: pinvou3-app/resources/mcp-servers/gongwen/gbt9704_styles.py" ] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "high", "evidence": [ "Found marketplace path: pinvou3-app/src-tauri/resources/common/skill-marketplace/government-writing/SKILL.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.3, "trust_score_v2": 62.3, "rank_v2": 608, "rank_v2_delta": 13, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 12.5, "maintenance": 20.0, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -1.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Yazio MCP", "repo": "fliptheweb/yazio-mcp", "display_repo": "", "url": "https://github.com/fliptheweb/yazio-mcp", "listing_class": "agent", "rank": 609, "previous_rank": 604, "rank_delta": -5, "stars": 64, "stars_fmt": "64", "forks": 22, "forks_fmt": "22", "last_push": "2026-08-13", "days_ago": 60, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.9, "description": "MCP server for managing Yazio user & nutrition data (unofficial)", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 336, "npm_package": "yazio-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 301, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.087, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:34:21Z", "slug": "yazio-mcp", "full_fetched_at": "2026-10-12T16:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'yazio-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "yazio-mcp", "version": "0.0.14" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.3, "trust_score_v2": 62.3, "rank_v2": 609, "rank_v2_delta": 277, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 18.0, "transparency": 11.0, "maintenance": 8.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Turbovec", "repo": "RyanCodrai/turbovec", "display_repo": "", "url": "https://github.com/RyanCodrai/turbovec", "listing_class": "agent", "rank": 610, "previous_rank": 605, "rank_delta": -5, "stars": 17381, "stars_fmt": "17.4k", "forks": 1491, "forks_fmt": "1.5k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 14, "commits_low_confidence": false, "score": 79.2, "description": "A vector index built on TurboQuant, written in Rust with Python bindings", "language": "Rust", "open_issues": 22, "category": "Needs review", "category_rank": 5, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 7.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-07T10:04:11Z", "slug": "turbovec", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.2, "trust_score_v2": 62.2, "rank_v2": 610, "rank_v2_delta": 13, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 14.8, "maintenance": 16.4, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Apollo MCP Server", "repo": "apollographql/apollo-mcp-server", "display_repo": "", "url": "https://github.com/apollographql/apollo-mcp-server", "listing_class": "agent", "rank": 611, "previous_rank": 601, "rank_delta": -10, "stars": 314, "stars_fmt": "314", "forks": 79, "forks_fmt": "79", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 32, "commits_low_confidence": false, "score": 67.0, "description": "Apollo MCP Server", "language": "Rust", "open_issues": 13, "category": "MCP Servers", "category_rank": 337, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/apollographql/apollo-mcp-server:v1.17.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:48:16Z", "slug": "apollo-mcp-server", "full_fetched_at": "2026-10-12T08:02:44Z", "source_note": "", "github_homepage": "https://www.apollographql.com/docs/apollo-mcp-server/quickstart", "homepage_icon": "/site-icons/e007a521bfa8a955.png", "homepage_icon_for": "https://www.apollographql.com/docs/apollo-mcp-server/quickstart", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .idea/runConfigurations/Test_apollo_mcp_server.xml", "Found MCP-related server path: crates/apollo-mcp-server/Cargo.toml", "Found MCP-related server test path: crates/apollo-mcp-server/tests/collection_sync.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.2, "trust_score_v2": 62.2, "rank_v2": 611, "rank_v2_delta": 92, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.5, "maintenance": 17.7, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Maxun", "repo": "getmaxun/maxun", "display_repo": "", "url": "https://github.com/getmaxun/maxun", "listing_class": "agent", "rank": 612, "previous_rank": 603, "rank_delta": -9, "stars": 17804, "stars_fmt": "17.8k", "forks": 1537, "forks_fmt": "1.5k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 120, "commits_low_confidence": false, "score": 89.7, "description": "Turn any website into a structured API. Extract, automate, search and monitor the web.", "language": "TypeScript", "open_issues": 74, "category": "Research & Data", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "maxun", "docker_image": "", "vscode_extension": "", "weekly_downloads": 59, "dl_source": "pypi", "hn_mentions_30d": 7, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.36, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T20:36:59Z", "slug": "maxun", "full_fetched_at": "2026-10-12T04:02:37Z", "source_note": "", "github_homepage": "https://www.maxun.dev", "homepage_icon": "/site-icons/bf850f9fcd267930.png", "homepage_icon_for": "https://www.maxun.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "Found Postgres dependency 'pg' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'maxun' points to getmaxun/python-sdk (same owner as getmaxun/maxun, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "maxun", "version": "0.0.13" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:37Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 62.2, "trust_score_v2": 62.2, "rank_v2": 612, "rank_v2_delta": -37, "trust_v2_adjustment": -1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 12.5, "maintenance": 19.7, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server for OSCAL", "repo": "awslabs/mcp-server-for-oscal", "display_repo": "", "url": "https://github.com/awslabs/mcp-server-for-oscal", "listing_class": "agent", "rank": 613, "previous_rank": 611, "rank_delta": -2, "stars": 52, "stars_fmt": "52", "forks": 9, "forks_fmt": "9", "last_push": "2026-06-23", "days_ago": 111, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.7, "description": "OSCAL tools for AI agents", "language": "Python", "open_issues": 9, "category": "MCP Servers", "category_rank": 338, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-for-oscal", "docker_image": "", "vscode_extension": "", "weekly_downloads": 285, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.949, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:08:08Z", "slug": "mcp-server-for-oscal", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .kiro/specs/oscal-mcp-server/.config.kiro", "Found MCP-related server path: .kiro/specs/oscal-mcp-server/design.md" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "README/docs also mention Amazon Bedrock" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-server-for-oscal' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-for-oscal", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:40Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "awslabs/mcp-server-for-oscal", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.2, "trust_score_v2": 62.2, "rank_v2": 613, "rank_v2_delta": 93, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 17.9, "identity": 18.0, "transparency": 12.3, "maintenance": 4.6, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "VulnClaw", "repo": "Netw0rkNoob/VulnClaw", "display_repo": "", "url": "https://github.com/Netw0rkNoob/VulnClaw", "listing_class": "skill", "rank": 82, "previous_rank": 80, "rank_delta": -2, "stars": 3585, "stars_fmt": "3.6k", "forks": 498, "forks_fmt": "498", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 37, "commits_low_confidence": false, "score": 78.5, "description": "基于 AI Agent + MCP 工具链 + 渗透 Skill 编排， 配合大语言模型， 自然语言输入 → 自动完成「信息收集 → 漏洞发现 → 漏洞利用 → 报告生成」全流程。", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 82, "npm_package": "", "crate_package": "", "pypi_package": "vulnclaw", "docker_image": "", "vscode_extension": "", "weekly_downloads": 272, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.36, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:19:04Z", "slug": "vulnclaw", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://unclecheng-li.github.io/vulnclaw.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found credential/config marker 'VULNCLAW_LLM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: tests/plugins/__init__.py", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'vulnclaw' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "vulnclaw", "version": "0.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.2, "trust_score_v2": 62.2, "rank_v2": 82, "rank_v2_delta": 636, "trust_v2_adjustment": 2.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.0, "maintenance": 18.3, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PipesHub", "repo": "pipeshub-ai/pipeshub-ai", "display_repo": "", "url": "https://github.com/pipeshub-ai/pipeshub-ai", "listing_class": "agent", "rank": 614, "previous_rank": 616, "rank_delta": 2, "stars": 3830, "stars_fmt": "3.8k", "forks": 598, "forks_fmt": "598", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2092, "commits_low_confidence": false, "score": 84.4, "description": "The open-source context layer for AI agents. PipesHub turns your company's knowledge (Slack, Drive, Jira, GitHub, Microsoft 365 and 40+ connectors) into a permission-aware workspace that agents can search, grep, navigate and cite. MCP, SDKs and built-in agents. Self-hosted.", "language": "Python", "open_issues": 77, "category": "Memory & Knowledge", "category_rank": 33, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:48:53Z", "slug": "pipeshub", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "https://pipeshub.com", "homepage_icon": "/site-icons/1532f489c30e1f07.png", "homepage_icon_for": "https://pipeshub.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: backend/nodejs/apps/src/modules/mcp_servers/container/mcp_servers.container.ts", "Found MCP-related server path: backend/nodejs/apps/src/modules/mcp_servers/controller/mcp_servers.controller.ts", "Found MCP-related server test path: backend/nodejs/apps/tests/modules/mcp_servers/container/mcp_servers.container.test.ts" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Google Gemini", "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in backend/python/pyproject.toml", "Found Google Gemini dependency 'google-genai' in backend/python/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in loadtest/requirements.txt", "Found Qdrant dependency 'qdrant' in integration-tests/pyproject.toml", "README/docs also mention Qdrant", "Found Postgres dependency 'psycopg' in integration-tests/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in integration-tests/pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.1, "trust_score_v2": 62.1, "rank_v2": 614, "rank_v2_delta": -71, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 14.5, "maintenance": 20.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Java SDK", "repo": "modelcontextprotocol/java-sdk", "display_repo": "", "url": "https://github.com/modelcontextprotocol/java-sdk", "listing_class": "agent", "rank": 615, "previous_rank": 608, "rank_delta": -7, "stars": 3730, "stars_fmt": "3.7k", "forks": 1159, "forks_fmt": "1.2k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 21, "commits_low_confidence": false, "score": 77.0, "description": "The official Java SDK for Model Context Protocol servers and clients. Maintained in collaboration with Spring AI", "language": "Java", "open_issues": 112, "category": "Protocols & Tool Integration", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-09-29T16:46:32Z", "slug": "mcp-java-sdk", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "https://java.sdk.modelcontextprotocol.io/latest/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/blog/posts/mcp-server-performance-benchmark.md", "Found MCP-related server docs path: docs/images/java-mcp-server-architecture.jpg" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.1, "trust_score_v2": 62.1, "rank_v2": 615, "rank_v2_delta": 92, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 13.8, "maintenance": 17.2, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Griptape", "repo": "griptape-ai/griptape", "display_repo": "", "url": "https://github.com/griptape-ai/griptape", "listing_class": "agent", "rank": 616, "previous_rank": 609, "rank_delta": -7, "stars": 2580, "stars_fmt": "2.6k", "forks": 264, "forks_fmt": "264", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 5, "commits_low_confidence": true, "score": 65.8, "description": "Modular Python framework for AI agents and workflows with chain-of-thought reasoning, tools, and memory. ", "language": "Python", "open_issues": 63, "category": "Agent Frameworks", "category_rank": 55, "npm_package": "", "crate_package": "", "pypi_package": "griptape", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12691, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T06:50:36Z", "slug": "griptape", "full_fetched_at": "2026-10-12T04:02:41Z", "source_note": "", "github_homepage": "https://www.griptape.ai", "homepage_icon": "/site-icons/2d4ce21eb6a29f4f.png", "homepage_icon_for": "https://www.griptape.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Azure OpenAI", "Cohere", "ElevenLabs", "Google Gemini", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Redis", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Cohere dependency 'cohere' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found declared path: docs/plugins/swagger_ui_plugin.py", "Found browser dependency 'playwright' in pyproject.toml", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'pg' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'griptape' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "griptape", "version": "1.13.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:41Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.1, "trust_score_v2": 62.1, "rank_v2": 616, "rank_v2_delta": -38, "trust_v2_adjustment": -1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 13.2, "adoption": 13.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Cn Commerce", "repo": "TonyWang-hub/mcp-cn-commerce", "display_repo": "", "url": "https://github.com/TonyWang-hub/mcp-cn-commerce", "listing_class": "agent", "rank": 617, "previous_rank": 614, "rank_delta": -3, "stars": 79, "stars_fmt": "79", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 25, "commits_low_confidence": false, "score": 59.4, "description": "中国电商 MCP 连接器：8 个平台、155 个已注册工具。开源标准版，含能力矩阵与实际工程验收记录；真实商家联调状态逐项公开。Chinese commerce MCP connectors with documented capabilities and validation status.", "language": "Python", "open_issues": 8, "category": "MCP Servers", "category_rank": 339, "npm_package": "", "crate_package": "", "pypi_package": "mcp-cn-commerce", "docker_image": "", "vscode_extension": "", "weekly_downloads": 158, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.38, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:47:27Z", "slug": "mcp-cn-commerce", "full_fetched_at": "2026-10-12T00:02:27Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OCEANENGINE_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-cn-commerce' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-cn-commerce", "version": "0.1.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:27Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.1, "trust_score_v2": 62.1, "rank_v2": 617, "rank_v2_delta": 231, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 12.9, "maintenance": 17.5, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Huly MCP", "repo": "dearlordylord/huly-mcp", "display_repo": "", "url": "https://github.com/dearlordylord/huly-mcp", "listing_class": "agent", "rank": 618, "previous_rank": 612, "rank_delta": -6, "stars": 58, "stars_fmt": "58", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 499, "commits_low_confidence": false, "score": 66.8, "description": "Huly MCP and CLI: Feature-complete MCP server and CLI for Huly platform. Intabia partially compatible.", "language": "TypeScript", "open_issues": 27, "category": "MCP Servers", "category_rank": 340, "npm_package": "@firfi/huly-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1130, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:00:53Z", "slug": "huly-mcp", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "https://huly-mcp.dearlordylord.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/movement-stage-observer.ts", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: test/mcp/fixtures/stdio-drain-server.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'HULY_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@firfi/huly-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@firfi/huly-mcp", "version": "0.53.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:05Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.1, "trust_score_v2": 62.1, "rank_v2": 618, "rank_v2_delta": 227, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.3, "maintenance": 19.9, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent Orchestrator", "repo": "Untrivial-ai/agent-orchestrator", "display_repo": "", "url": "https://github.com/OrchestratorInc/agent-orchestrator", "listing_class": "skill", "rank": 83, "previous_rank": 84, "rank_delta": 1, "stars": 13104, "stars_fmt": "13.1k", "forks": 1797, "forks_fmt": "1.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 545, "commits_low_confidence": false, "score": 89.8, "description": "Run and supervise teams of coding agents from planning to merge. Any harness (Claude code, codex, +25 more). Desktop, web, mobile, and cloud agents.", "language": "Go", "open_issues": 454, "category": "Agent Skills", "category_rank": 83, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:08:32Z", "slug": "agent-orchestrator", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "https://orchestrator.inc", "homepage_icon": "/site-icons/f0d61dbf84624c58.png", "homepage_icon_for": "https://orchestrator.inc", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: frontend/src/docs/content/plugins/agents/aider.mdx", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.1, "trust_score_v2": 62.1, "rank_v2": 83, "rank_v2_delta": 532, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 11.8, "maintenance": 20.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Stop That Shit", "repo": "lennney/stop-that-shit", "display_repo": "", "url": "https://github.com/lennney/stop-that-shit", "listing_class": "skill", "rank": 84, "previous_rank": 81, "rank_delta": -3, "stars": 2579, "stars_fmt": "2.6k", "forks": 55, "forks_fmt": "55", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 51, "commits_low_confidence": false, "score": 74.3, "description": "Stop That Shit（别再造史了）｜面向 Codex/GPT 场景的多平台 Hook + Skill Guard：拦截 AI coding agent 无需求的哈希、校验和与任务范围膨胀。 A multi-platform Hook + Skill Guard for AI coding agents in Codex/GPT workflows: stop unrequested hashes, checksums, and task-scope creep.", "language": "JavaScript", "open_issues": 3, "category": "Agent Skills", "category_rank": 84, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.61, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:53:07Z", "slug": "stop-that-shit", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "https://take-a-deep-breath0.com/zh/stop-that-shit", "homepage_icon": "/site-icons/78e758e9f969e7d8.png", "homepage_icon_for": "https://take-a-deep-breath0.com/zh/stop-that-shit", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.0, "trust_score_v2": 62.0, "rank_v2": 84, "rank_v2_delta": 538, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 13.9, "maintenance": 18.5, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google Skills", "repo": "google/skills", "display_repo": "", "url": "https://github.com/google/skills", "listing_class": "skill", "rank": 85, "previous_rank": 82, "rank_delta": -3, "stars": 21203, "stars_fmt": "21.2k", "forks": 1772, "forks_fmt": "1.8k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 91, "commits_low_confidence": false, "score": 90.3, "description": "Agent Skills for Google products and technologies", "language": "Python", "open_issues": 21, "category": "Agent Skills", "category_rank": 85, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:22:16Z", "slug": "google-skills", "full_fetched_at": "2026-10-12T16:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/cloud/google-cloud-developer/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in skills/cloud/agent-platform-inference/scripts/requirements.txt", "Found Google Gemini dependency 'google-genai' in skills/cloud/agent-platform-inference/scripts/requirements.txt", "README/docs also mention Google Gemini", "Ships a Claude Code plugin manifest (plugins/cloud/google-cloud-developer/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 62.0, "trust_score_v2": 62.0, "rank_v2": 85, "rank_v2_delta": 571, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 13.3, "maintenance": 19.6, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Omnisearch", "repo": "spences10/mcp-omnisearch", "display_repo": "", "url": "https://github.com/spences10/mcp-omnisearch", "listing_class": "agent", "rank": 619, "previous_rank": 610, "rank_delta": -9, "stars": 355, "stars_fmt": "355", "forks": 50, "forks_fmt": "50", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 50, "commits_low_confidence": false, "score": 69.5, "description": "🔍 A Model Context Protocol (MCP) server providing unified access to multiple search engines (Tavily, Brave, Kagi, Exa), AI tools (Kagi FastGPT, Exa, Linkup), and content extraction services (Firecrawl, Tavily, Kagi). Includes GitHub search. All through a single interface.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 341, "npm_package": "mcp-omnisearch", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 579, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:16:54Z", "slug": "mcp-omnisearch", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: src/mcp-server.ts", "Found MCP-related server test path: src/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Firecrawl", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily", "Found Firecrawl credential/config marker 'FIRECRAWL_API_KEY'", "README/docs also mention Firecrawl" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'mcp-omnisearch' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-omnisearch", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:14Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.0, "trust_score_v2": 62.0, "rank_v2": 619, "rank_v2_delta": -50, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 10.8, "transparency": 12.8, "maintenance": 18.7, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ui Skills", "repo": "ibelick/ui-skills", "display_repo": "", "url": "https://github.com/ibelick/ui-skills", "listing_class": "skill", "rank": 86, "previous_rank": 85, "rank_delta": -1, "stars": 9638, "stars_fmt": "9.6k", "forks": 452, "forks_fmt": "452", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 126, "commits_low_confidence": false, "score": 86.2, "description": "Skills for Design Engineers", "language": "TypeScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 86, "npm_package": "ui-skills", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2752, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:27:48Z", "slug": "ui-skills", "full_fetched_at": "2026-10-12T16:02:23Z", "source_note": "", "github_homepage": "https://www.ui-skills.com/", "homepage_icon": "/site-icons/21546f07a0615897.png", "homepage_icon_for": "https://www.ui-skills.com/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: public/mcp.json", "Found MCP-related server path: src/lib/mcp-server.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'ui-skills' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ui-skills", "version": "0.2.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:23Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 62.0, "trust_score_v2": 62.0, "rank_v2": 86, "rank_v2_delta": 542, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.5, "maintenance": 19.9, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Eigent", "repo": "eigent-ai/eigent", "display_repo": "", "url": "https://github.com/eigent-ai/eigent", "listing_class": "agent", "rank": 620, "previous_rank": 618, "rank_delta": -2, "stars": 15499, "stars_fmt": "15.5k", "forks": 1849, "forks_fmt": "1.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 137, "commits_low_confidence": false, "score": 90.3, "description": "Eigent: The Open Source Cowork Desktop - Local and Free Alternative to Claude Cowork and Codex", "language": "TypeScript", "open_issues": 166, "category": "UI & App Builders", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.63, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:57:05Z", "slug": "eigent", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "https://www.eigent.ai", "homepage_icon": "/site-icons/e4b7f3d1e4e6b34a.png", "homepage_icon_for": "https://www.eigent.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in server/pyproject.toml", "Found Qdrant dependency 'qdrant' in backend/pyproject.toml", "Found Postgres dependency 'psycopg' in server/pyproject.toml", "Found Redis dependency 'redis' in server/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: backend/app/workspace_bundle/schemas/agent_plugins/1.0.0/mcp.schema.json", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'redis' in server/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.8, "trust_score_v2": 61.8, "rank_v2": 620, "rank_v2_delta": -78, "trust_v2_adjustment": -2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 13.1, "maintenance": 20.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LightAgent", "repo": "wanxingai/LightAgent", "display_repo": "", "url": "https://github.com/wanxingai/LightAgent", "listing_class": "agent", "rank": 621, "previous_rank": 615, "rank_delta": -6, "stars": 1233, "stars_fmt": "1.2k", "forks": 175, "forks_fmt": "175", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 26, "commits_low_confidence": false, "score": 70.3, "description": "LightAgent: Lightweight Python framework for OpenAI-compatible agents with tools, memory, guardrails, tracing, lifecycle hooks, multi-agent collaboration, and workflows.", "language": "Python", "open_issues": 2, "category": "Agent Frameworks", "category_rank": 56, "npm_package": "", "crate_package": "", "pypi_package": "lightagent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 96, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.44, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:52:23Z", "slug": "lightagent", "full_fetched_at": "2026-10-12T08:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'lightagent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "lightagent", "version": "0.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:38Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.8, "trust_score_v2": 61.8, "rank_v2": 621, "rank_v2_delta": 143, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.7, "maintenance": 16.9, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Power BI Modeling MCP Server", "repo": "microsoft/powerbi-modeling-mcp", "display_repo": "", "url": "https://github.com/microsoft/powerbi-modeling-mcp", "listing_class": "agent", "rank": 622, "previous_rank": 613, "rank_delta": -9, "stars": 1216, "stars_fmt": "1.2k", "forks": 218, "forks_fmt": "218", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 58.6, "description": "The Power BI Modeling MCP Server, brings Power BI semantic modeling capabilities to your AI agents.", "language": "", "open_issues": 54, "category": "MCP Servers", "category_rank": 342, "npm_package": "@microsoft/powerbi-modeling-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7630, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.455, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T09:51:42Z", "slug": "power-bi-modeling-mcp-server", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/img/mcp-server-elicitation.png", "Found MCP-related server docs path: docs/img/mcp-servers-in-copilot-enable.png" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@microsoft/powerbi-modeling-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@microsoft/powerbi-modeling-mcp", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:57Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.8, "trust_score_v2": 61.8, "rank_v2": 622, "rank_v2_delta": 273, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 12.0, "maintenance": 13.0, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MaverickMCP", "repo": "wshobson/maverick-mcp", "display_repo": "", "url": "https://github.com/wshobson/maverick-mcp", "listing_class": "agent", "rank": 623, "previous_rank": 617, "rank_delta": -6, "stars": 702, "stars_fmt": "702", "forks": 165, "forks_fmt": "165", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 45, "commits_low_confidence": false, "score": 72.3, "description": "Stock market MCP server for Yahoo Finance data, technical analysis, portfolio tracking, and Python backtesting. Runs locally with no API key for core tools.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 343, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.88, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T08:33:44Z", "slug": "maverickmcp", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "https://sethhobson.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in pyproject.toml", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Found Redis dependency 'redis' in pyproject.toml", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.7, "trust_score_v2": 61.7, "rank_v2": 623, "rank_v2_delta": 25, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.7, "maintenance": 18.2, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "aeon", "repo": "aeonfun/aeon", "display_repo": "", "url": "https://github.com/aeonfun/aeon", "listing_class": "agent", "rank": 624, "previous_rank": 619, "rank_delta": -5, "stars": 772, "stars_fmt": "772", "forks": 280, "forks_fmt": "280", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 134, "commits_low_confidence": false, "score": 78.7, "description": "The most autonomous AI agent framework: runs unattended on GitHub Actions, self-healing skills, drives Claude Code, Grok, Codex & more. No approval loops. Configure once, forget forever.", "language": "JavaScript", "open_issues": 0, "category": "Agent Frameworks", "category_rank": 57, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-07T09:51:27Z", "slug": "aeon", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://www.aeon.fun/", "homepage_icon": "/site-icons/aa4778896739787e.png", "homepage_icon_for": "https://www.aeon.fun/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: apps/mcp-server/.gitignore", "Found MCP-related server path: apps/mcp-server/README.md", "Found MCP-related server test path: scripts/tests/fake-mcp-server.mjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)", "Found credential/config marker 'TELEGRAM_BOT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.7, "trust_score_v2": 61.7, "rank_v2": 624, "rank_v2_delta": -36, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 10.8, "transparency": 13.3, "maintenance": 20.0, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AnythingLLM", "repo": "Mintplex-Labs/anything-llm", "display_repo": "", "url": "https://github.com/Mintplex-Labs/anything-llm", "listing_class": "agent", "rank": 625, "previous_rank": 620, "rank_delta": -5, "stars": 66974, "stars_fmt": "67.0k", "forks": 7474, "forks_fmt": "7.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 150, "commits_low_confidence": false, "score": 97.0, "description": "Stop renting your intelligence. Own it with AnythingLLM. Everything you need for a powerful local-first agent experience ", "language": "JavaScript", "open_issues": 309, "category": "Memory & Knowledge", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-07T17:14:07Z", "slug": "anythingllm", "full_fetched_at": "2026-10-12T08:01:58Z", "source_note": "", "github_homepage": "https://anythingllm.com", "homepage_icon": "/site-icons/3d837d3645d4069e.png", "homepage_icon_for": "https://anythingllm.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in server/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "ElevenLabs", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Weaviate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in server/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in server/package.json", "README/docs also mention Anthropic", "Found ElevenLabs dependency 'elevenlabs' in server/package.json", "README/docs also mention ElevenLabs" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found extension-based path: collector/__tests__/extensions/resync/paperless.resync.test.js", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'puppeteer' in collector/package.json", "Found database dependency 'pg' in server/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.7, "trust_score_v2": 61.7, "rank_v2": 625, "rank_v2_delta": -174, "trust_v2_adjustment": -4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 12.7, "maintenance": 20.0, "adoption": 11.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "McpMux", "repo": "mcpmux/mcp-mux", "display_repo": "", "url": "https://github.com/mcpmux/mcp-mux", "listing_class": "agent", "rank": 626, "previous_rank": 621, "rank_delta": -5, "stars": 24, "stars_fmt": "24", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 59, "commits_low_confidence": false, "score": 60.6, "description": "Configure MCP servers once, connect every AI client through a single local gateway", "language": "Rust", "open_issues": 4, "category": "MCP Servers", "category_rank": 344, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:54:44Z", "slug": "mcpmux", "full_fetched_at": "2026-10-11T20:01:56Z", "source_note": "", "github_homepage": "https://mcpmux.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/e2e/mocks/stub-mcp-server/http-oauth-server.ts", "Found MCP-related server test path: tests/e2e/mocks/stub-mcp-server/http-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 61.6, "trust_score_v2": 61.6, "rank_v2": 626, "rank_v2_delta": 100, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.7, "maintenance": 19.1, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dotnet Skills", "repo": "dotnet/skills", "display_repo": "", "url": "https://github.com/dotnet/skills", "listing_class": "skill", "rank": 87, "previous_rank": 87, "rank_delta": 0, "stars": 5610, "stars_fmt": "5.6k", "forks": 439, "forks_fmt": "439", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 276, "commits_low_confidence": false, "score": 84.8, "description": "Repository for skills to assist AI coding agents with .NET and C#", "language": "C#", "open_issues": 68, "category": "Agent Skills", "category_rank": 87, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.41, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-10T08:04:03Z", "slug": "dotnet-skills", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/dotnet-advanced/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.6, "trust_score_v2": 61.6, "rank_v2": 87, "rank_v2_delta": 545, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 13.2, "maintenance": 20.0, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TencentDB Agent Memory", "repo": "TencentCloud/TencentDB-Agent-Memory", "display_repo": "", "url": "https://github.com/TencentCloud/TencentDB-Agent-Memory", "listing_class": "agent", "rank": 627, "previous_rank": 629, "rank_delta": 2, "stars": 27954, "stars_fmt": "28.0k", "forks": 2721, "forks_fmt": "2.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 24, "commits_low_confidence": false, "score": 85.1, "description": "TencentDB Agent Memory is a team-level memory hub for AI Agents — turning conversations, docs, and code into four reusable memory assets (Chat Memory, Skill, LLM-Wiki, Code-Graph) that are governed, shared, and equipped across agents and frameworks.", "language": "TypeScript", "open_issues": 267, "category": "Needs review", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.732, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:12:10Z", "slug": "tencentdb-agent-memory", "full_fetched_at": "2026-10-12T08:02:33Z", "source_note": "", "github_homepage": "https://tencentcloud.github.io/TencentDB-Agent-Memory/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: MemoryKnowledge/src/mcp/server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in MemoryKnowledge/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in MemoryCore/package.json", "Found Anthropic dependency 'anthropic' in MemoryKnowledge/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: MemoryCore/hermes-plugin/memory/memory_tencentdb/README.md", "README/docs also mention a declared plugin/integration surface", "Found code dependency 'simple-git' in MemoryKnowledge/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 61.6, "trust_score_v2": 61.6, "rank_v2": 627, "rank_v2_delta": 53, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 12.3, "maintenance": 17.6, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Omnigent", "repo": "omnigent-ai/omnigent", "display_repo": "", "url": "https://github.com/omnigent-ai/omnigent", "listing_class": "agent", "rank": 628, "previous_rank": 622, "rank_delta": -6, "stars": 10763, "stars_fmt": "10.8k", "forks": 1735, "forks_fmt": "1.7k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1037, "commits_low_confidence": false, "score": 89.3, "description": "Omnigent is an open-source AI agent framework and meta-harness: orchestrate Claude Code, Codex, Cursor, Pi, and custom agents — swap harnesses without rewriting, enforce policies and sandboxing, and collaborate in real time from any device.", "language": "Python", "open_issues": 700, "category": "Agent Frameworks", "category_rank": 58, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:25:28Z", "slug": "omnigent", "full_fetched_at": "2026-10-12T08:02:13Z", "source_note": "", "github_homepage": "https://omnigent.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: omnigent/server/routes/mcp_servers.py", "Found MCP-related server path: omnigent/server/routes/session_mcp_servers.py", "Found MCP-related server test path: tests/e2e_ui/visual/snapshots/test_storybook_snapshot/test_story_matches_baseline/test_story_matches_baseline[chromium-components-agents-createagentdialog--two-mcp-servers][linux].png" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "E2B", "Google Gemini", "OpenAI", "Postgres", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'claude-agent-sdk' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database", "shell" ], "confidence": "high", "evidence": [ "Found extension-based path: examples/extensions/hello-page/README.md", "README/docs also mention a declared plugin/integration surface", "Found shell dependency 'subprocess' in setup.py", "README/docs also mention shell capabilities", "Found database dependency 'postgres' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.5, "trust_score_v2": 61.5, "rank_v2": 628, "rank_v2_delta": -125, "trust_v2_adjustment": -3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.4, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Random Number MCP", "repo": "zazencodes/random-number-mcp", "display_repo": "", "url": "https://github.com/zazencodes/random-number-mcp", "listing_class": "agent", "rank": 629, "previous_rank": 623, "rank_delta": -6, "stars": 51, "stars_fmt": "51", "forks": 7, "forks_fmt": "7", "last_push": "2026-07-18", "days_ago": 86, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.6, "description": "Production-ready MCP server that provides LLMs with essential random generation abilities, built entirely on Python's standard library.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 345, "npm_package": "", "crate_package": "", "pypi_package": "random-number-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 72, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.121, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:41:56Z", "slug": "random-number-mcp", "full_fetched_at": "2026-10-12T04:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'random-number-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "random-number-mcp", "version": "0.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.5, "trust_score_v2": 61.5, "rank_v2": 629, "rank_v2_delta": 286, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 18.0, "transparency": 11.7, "maintenance": 6.3, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Expo Skills", "repo": "expo/skills", "display_repo": "", "url": "https://github.com/expo/skills", "listing_class": "skill", "rank": 88, "previous_rank": 88, "rank_delta": 0, "stars": 2783, "stars_fmt": "2.8k", "forks": 173, "forks_fmt": "173", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 9, "commits_low_confidence": true, "score": 67.9, "description": "A collection of AI agent skills for working with Expo projects and Expo Application Services", "language": "Shell", "open_issues": 20, "category": "Agent Skills", "category_rank": 88, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-02T06:55:19Z", "slug": "expo-skills", "full_fetched_at": "2026-10-12T16:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/expo/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/expo-experiments/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.4, "trust_score_v2": 61.4, "rank_v2": 88, "rank_v2_delta": 634, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 10.8, "transparency": 13.9, "maintenance": 13.7, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Red", "repo": "SnailSploit/Claude-Red", "display_repo": "", "url": "https://github.com/SnailSploit/Claude-Red", "listing_class": "skill", "rank": 89, "previous_rank": 104, "rank_delta": 15, "stars": 7445, "stars_fmt": "7.4k", "forks": 966, "forks_fmt": "966", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8, "commits_low_confidence": false, "score": 74.0, "description": "claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a specific attack surface — from SQLi to shellcode, EDR evasion to exploit development.", "language": "Python", "open_issues": 9, "category": "Agent Skills", "category_rank": 89, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.795, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:19:05Z", "slug": "claude-red", "full_fetched_at": "2026-10-12T00:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.4, "trust_score_v2": 61.4, "rank_v2": 89, "rank_v2_delta": 564, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.7, "identity": 10.8, "transparency": 13.8, "maintenance": 15.8, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Client for Ollama", "repo": "jonigl/mcp-client-for-ollama", "display_repo": "", "url": "https://github.com/jonigl/mcp-client-for-ollama", "listing_class": "agent", "rank": 630, "previous_rank": 626, "rank_delta": -4, "stars": 830, "stars_fmt": "830", "forks": 126, "forks_fmt": "126", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 6, "commits_low_confidence": true, "score": 61.8, "description": "Harness the power of local LLMs with this TUI MCP Client for Ollama. Featuring all core MCP primitives (tools, prompts, resources), agent mode, multi-server, model switching, streaming responses, human-in-the-loop, thinking mode, model params config, system prompts, and saved preferences.", "language": "Python", "open_issues": 9, "category": "Protocols & Tool Integration", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "ollmcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 642, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.77, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T21:02:04Z", "slug": "mcp-client-for-ollama", "full_fetched_at": "2026-10-12T16:02:33Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Azure OpenAI", "DeepSeek", "Fireworks AI", "OpenAI", "OpenRouter", "Perplexity" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek", "Found Fireworks AI credential/config marker 'FIREWORKS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ollmcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ollmcp", "version": "0.35.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:33Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.4, "trust_score_v2": 61.4, "rank_v2": 630, "rank_v2_delta": 129, "trust_v2_adjustment": 2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 13.3, "maintenance": 13.2, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qwen MM Plugins", "repo": "QwenLM/Qwen-MM-Plugins", "display_repo": "", "url": "https://github.com/QwenLM/Qwen-MM-Plugins", "listing_class": "skill", "rank": 90, "previous_rank": 89, "rank_delta": -1, "stars": 3134, "stars_fmt": "3.1k", "forks": 207, "forks_fmt": "207", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 100, "commits_low_confidence": false, "score": 81.7, "description": "Make any agent harness multimodal-native.", "language": "Python", "open_issues": 8, "category": "Agent Skills", "category_rank": 90, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:53:26Z", "slug": "qwen-mm-plugins", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Ships a Claude Code plugin manifest (src/capabilities/api/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.4, "trust_score_v2": 61.4, "rank_v2": 90, "rank_v2_delta": 598, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 13.2, "maintenance": 19.9, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "CN Scraper MCP", "repo": "goesByhc/cn-scraper-mcp", "display_repo": "", "url": "https://github.com/goesByhc/cn-scraper-mcp", "listing_class": "agent", "rank": 631, "previous_rank": 624, "rank_delta": -7, "stars": 57, "stars_fmt": "57", "forks": 5, "forks_fmt": "5", "last_push": "2026-07-29", "days_ago": 75, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.8, "description": "Let AI agents search the Chinese internet via MCP — Taobao, JD, Xiaohongshu, Zhihu, Weibo, Bilibili, ZSXQ, Douban, Dianping, and more.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 346, "npm_package": "", "crate_package": "", "pypi_package": "cn-scraper-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 115, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:42:34Z", "slug": "cn-scraper-mcp", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cn-scraper-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cn-scraper-mcp", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:07Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.4, "trust_score_v2": 61.4, "rank_v2": 631, "rank_v2_delta": 285, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 18.0, "transparency": 11.5, "maintenance": 7.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Rootly MCP Server", "repo": "rootlyhq/rootly-mcp-server", "display_repo": "", "url": "https://github.com/rootlyhq/rootly-mcp-server", "listing_class": "agent", "rank": 632, "previous_rank": 625, "rank_delta": -7, "stars": 45, "stars_fmt": "45", "forks": 23, "forks_fmt": "23", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 51, "commits_low_confidence": false, "score": 62.5, "description": "Rootly MCP server", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 347, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.41, "scorecard_score": 7.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-08T22:59:16Z", "slug": "rootly-mcp-server", "full_fetched_at": "2026-10-12T00:01:58Z", "source_note": "", "github_homepage": "https://rootly.com/ai-labs", "homepage_icon": "/site-icons/4dba315f8217a625.png", "homepage_icon_for": "https://rootly.com/ai-labs", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: rootly-mcp-server-demo.gif", "Found MCP-related server path: src/rootly_mcp_server/__init__.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'ONCALLHEALTH_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.3, "trust_score_v2": 61.3, "rank_v2": 632, "rank_v2_delta": 66, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 15.1, "maintenance": 18.6, "adoption": 4.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "open-connector", "repo": "oomol-lab/open-connector", "display_repo": "", "url": "https://github.com/oomol-lab/open-connector", "listing_class": "agent", "rank": 633, "previous_rank": 628, "rank_delta": -5, "stars": 5992, "stars_fmt": "6.0k", "forks": 550, "forks_fmt": "550", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 193, "commits_low_confidence": false, "score": 85.4, "description": "Open-source auth gateway connecting 1500+ SaaS providers to AI agents through SDK, CLI, MCP, HTTP, and OpenAPI.", "language": "TypeScript", "open_issues": 3, "category": "Protocols & Tool Integration", "category_rank": 38, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:35:48Z", "slug": "open-connector", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://oomol.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'pg' in package.json", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found marketplace path: src/marketplace/default-marketplace.ts", "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.3, "trust_score_v2": 61.3, "rank_v2": 633, "rank_v2_delta": -76, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 13.1, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -1.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google AX", "repo": "google/ax", "display_repo": "", "url": "https://github.com/google/ax", "listing_class": "agent", "rank": 634, "previous_rank": 631, "rank_delta": -3, "stars": 13468, "stars_fmt": "13.5k", "forks": 677, "forks_fmt": "677", "last_push": "2026-09-27", "days_ago": 15, "weekly_commits": 20, "commits_low_confidence": false, "score": 77.6, "description": "Google's open agentic orchestration runtime", "language": "Go", "open_issues": 66, "category": "Agent Frameworks", "category_rank": 59, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T22:36:03Z", "slug": "google-ax", "full_fetched_at": "2026-10-12T04:02:37Z", "source_note": "", "github_homepage": "https://agentexecutor.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.2, "trust_score_v2": 61.2, "rank_v2": 634, "rank_v2_delta": 30, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 14.5, "maintenance": 16.3, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AIHawk", "repo": "feder-cr/invisible_playwright_mcp", "display_repo": "", "url": "https://github.com/feder-cr/invisible_playwright_mcp", "listing_class": "agent", "rank": 635, "previous_rank": 632, "rank_delta": -3, "stars": 2757, "stars_fmt": "2.8k", "forks": 471, "forks_fmt": "471", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 112, "commits_low_confidence": false, "score": 83.0, "description": "Playwright MCP server undetected by anti-bots and captchas: AI agent browses the web on anti-detect stealth Firefox, Python, undetected browser automation, scraping, computer use.", "language": "Python", "open_issues": 1, "category": "Browser & Computer Use", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T15:38:37Z", "slug": "aihawk", "full_fetched_at": "2026-10-12T16:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server path: src/invisible_playwright_mcp/mcp/server.py", "Found MCP-related server docs path: docs/best-mcp-server-for-browser-automation.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.2, "trust_score_v2": 61.2, "rank_v2": 635, "rank_v2_delta": -6, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Hcom", "repo": "aannoo/hcom", "display_repo": "", "url": "https://github.com/aannoo/hcom", "listing_class": "skill", "rank": 91, "previous_rank": 90, "rank_delta": -1, "stars": 567, "stars_fmt": "567", "forks": 86, "forks_fmt": "86", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 171, "commits_low_confidence": false, "score": 75.5, "description": "Let AI agents message, watch, and spawn each other across terminals. Claude Code, Codex, Antigravity CLI, Cursor CLI, OpenCode, Kilo, Pi, Kimi", "language": "Rust", "open_issues": 19, "category": "Agent Skills", "category_rank": 91, "npm_package": "", "crate_package": "", "pypi_package": "hcom", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1041, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.08, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T21:12:26Z", "slug": "hcom", "full_fetched_at": "2026-10-12T08:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugin/hcom/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'hcom' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "hcom", "version": "0.7.28" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:21Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.2, "trust_score_v2": 61.2, "rank_v2": 91, "rank_v2_delta": 712, "trust_v2_adjustment": 3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.6, "maintenance": 20.0, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP ZAP Server", "repo": "dtkmn/mcp-zap-server", "display_repo": "", "url": "https://github.com/dtkmn/mcp-zap-server", "listing_class": "agent", "rank": 636, "previous_rank": 637, "rank_delta": 1, "stars": 67, "stars_fmt": "67", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 164, "commits_low_confidence": false, "score": 66.0, "description": "Give AI agents a safe, self-hosted ZAP operator for guided web security scans, findings, reports, and production guardrails.", "language": "Java", "open_issues": 7, "category": "MCP Servers", "category_rank": 348, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/dtkmn/mcp-zap-server:v0.11.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.18, "scorecard_score": 7.5, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 7, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:19:53Z", "slug": "mcp-zap-server", "full_fetched_at": "2026-10-12T12:03:07Z", "source_note": "", "github_homepage": "https://danieltse.org/mcp-zap-server/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/cursor/mcp.json", "Found MCP-related server path: src/main/java/mcp/server/zap/McpServerApplication.java" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 61.1, "trust_score_v2": 61.1, "rank_v2": 636, "rank_v2_delta": 57, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.3, "identity": 10.8, "transparency": 14.9, "maintenance": 20.0, "adoption": 4.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MaxKB", "repo": "1Panel-dev/MaxKB", "display_repo": "", "url": "https://github.com/1Panel-dev/MaxKB", "listing_class": "agent", "rank": 637, "previous_rank": 639, "rank_delta": 2, "stars": 22956, "stars_fmt": "23.0k", "forks": 3182, "forks_fmt": "3.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 49, "commits_low_confidence": false, "score": 88.7, "description": "🔥 MaxKB is an open-source platform for building enterprise-grade agents. 强大易用的开源企业级智能体平台。", "language": "Python", "open_issues": 23, "category": "Agent Frameworks", "category_rank": 60, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:52:00Z", "slug": "maxkb", "full_fetched_at": "2026-10-12T04:02:12Z", "source_note": "", "github_homepage": "https://maxkb.cn", "homepage_icon": "/site-icons/285ffff588e87377.png", "homepage_icon_for": "https://maxkb.cn", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Cohere dependency 'cohere' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: ui/src/workflow/plugins/dagre.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 61.1, "trust_score_v2": 61.1, "rank_v2": 637, "rank_v2_delta": -47, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 13.8, "maintenance": 18.8, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Norman MCP Server", "repo": "norman-finance/norman-mcp-server", "display_repo": "", "url": "https://github.com/norman-finance/norman-mcp-server", "listing_class": "agent", "rank": 638, "previous_rank": 635, "rank_delta": -3, "stars": 61, "stars_fmt": "61", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 168, "commits_low_confidence": false, "score": 66.1, "description": "AI-powered bookkeeping and tax filing automation for entrepreneurs at the heart of the European economy", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 349, "npm_package": "", "crate_package": "", "pypi_package": "norman-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 54, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.27, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-18T22:20:39Z", "slug": "norman-mcp-server", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://norman.finance", "homepage_icon": "/site-icons/0686b5c8ff492f79.png", "homepage_icon_for": "https://norman.finance", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: openai-plugin/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'norman-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "norman-mcp-server", "version": "0.1.7" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:05Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.1, "trust_score_v2": 61.1, "rank_v2": 638, "rank_v2_delta": 254, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.0, "maintenance": 20.0, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Khoj", "repo": "khoj-ai/khoj", "display_repo": "", "url": "https://github.com/khoj-ai/khoj", "listing_class": "agent", "rank": 639, "previous_rank": 636, "rank_delta": -3, "stars": 37658, "stars_fmt": "37.7k", "forks": 2508, "forks_fmt": "2.5k", "last_push": "2026-08-02", "days_ago": 71, "weekly_commits": 0, "commits_low_confidence": false, "score": 58.4, "description": "Your AI second brain. Self-hostable. Get answers from the web or your docs. Build custom agents, schedule automations, do deep research. Turn any online or local LLM into your personal, autonomous AI (gpt, claude, gemini, llama, qwen, mistral). Get started - free.", "language": "Python", "open_issues": 108, "category": "Memory & Knowledge", "category_rank": 35, "npm_package": "", "crate_package": "", "pypi_package": "khoj", "docker_image": "", "vscode_extension": "", "weekly_downloads": 655, "dl_source": "pypi", "hn_mentions_30d": 14, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.22, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 1, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:55:25Z", "slug": "khoj", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://khoj.dev", "homepage_icon": "/site-icons/3c56ec6266f37805.png", "homepage_icon_for": "https://khoj.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "E2B", "Google Gemini", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found E2B dependency 'e2b' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pg' in pyproject.toml", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'khoj' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 61.1, "trust_score_v2": 61.1, "rank_v2": 639, "rank_v2_delta": -109, "trust_v2_adjustment": -3.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 18.0, "transparency": 11.4, "maintenance": 7.3, "adoption": 14.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Porkbun DNS 🐷", "repo": "major/porkbun-mcp", "display_repo": "", "url": "https://github.com/major/porkbun-mcp", "listing_class": "agent", "rank": 640, "previous_rank": 634, "rank_delta": -6, "stars": 23, "stars_fmt": "23", "forks": 1, "forks_fmt": "1", "last_push": "2026-06-01", "days_ago": 133, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.4, "description": "🐷 MCP server for Porkbun DNS API - manage domains, DNS records, DNSSEC, and SSL certificates", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 350, "npm_package": "", "crate_package": "", "pypi_package": "porkbun-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 90, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.526, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T19:00:48Z", "slug": "porkbun-dns", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PORKBUN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'porkbun-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "porkbun-mcp", "version": "1.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:51Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.0, "trust_score_v2": 61.0, "rank_v2": 640, "rank_v2_delta": 250, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.3, "identity": 18.0, "transparency": 12.7, "maintenance": 3.1, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CowAgent", "repo": "zhayujie/CowAgent", "display_repo": "", "url": "https://github.com/zhayujie/CowAgent", "listing_class": "agent", "rank": 641, "previous_rank": 630, "rank_delta": -11, "stars": 47353, "stars_fmt": "47.4k", "forks": 10384, "forks_fmt": "10.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1204, "commits_low_confidence": false, "score": 96.8, "description": "Open-source personal AI assistant & Agent Harness. Plans tasks, runs tools and skills, self-evolves with memory and knowledge. Multi-agent, multi-model, multi-channel. Lightweight, extensible, one-line install.", "language": "Python", "open_issues": 12, "category": "Agent Frameworks", "category_rank": 61, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:13:12Z", "slug": "cowagent", "full_fetched_at": "2026-10-12T08:02:41Z", "source_note": "", "github_homepage": "https://cowagent.ai", "homepage_icon": "/site-icons/539f665b75dccba9.png", "homepage_icon_for": "https://cowagent.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: docs/extensions/agent-mail.mdx", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 61.0, "trust_score_v2": 61.0, "rank_v2": 641, "rank_v2_delta": -1, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.0, "maintenance": 20.0, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Antigravity For Claude Code", "repo": "yuting0624/antigravity-for-claude-code", "display_repo": "", "url": "https://github.com/yuting0624/antigravity-for-claude-code", "listing_class": "skill", "rank": 92, "previous_rank": 95, "rank_delta": 3, "stars": 381, "stars_fmt": "381", "forks": 38, "forks_fmt": "38", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 10, "commits_low_confidence": false, "score": 60.9, "description": "Claude Code plugin: run the Antigravity CLI (Gemini) as a collaborating sub-agent with intelligent model routing across the SDLC. Community project; not affiliated with Google/Anthropic.", "language": "Shell", "open_issues": 7, "category": "Agent Skills", "category_rank": 92, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.784, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 2, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:17:57Z", "slug": "antigravity-for-claude-code", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.9, "trust_score_v2": 60.9, "rank_v2": 92, "rank_v2_delta": 591, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 10.8, "transparency": 14.6, "maintenance": 16.2, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP C# SDK", "repo": "modelcontextprotocol/csharp-sdk", "display_repo": "", "url": "https://github.com/modelcontextprotocol/csharp-sdk", "listing_class": "agent", "rank": 642, "previous_rank": 638, "rank_delta": -4, "stars": 4577, "stars_fmt": "4.6k", "forks": 822, "forks_fmt": "822", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 4, "commits_low_confidence": true, "score": 68.5, "description": "The official C# SDK for Model Context Protocol servers and clients. Maintained in collaboration with Microsoft.", "language": "C#", "open_issues": 143, "category": "Protocols & Tool Integration", "category_rank": 39, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 7.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:52:54Z", "slug": "mcp-c-sdk", "full_fetched_at": "2026-10-12T08:01:58Z", "source_note": "", "github_homepage": "https://csharp.sdk.modelcontextprotocol.io/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 60.9, "trust_score_v2": 60.9, "rank_v2": 642, "rank_v2_delta": 32, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.9, "identity": 10.8, "transparency": 14.5, "maintenance": 12.9, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenBB", "repo": "openbq-org/OpenBB", "display_repo": "", "url": "https://github.com/openbq-org/OpenBB", "listing_class": "agent", "rank": 643, "previous_rank": 606, "rank_delta": -37, "stars": 74155, "stars_fmt": "74.2k", "forks": 7664, "forks_fmt": "7.7k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 3, "commits_low_confidence": true, "score": 79.8, "description": "Open Data Platform for analysts, quants and AI agents.", "language": "Python", "open_issues": 48, "category": "Research & Data", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 5, "Token-Permissions": 2, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-19T17:57:23Z", "slug": "openbb", "full_fetched_at": "2026-10-12T08:02:14Z", "source_note": "", "github_homepage": "https://openbb.co", "homepage_icon": "/site-icons/f1b5e7bee399c058.png", "homepage_icon_for": "https://openbb.co", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .github/workflows/publish-openbb-mcp-server.yml", "Found MCP-related server path: .github/workflows/test-unit-mcp-server.yml", "Found MCP-related server test path: openbb_platform/extensions/mcp_server/tests/app/test_app.py", "Found MCP-related server test path: openbb_platform/extensions/mcp_server/tests/app/test_args.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: assets/extensions/obbject.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 60.9, "trust_score_v2": 60.9, "rank_v2": 643, "rank_v2_delta": 4, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 13.5, "maintenance": 13.1, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Getspecstory", "repo": "specstoryai/getspecstory", "display_repo": "", "url": "https://github.com/specstoryai/getspecstory", "listing_class": "skill", "rank": 93, "previous_rank": 93, "rank_delta": 0, "stars": 1350, "stars_fmt": "1.4k", "forks": 91, "forks_fmt": "91", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 161, "commits_low_confidence": false, "score": 77.8, "description": "Install our local first extensions for your favorite AI IDE or Terminal Agent. Process your histories into reusable skills with Lore. Sync your conversations to the cloud. File issues and requests.", "language": "Go", "open_issues": 41, "category": "Agent Skills", "category_rank": 93, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 9, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-07T02:04:40Z", "slug": "getspecstory", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "https://specstory.com/", "homepage_icon": "/site-icons/edb94e696efa8cf6.png", "homepage_icon_for": "https://specstory.com/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (lore/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.8, "trust_score_v2": 60.8, "rank_v2": 93, "rank_v2_delta": 574, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 13.7, "maintenance": 19.9, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skills For Humanity", "repo": "human-avatar/skills-for-humanity", "display_repo": "", "url": "https://github.com/human-avatar/skills-for-humanity", "listing_class": "skill", "rank": 94, "previous_rank": 92, "rank_delta": -2, "stars": 231, "stars_fmt": "231", "forks": 24, "forks_fmt": "24", "last_push": "2026-07-15", "days_ago": 89, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.3, "description": "Structured reasoning methodologies from history's most rigorous thinkers, packaged as Claude Code skills.", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 94, "npm_package": "@human-avatar/skills-for-humanity", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 33, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.179, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-26T15:03:38Z", "slug": "skills-for-humanity", "full_fetched_at": "2026-10-12T16:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@human-avatar/skills-for-humanity' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@human-avatar/skills-for-humanity", "version": "2.0.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:22Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.8, "trust_score_v2": 60.8, "rank_v2": 94, "rank_v2_delta": 756, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.4, "identity": 18.0, "transparency": 11.9, "maintenance": 6.1, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ArcGIS MCP Bridge", "repo": "muend/arcgis-mcp-bridge", "display_repo": "", "url": "https://github.com/muend/arcgis-mcp-bridge", "listing_class": "agent", "rank": 644, "previous_rank": 642, "rank_delta": -2, "stars": 22, "stars_fmt": "22", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 4, "commits_low_confidence": false, "score": 42.9, "description": "Secure, local-first MCP server exposing ArcGIS Pro's ArcPy engine over stdio JSON-RPC.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 351, "npm_package": "", "crate_package": "", "pypi_package": "arcgis-mcp-bridge", "docker_image": "", "vscode_extension": "", "weekly_downloads": 111, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.447, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:05:05Z", "slug": "arcgis-mcp-bridge", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .well-known/mcp/server-card.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'arcgis-mcp-bridge' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "arcgis-mcp-bridge", "version": "0.6.8" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.7, "trust_score_v2": 60.7, "rank_v2": 644, "rank_v2_delta": 302, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 13.8, "maintenance": 14.1, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "squad", "repo": "bradygaster/squad", "display_repo": "", "url": "https://github.com/bradygaster/squad", "listing_class": "agent", "rank": 645, "previous_rank": 640, "rank_delta": -5, "stars": 3264, "stars_fmt": "3.3k", "forks": 506, "forks_fmt": "506", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 268, "commits_low_confidence": false, "score": 83.7, "description": "Squad: AI agent teams for any project", "language": "TypeScript", "open_issues": 105, "category": "Multi-Agent Systems", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.52, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T01:49:20Z", "slug": "squad", "full_fetched_at": "2026-10-12T12:02:45Z", "source_note": "", "github_homepage": "https://bradygaster.github.io/squad/", "homepage_icon": "/site-icons/9c46be3cb3e7e904.png", "homepage_icon_for": "https://bradygaster.github.io/squad/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .github/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: docs/src/plugins/rehype-pagefind-attrs.mjs", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.7, "trust_score_v2": 60.7, "rank_v2": 645, "rank_v2_delta": 25, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Leon", "repo": "leon-ai/leon", "display_repo": "", "url": "https://github.com/leon-ai/leon", "listing_class": "agent", "rank": 646, "previous_rank": 658, "rank_delta": 12, "stars": 17569, "stars_fmt": "17.6k", "forks": 1474, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 224, "commits_low_confidence": false, "score": 90.2, "description": "🧠 Leon is your open-source personal assistant.", "language": "TypeScript", "open_issues": 95, "category": "Voice & Conversational", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.87, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:35:47Z", "slug": "leon", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://getleon.ai", "homepage_icon": "/site-icons/6e5cca19f43f133f.png", "homepage_icon_for": "https://getleon.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Groq", "OpenAI", "OpenRouter" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Groq dependency 'groq' in package.json", "Found DeepSeek dependency 'deepseek' in package.json", "Found OpenRouter dependency 'openrouter' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: server/src/core/http-server/http-plugins/auth.ts", "Found shell dependency 'execa' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.7, "trust_score_v2": 60.7, "rank_v2": 646, "rank_v2_delta": -72, "trust_v2_adjustment": -2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Switzerland MCP 🇨🇭", "repo": "vikramgorla/mcp-swiss", "display_repo": "", "url": "https://github.com/vikramgorla/mcp-swiss", "listing_class": "agent", "rank": 647, "previous_rank": 643, "rank_delta": -4, "stars": 23, "stars_fmt": "23", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 20, "commits_low_confidence": false, "score": 52.1, "description": "Swiss open data MCP server — transport, weather, geodata, companies, etc,. Zero API keys.", "language": "TypeScript", "open_issues": 13, "category": "MCP Servers", "category_rank": 352, "npm_package": "mcp-swiss", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 158, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.85, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T01:49:37Z", "slug": "switzerland-mcp", "full_fetched_at": "2026-10-12T00:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-swiss' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-swiss", "version": "0.7.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:34Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.7, "trust_score_v2": 60.7, "rank_v2": 647, "rank_v2_delta": 298, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 11.8, "maintenance": 16.8, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "E Arveldaja MCP", "repo": "iseppo/e-arveldaja-mcp", "display_repo": "", "url": "https://github.com/iseppo/e-arveldaja-mcp", "listing_class": "agent", "rank": 648, "previous_rank": 633, "rank_delta": -15, "stars": 38, "stars_fmt": "38", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 283, "commits_low_confidence": false, "score": 64.2, "description": "Experimental MCP server for Estonian e-arveldaja (RIK e-Financials) API. Not affiliated with RIK. Use at your own risk.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 353, "npm_package": "e-arveldaja-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 338, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-10T01:35:24Z", "slug": "e-arveldaja-mcp", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude/commands') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'e-arveldaja-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "e-arveldaja-mcp", "version": "0.28.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:29Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.7, "trust_score_v2": 60.7, "rank_v2": 648, "rank_v2_delta": 295, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.8, "maintenance": 20.0, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Video Recap Skills", "repo": "zenstory-ai/video-recap-skills", "display_repo": "", "url": "https://github.com/zenstory-ai/video-recap-skills", "listing_class": "skill", "rank": 95, "previous_rank": 94, "rank_delta": -1, "stars": 567, "stars_fmt": "567", "forks": 105, "forks_fmt": "105", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 94, "commits_low_confidence": false, "score": 74.5, "description": "Claude Code / Codex skills that turn a video into a Chinese narration recap (视频解说): scene detection, ASR, VLM, script, TTS, ffmpeg assembly, optional editable JianYing / CapCut draft export (剪映草稿导出). Local ffmpeg + one MiMo key, no GPU. | 用 Claude Code skills 把视频做成中文解说成片，可选一键导出可编辑剪映草稿。", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 95, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:35:33Z", "slug": "video-recap-skills", "full_fetched_at": "2026-10-12T04:02:11Z", "source_note": "", "github_homepage": "https://zenstory.ai/video-recap", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'MIMO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.6, "trust_score_v2": 60.6, "rank_v2": 95, "rank_v2_delta": 538, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 10.8, "transparency": 13.2, "maintenance": 19.4, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Planning With Files", "repo": "OthmanAdi/planning-with-files", "display_repo": "", "url": "https://github.com/OthmanAdi/planning-with-files", "listing_class": "skill", "rank": 96, "previous_rank": 96, "rank_delta": 0, "stars": 27410, "stars_fmt": "27.4k", "forks": 2270, "forks_fmt": "2.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 120, "commits_low_confidence": false, "score": 92.2, "description": "Persistent file-based planning for AI coding agents and long-running tasks. Crash-proof markdown plans, session recovery after /clear and compaction, per-turn re-injection against context rot, deterministic completion gate. Manus-style. Install from npm, the Claude Code plugin marketplace, or npx…", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 96, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:51:39Z", "slug": "planning-with-files", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "https://gilded-laurel-c7nj.here.now/", "homepage_icon": "/site-icons/efaaf00da063a982.png", "homepage_icon_for": "https://gilded-laurel-c7nj.here.now/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in .dsh/packages/dsh-planning-with-files/package.json", "README/docs also mention DeepSeek", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.6, "trust_score_v2": 60.6, "rank_v2": 96, "rank_v2_delta": 554, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 13.1, "maintenance": 20.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Sqlite Tools", "repo": "spences10/mcp-sqlite-tools", "display_repo": "", "url": "https://github.com/spences10/mcp-sqlite-tools", "listing_class": "agent", "rank": 649, "previous_rank": 644, "rank_delta": -5, "stars": 20, "stars_fmt": "20", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 25, "commits_low_confidence": false, "score": 54.1, "description": "A Model Context Protocol (MCP) server that provides comprehensive SQLite database operations for LLMs. This server enables AI assistants to interact with local SQLite databases safely and efficiently, with built-in security features, advanced transaction support, and clear separation between…", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 354, "npm_package": "mcp-sqlite-tools", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 177, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T09:52:38Z", "slug": "mcp-sqlite-tools", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: src/mcp-server.ts", "Found MCP-related server test path: src/mcp-server.test.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'mcp-sqlite-tools' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-sqlite-tools", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:14Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.6, "trust_score_v2": 60.6, "rank_v2": 649, "rank_v2_delta": 128, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 17.6, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Smart", "repo": "ReflexioAI/claude-smart", "display_repo": "", "url": "https://github.com/ReflexioAI/claude-smart", "listing_class": "skill", "rank": 97, "previous_rank": 91, "rank_delta": -6, "stars": 783, "stars_fmt": "783", "forks": 88, "forks_fmt": "88", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 20, "commits_low_confidence": false, "score": 67.7, "description": "Turns corrections into Preferences, Project-specific skills, and Shared skills for Claude Code, Codex, and OpenCode.", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 97, "npm_package": "claude-smart", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 661, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.74, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-26T05:53:23Z", "slug": "claude-smart", "full_fetched_at": "2026-10-12T00:01:58Z", "source_note": "", "github_homepage": "https://www.reflexio.ai/docs/claude-smart", "homepage_icon": "/site-icons/986990a5b556e152.png", "homepage_icon_for": "https://www.reflexio.ai/docs/claude-smart", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in plugin/pyproject.toml", "Ships Claude Code wiring ('.claude-plugin') in package.json", "Found credential/config marker 'REFLEXIO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'claude-smart' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "claude-smart", "version": "0.3.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:58Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.6, "trust_score_v2": 60.6, "rank_v2": 97, "rank_v2_delta": 689, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 11.6, "maintenance": 17.1, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "mcp-gateway-registry", "repo": "agentic-community/mcp-gateway-registry", "display_repo": "", "url": "https://github.com/agentic-community/mcp-gateway-registry", "listing_class": "agent", "rank": 650, "previous_rank": 648, "rank_delta": -2, "stars": 971, "stars_fmt": "971", "forks": 245, "forks_fmt": "245", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 155, "commits_low_confidence": false, "score": 78.7, "description": "Enterprise-ready MCP Gateway & Registry that centralizes AI development tools with secure OAuth authentication, dynamic tool discovery, and unified access for both autonomous AI agents and AI coding assistants. Transform scattered MCP server chaos into governed, auditable tool access with…", "language": "Python", "open_issues": 109, "category": "Protocols & Tool Integration", "category_rank": 40, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-04T15:44:19Z", "slug": "mcp-gateway-registry", "full_fetched_at": "2026-10-12T08:02:34Z", "source_note": "", "github_homepage": "https://agentic-community.github.io/mcp-gateway-registry/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cli/examples/3p-mcp-servers-only.json", "Found MCP-related server path: cli/examples/atlassian-mcp-server.json", "Found MCP-related server docs path: docs/design/virtual-mcp-server-explained.md" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in cli/package.json", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "README/docs also mention Amazon Bedrock" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.5, "trust_score_v2": 60.5, "rank_v2": 650, "rank_v2_delta": 82, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 13.8, "maintenance": 19.9, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "UI-TARS Desktop", "repo": "bytedance/UI-TARS-desktop", "display_repo": "", "url": "https://github.com/bytedance/UI-TARS-desktop", "listing_class": "agent", "rank": 651, "previous_rank": 698, "rank_delta": 47, "stars": 39249, "stars_fmt": "39.2k", "forks": 3981, "forks_fmt": "4.0k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 8, "commits_low_confidence": true, "score": 80.8, "description": "The Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Infra", "language": "TypeScript", "open_issues": 350, "category": "Browser & Computer Use", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.9, "scorecard_checks": { "Code-Review": 10, "Security-Policy": 10, "Maintained": 10, "Packaging": -1, "Dangerous-Workflow": 10, "Token-Permissions": 0, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Pinned-Dependencies": 4, "Dependency-Update-Tool": 0, "Signed-Releases": -1, "Fuzzing": 0, "SAST": 7, "License": 10, "Branch-Protection": -1, "CI-Tests": 8, "Contributors": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T04:06:18Z", "slug": "ui-tars-desktop", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "https://agent-tars.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: packages/agent-infra/mcp-servers/browser/.dockerignore", "Found MCP-related server path: packages/agent-infra/mcp-servers/browser/CHANGELOG.md", "Found MCP-related server docs path: multimodal/websites/docs/docs/public/alpha/config-mcp-servers.mp4" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "filesystem", "shell" ], "confidence": "high", "evidence": [ "Found declared path: multimodal/omni-tars/core/src/plugins/snapshot.ts", "README/docs also mention a declared plugin/integration surface", "Found shell dependency 'execa' in infra/pdk/package.json", "README/docs also mention shell capabilities", "Found filesystem dependency 'fs-extra' in infra/pdk/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.5, "trust_score_v2": 60.5, "rank_v2": 651, "rank_v2_delta": 0, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.4, "identity": 10.8, "transparency": 13.5, "maintenance": 13.7, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Orkas", "repo": "Orkas-AI/Orkas", "display_repo": "", "url": "https://github.com/Orkas-AI/Orkas", "listing_class": "agent", "rank": 652, "previous_rank": 650, "rank_delta": -2, "stars": 2169, "stars_fmt": "2.2k", "forks": 90, "forks_fmt": "90", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 113, "commits_low_confidence": false, "score": 79.1, "description": "Orkas is an open-source, local-first AI desktop app: a commander LLM directs specialist sub-agents, and runs your installed coding CLIs — Claude Code, Codex, OpenCode, OpenClaw, Hermes — as local sessions. Agents self-evolve via reflection and skill crystallization. BYO keys. macOS / Windows /…", "language": "JavaScript", "open_issues": 1, "category": "Multi-Agent Systems", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-09-27T06:09:28Z", "slug": "orkas", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "https://orkas.ai?source=gh-orkas", "homepage_icon": "/site-icons/55dc8f4e7db3e52b.png", "homepage_icon_for": "https://orkas.ai?source=gh-orkas", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: bin/bing-webmaster-mcp-server.cjs", "Found MCP-related server path: bin/composio-mcp-server.cjs", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "high", "evidence": [ "Found marketplace path: resources/builtin/marketplace/agents/1040b336306f/README.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.5, "trust_score_v2": 60.5, "rank_v2": 652, "rank_v2_delta": 79, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 12.9, "maintenance": 20.0, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Airtable", "repo": "domdomegg/airtable-mcp-server", "display_repo": "", "url": "https://github.com/domdomegg/airtable-mcp-server", "listing_class": "agent", "rank": 653, "previous_rank": 645, "rank_delta": -8, "stars": 456, "stars_fmt": "456", "forks": 132, "forks_fmt": "132", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.5, "description": "🗂️🤖 Airtable Model Context Protocol Server, for allowing AI systems to interact with your Airtable bases", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 355, "npm_package": "airtable-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/domdomegg/airtable-mcp-server:1.14.0", "vscode_extension": "", "weekly_downloads": 137406, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-03T23:44:00Z", "slug": "airtable", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AIRTABLE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'airtable-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "airtable-mcp-server", "version": "1.14.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.5, "trust_score_v2": 60.5, "rank_v2": 653, "rank_v2_delta": 261, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 12.5, "maintenance": 9.8, "adoption": 13.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Nse Bse Indian Stock Market Data MCP", "repo": "Tapetide-hq/nse-bse-indian-stock-market-data-mcp", "display_repo": "", "url": "https://github.com/Tapetide-hq/nse-bse-indian-stock-market-data-mcp", "listing_class": "agent", "rank": 654, "previous_rank": 662, "rank_delta": 8, "stars": 138, "stars_fmt": "138", "forks": 30, "forks_fmt": "30", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 17, "commits_low_confidence": false, "score": 60.4, "description": "Indian stock market MCP server for NSE & BSE — 55 tools across all 8,200+ stocks: live quotes, financials, technicals, 326-ratio screener, FII/DII flows, option chains & IV, filings, IPOs & portfolio. Remote (OAuth) or npx. Works with Claude, ChatGPT, Cursor, VS Code, Codex & Gemini CLI", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 356, "npm_package": "tapetide-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 261, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.411, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:55:50Z", "slug": "nse-bse-indian-stock-market-data-mcp", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "https://tapetide.com/mcp", "homepage_icon": "/site-icons/bb67cf92471cdd84.png", "homepage_icon_for": "https://tapetide.com/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: chatgpt-plugin/mcp.json", "Found MCP-related server path: kiro-power/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'TAPETIDE_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'tapetide-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "tapetide-mcp", "version": "1.0.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:25Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.5, "trust_score_v2": 60.5, "rank_v2": 654, "rank_v2_delta": 231, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 12.4, "maintenance": 16.9, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "loushang", "repo": "zhnt/loushang", "display_repo": "", "url": "https://github.com/zhnt/loushang", "listing_class": "agent", "rank": 655, "previous_rank": 651, "rank_delta": -4, "stars": 1735, "stars_fmt": "1.7k", "forks": 272, "forks_fmt": "272", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 824, "commits_low_confidence": false, "score": 80.7, "description": "AI-native agent harness for coding workflows by python: multi-model LLM orchestration, stateful sessions, tool governance, traceable delivery, and provider routing for GPT, Claude, DeepSeek, Qwen, Kimi, GLM, and MiniMax.", "language": "Python", "open_issues": 44, "category": "Coding Agents", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:47:13Z", "slug": "loushang", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: docs/internals/architecture/harness/plugin/README.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.5, "trust_score_v2": 60.5, "rank_v2": 655, "rank_v2_delta": 3, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Replicant MCP", "repo": "thecombatwombat/replicant-mcp", "display_repo": "", "url": "https://github.com/thecombatwombat/replicant-mcp", "listing_class": "agent", "rank": 656, "previous_rank": 646, "rank_delta": -10, "stars": 18, "stars_fmt": "18", "forks": 4, "forks_fmt": "4", "last_push": "2026-07-26", "days_ago": 78, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.2, "description": "Android MCP server - production-grade, token-optimized, accessibility-first", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 357, "npm_package": "replicant-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 68, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-22T19:44:00Z", "slug": "replicant-mcp", "full_fetched_at": "2026-10-12T00:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/plugin.json", "Found shell dependency 'execa' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'replicant-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "replicant-mcp", "version": "1.6.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:24Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.5, "trust_score_v2": 60.5, "rank_v2": 656, "rank_v2_delta": 270, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.3, "identity": 18.0, "transparency": 11.5, "maintenance": 6.8, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP File Tools", "repo": "dimitar-grigorov/mcp-file-tools", "display_repo": "", "url": "https://github.com/dimitar-grigorov/mcp-file-tools", "listing_class": "agent", "rank": 657, "previous_rank": 647, "rank_delta": -10, "stars": 25, "stars_fmt": "25", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 36, "commits_low_confidence": false, "score": 57.8, "description": "MCP server for file operations on non-UTF-8 text: detects the encoding from the bytes, hands the model UTF-8, and writes back in the original encoding with BOM and CRLF/LF intact. 24 encodings — Cyrillic/CP1251, CP1252, KOI8, ISO-8859, UTF-16, GBK/GB18030.", "language": "Go", "open_issues": 1, "category": "MCP Servers", "category_rank": 358, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 8.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:15:20Z", "slug": "mcp-file-tools", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 60.4, "trust_score_v2": 60.4, "rank_v2": 657, "rank_v2_delta": 111, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 15.6, "maintenance": 18.1, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Laravel MCP Companion", "repo": "brianirish/laravel-mcp-companion", "display_repo": "", "url": "https://github.com/brianirish/laravel-mcp-companion", "listing_class": "agent", "rank": 658, "previous_rank": 653, "rank_delta": -5, "stars": 38, "stars_fmt": "38", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 32, "commits_low_confidence": false, "score": 58.4, "description": "A Laravel developer's MCP companion. Get the absolute best advice, recommendations, and up-to-date documentation for the entire Laravel ecosystem.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 359, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/brianirish/laravel-mcp-companion:v0.13.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.75, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:33:33Z", "slug": "laravel-mcp-companion", "full_fetched_at": "2026-10-12T12:02:45Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.4, "trust_score_v2": 60.4, "rank_v2": 658, "rank_v2_delta": 130, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.9, "maintenance": 18.1, "adoption": 3.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AI company", "repo": "CronusL-1141/AI-company", "display_repo": "", "url": "https://github.com/CronusL-1141/AI-company", "listing_class": "skill", "rank": 98, "previous_rank": 99, "rank_delta": 1, "stars": 372, "stars_fmt": "372", "forks": 64, "forks_fmt": "64", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 96, "commits_low_confidence": false, "score": 73.6, "description": "Multi-agent team operating system for Claude Code. 108 MCP tools, 40+ agent templates, 10 lifecycle hooks, 7 pipeline workflows. Persistent teams, structured meetings, task wall, real-time React dashboard. No LangChain/AutoGen — pure CC native integration.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 98, "npm_package": "", "crate_package": "", "pypi_package": "ai-team-os", "docker_image": "", "vscode_extension": "", "weekly_downloads": 46, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:21:20Z", "slug": "ai-company", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/aiteam/mcp/server.py", "Found MCP-related server test path: tests/unit/test_mcp_server_surface.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ai-team-os' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ai-team-os", "version": "1.3.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:58Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.4, "trust_score_v2": 60.4, "rank_v2": 98, "rank_v2_delta": 843, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 19.9, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "zerostack", "repo": "gi-dellav/zerostack", "display_repo": "", "url": "https://github.com/gi-dellav/zerostack", "listing_class": "agent", "rank": 659, "previous_rank": 649, "rank_delta": -10, "stars": 1705, "stars_fmt": "1.7k", "forks": 140, "forks_fmt": "140", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 44, "commits_low_confidence": false, "score": 74.9, "description": "Lightweight coding agent written in Rust, optimized for memory footprint and performance", "language": "Rust", "open_issues": 2, "category": "Coding Agents", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-05T08:15:27Z", "slug": "zerostack", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "https://gi-dellav.github.io/zerostack/", "homepage_icon": "/site-icons/00ff634005076a29.png", "homepage_icon_for": "https://gi-dellav.github.io/zerostack/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 60.3, "trust_score_v2": 60.3, "rank_v2": 659, "rank_v2_delta": 85, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 13.5, "maintenance": 18.5, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Agent Monitor", "repo": "hoangsonww/Claude-Code-Agent-Monitor", "display_repo": "", "url": "https://github.com/hoangsonww/Claude-Code-Agent-Monitor", "listing_class": "skill", "rank": 99, "previous_rank": 97, "rank_delta": -2, "stars": 1067, "stars_fmt": "1.1k", "forks": 247, "forks_fmt": "247", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 146, "commits_low_confidence": false, "score": 79.3, "description": "🚀 A real-time monitoring dashboard for Claude Code & Codex, built with SQLite3, Node.js, Express, React, Vite, TailwindCSS, & WebSockets. It tracks sessions, agent activity, tool usage, and subagent orchestration, providing live analytics, a Kanban status board, status notifications, a cute buddy…", "language": "TypeScript", "open_issues": 22, "category": "Agent Skills", "category_rank": 99, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:01:49Z", "slug": "claude-code-agent-monitor", "full_fetched_at": "2026-10-12T16:02:23Z", "source_note": "", "github_homepage": "https://hoangsonww.github.io/Claude-Code-Agent-Monitor/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/ccam-platform/skills/mcp-server/SKILL.md", "Found MCP-related server path: plugins/ccam-platform/skills/mcp-server/agents/openai.yaml", "Found MCP dependency '@modelcontextprotocol/sdk' in mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude/skills') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.3, "trust_score_v2": 60.3, "rank_v2": 99, "rank_v2_delta": 674, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 13.0, "maintenance": 19.9, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "I Have Adhd", "repo": "ayghri/i-have-adhd", "display_repo": "", "url": "https://github.com/ayghri/i-have-adhd", "listing_class": "skill", "rank": 100, "previous_rank": 98, "rank_delta": -2, "stars": 56641, "stars_fmt": "56.6k", "forks": 3241, "forks_fmt": "3.2k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 42, "commits_low_confidence": false, "score": 90.1, "description": "A skill to stop your coding agent from burying the answer. ADHD-friendly output.", "language": "Python", "open_issues": 26, "category": "Agent Skills", "category_rank": 100, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T01:50:54Z", "slug": "i-have-adhd", "full_fetched_at": "2026-10-12T12:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.3, "trust_score_v2": 60.3, "rank_v2": 100, "rank_v2_delta": 566, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 12.6, "maintenance": 18.5, "adoption": 11.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Me", "repo": "paladini/mcp-me", "display_repo": "", "url": "https://github.com/paladini/mcp-me", "listing_class": "agent", "rank": 660, "previous_rank": 654, "rank_delta": -6, "stars": 20, "stars_fmt": "20", "forks": 5, "forks_fmt": "5", "last_push": "2026-08-11", "days_ago": 62, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.0, "description": "Your AI assistants don't know who you are. mcp-me fixes that: a local MCP server that gives any AI a full picture of who you are", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 360, "npm_package": "mcp-me", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 43, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.184, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:07:35Z", "slug": "mcp-me", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://mcp-me.page/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SPOTIFY_REFRESH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-me' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-me", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:10Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.3, "trust_score_v2": 60.3, "rank_v2": 660, "rank_v2_delta": 244, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.8, "identity": 18.0, "transparency": 11.5, "maintenance": 7.9, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MiMo Code", "repo": "XiaomiMiMo/MiMo-Code", "display_repo": "", "url": "https://github.com/XiaomiMiMo/MiMo-Code", "listing_class": "agent", "rank": 661, "previous_rank": 670, "rank_delta": 9, "stars": 13635, "stars_fmt": "13.6k", "forks": 1429, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 112, "commits_low_confidence": false, "score": 89.5, "description": "MiMo Code: Where Models and Agents Co-Evolve", "language": "TypeScript", "open_issues": 839, "category": "Coding Agents", "category_rank": 38, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.84, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:58:58Z", "slug": "mimo-code", "full_fetched_at": "2026-10-12T16:02:11Z", "source_note": "", "github_homepage": "https://mimo.xiaomi.com/mimocode", "homepage_icon": "/site-icons/a70477d60c6dab8e.png", "homepage_icon_for": "https://mimo.xiaomi.com/mimocode", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: packages/cli/test/mcp/fixtures/elicitation-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/cli/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "Groq", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/cli/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/cli/package.json", "README/docs also mention Anthropic", "Found Cohere dependency 'cohere' in packages/cli/package.json", "Found Groq dependency 'groq' in packages/cli/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: packages/cli/src/cli/cmd/tui/feature-plugins/home/footer.tsx", "README/docs also mention a declared plugin/integration surface", "Found code dependency '@octokit' in packages/cli/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.2, "trust_score_v2": 60.2, "rank_v2": 661, "rank_v2_delta": -4, "trust_v2_adjustment": -1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 11.7, "maintenance": 20.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Bagel", "repo": "Extelligence-ai/bagel", "display_repo": "", "url": "https://github.com/Extelligence-ai/bagel", "listing_class": "agent", "rank": 662, "previous_rank": 655, "rank_delta": -7, "stars": 399, "stars_fmt": "399", "forks": 30, "forks_fmt": "30", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 28, "commits_low_confidence": false, "score": 65.6, "description": "Query robotics, drone, and IoT data in plain English through an MCP server, with an intelligent edge data reduction pipeline that keeps only the data that matters.", "language": "Python", "open_issues": 24, "category": "MCP Servers", "category_rank": 361, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.52, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T05:55:40Z", "slug": "bagel", "full_fetched_at": "2026-10-12T16:02:02Z", "source_note": "", "github_homepage": "https://www.trybagel.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 60.1, "trust_score_v2": 60.1, "rank_v2": 662, "rank_v2_delta": 87, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 13.9, "maintenance": 17.8, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Junie", "repo": "JetBrains/junie", "display_repo": "", "url": "https://github.com/JetBrains/junie", "listing_class": "agent", "rank": 663, "previous_rank": 659, "rank_delta": -4, "stars": 476, "stars_fmt": "476", "forks": 35, "forks_fmt": "35", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 534, "commits_low_confidence": false, "score": 73.3, "description": "An AI coding agent by JetBrains that ships code from your terminal, IDE, or CI/CD pipeline - powered by any LLM you choose", "language": "Shell", "open_issues": 3, "category": "Coding Agents", "category_rank": 39, "npm_package": "@jetbrains/junie", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 458, "dl_source": "npm", "hn_mentions_30d": 39, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T09:57:00Z", "slug": "junie", "full_fetched_at": "2026-10-12T04:02:47Z", "source_note": "", "github_homepage": "https://junie.jetbrains.com", "homepage_icon": "/site-icons/635ee90a8efe39f4.png", "homepage_icon_for": "https://junie.jetbrains.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: hermes-plugin/.gitignore", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@jetbrains/junie' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@jetbrains/junie", "version": "3110.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:47Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "proprietary", "license_override": "proprietary", "trust_score": 60.1, "trust_score_v2": 60.1, "rank_v2": 663, "rank_v2_delta": 217, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 20.0, "adoption": 10.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Microsoft Skills", "repo": "microsoft/skills", "display_repo": "", "url": "https://github.com/microsoft/skills", "listing_class": "skill", "rank": 101, "previous_rank": 103, "rank_delta": 2, "stars": 3103, "stars_fmt": "3.1k", "forks": 351, "forks_fmt": "351", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 35, "commits_low_confidence": false, "score": 77.2, "description": "Skills, MCP servers, Custom Agents, Agents.md for SDKs to ground Coding Agents", "language": "TypeScript", "open_issues": 26, "category": "Agent Skills", "category_rank": 101, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.51, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": -1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:37:08Z", "slug": "microsoft-skills", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "https://microsoft.github.io/skills/", "homepage_icon": "/site-icons/0f4faba7b9be9191.png", "homepage_icon_for": "https://microsoft.github.io/skills/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/plugins/microsoft-365-agents-toolkit/skills/ui-widget-developer/references/mcp-server-pattern.md", "Found MCP-related server path: .github/skills/mcp-builder/reference/node_mcp_server.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in .github/skills/mcp-builder/scripts/requirements.txt", "Ships a Gemini CLI plugin manifest (.github/plugins/azure-skills/gemini-extension.json)", "Found credential/config marker 'COPILOT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.0, "trust_score_v2": 60.0, "rank_v2": 101, "rank_v2_delta": 618, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 13.1, "maintenance": 18.2, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Drama Skills", "repo": "zenstory-ai/drama-skills", "display_repo": "", "url": "https://github.com/zenstory-ai/drama-skills", "listing_class": "skill", "rank": 102, "previous_rank": 101, "rank_delta": -1, "stars": 2786, "stars_fmt": "2.8k", "forks": 581, "forks_fmt": "581", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 24, "commits_low_confidence": false, "score": 74.8, "description": "开源 AI 短剧/漫剧创作 skill 合集：剧本、角色资产、分镜 storyboard、图片/视频提示词、审查，适配 Claude Code 与 Codex | Open-source AI short drama / micro-drama skills for Claude Code & Codex: script, assets, storyboard, image & video prompts, review. MIT.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 102, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T12:59:47Z", "slug": "drama-skills", "full_fetched_at": "2026-10-12T04:02:30Z", "source_note": "", "github_homepage": "https://zenstory.ai/drama-skills", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.0, "trust_score_v2": 60.0, "rank_v2": 102, "rank_v2_delta": 610, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.8, "maintenance": 17.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Real Browser MCP", "repo": "ofershap/real-browser-mcp", "display_repo": "", "url": "https://github.com/ofershap/real-browser-mcp", "listing_class": "agent", "rank": 664, "previous_rank": 675, "rank_delta": 11, "stars": 55, "stars_fmt": "55", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8, "commits_low_confidence": true, "score": 52.2, "description": "MCP server + Chrome extension that gives AI agents control of your real browser with existing sessions and logins", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 362, "npm_package": "real-browser-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 53, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.842, "scorecard_score": 4.8, "scorecard_checks": { "Maintained": 0, "Security-Policy": 10, "Dependency-Update-Tool": 10, "Code-Review": 0, "Dangerous-Workflow": 10, "Token-Permissions": 0, "Pinned-Dependencies": 3, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Vulnerabilities": 0, "SAST": 10, "Signed-Releases": -1, "Packaging": -1, "Branch-Protection": 3, "License": 10, "Fuzzing": 0, "Contributors": 3, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-11T20:04:00Z", "slug": "real-browser-mcp", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server/src/bridge.ts", "Found MCP-related server path: mcp-server/src/index.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'real-browser-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "real-browser-mcp", "version": "1.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.0, "trust_score_v2": 60.0, "rank_v2": 664, "rank_v2_delta": 304, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 12.6, "maintenance": 13.9, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Nanobot", "repo": "HKUDS/nanobot", "display_repo": "", "url": "https://github.com/HKUDS/nanobot", "listing_class": "agent", "rank": 665, "previous_rank": 656, "rank_delta": -9, "stars": 48969, "stars_fmt": "49.0k", "forks": 8628, "forks_fmt": "8.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 464, "commits_low_confidence": false, "score": 96.4, "description": "Ultra-lightweight, open-source, self-hosted personal AI agent framework in Python with WebUI, tools, memory, MCP, multi-agent workflows, automation, and chat apps", "language": "Python", "open_issues": 214, "category": "Agent Frameworks", "category_rank": 62, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.16, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:14:53Z", "slug": "nanobot", "full_fetched_at": "2026-10-12T04:02:42Z", "source_note": "", "github_homepage": "https://nanobot.wiki", "homepage_icon": "/site-icons/75300d7a7777fb57.png", "homepage_icon_for": "https://nanobot.wiki", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: webui/src/channel-plugins/i18n.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 60.0, "trust_score_v2": 60.0, "rank_v2": 665, "rank_v2_delta": 31, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.1, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ctf Skills", "repo": "ljagiello/ctf-skills", "display_repo": "", "url": "https://github.com/ljagiello/ctf-skills", "listing_class": "skill", "rank": 103, "previous_rank": 100, "rank_delta": -3, "stars": 3433, "stars_fmt": "3.4k", "forks": 395, "forks_fmt": "395", "last_push": "2026-09-13", "days_ago": 29, "weekly_commits": 4, "commits_low_confidence": false, "score": 63.1, "description": "Agent skills for solving CTF challenges - web exploitation, binary pwn, crypto, reverse engineering, forensics, OSINT, and more", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 103, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.825, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 8, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 7, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:31:54Z", "slug": "ctf-skills", "full_fetched_at": "2026-10-11T20:01:50Z", "source_note": "", "github_homepage": "https://ljagiello.github.io/ctf-skills", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.9, "trust_score_v2": 59.9, "rank_v2": 103, "rank_v2_delta": 611, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 10.8, "transparency": 14.6, "maintenance": 12.9, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mnemon", "repo": "mnemon-dev/mnemon", "display_repo": "", "url": "https://github.com/mnemon-dev/mnemon", "listing_class": "skill", "rank": 104, "previous_rank": 102, "rank_delta": -2, "stars": 622, "stars_fmt": "622", "forks": 75, "forks_fmt": "75", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 48, "commits_low_confidence": false, "score": 71.5, "description": "LLM-supervised persistent memory for AI agents — graph-based recall, cross-session knowledge, single binary. Works with DeepSeek Harness, Claude Code, OpenClaw, and any agent runtime.", "language": "Go", "open_issues": 10, "category": "Agent Skills", "category_rank": 104, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-05T08:32:18Z", "slug": "mnemon", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "https://mnemon.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MNEMON_EMBED_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: internal/memory/setup/assets/openclaw/plugin/index.js", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.9, "trust_score_v2": 59.9, "rank_v2": 104, "rank_v2_delta": 643, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 13.7, "maintenance": 18.7, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "sim-use", "repo": "lycorp-jp/sim-use", "display_repo": "", "url": "https://github.com/lycorp-jp/sim-use", "listing_class": "agent", "rank": 666, "previous_rank": 661, "rank_delta": -5, "stars": 1411, "stars_fmt": "1.4k", "forks": 96, "forks_fmt": "96", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 36, "commits_low_confidence": false, "score": 72.3, "description": "Give your AI agent eyes and hands on iOS Simulator and Android emulator/devices.", "language": "Swift", "open_issues": 23, "category": "Browser & Computer Use", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.57, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-10T23:26:58Z", "slug": "sim-use", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: Plugins/VersionPlugin/plugin.swift", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.9, "trust_score_v2": 59.9, "rank_v2": 666, "rank_v2_delta": 36, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 13.5, "maintenance": 18.1, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Superpowers", "repo": "obra/superpowers", "display_repo": "", "url": "https://github.com/obra/superpowers", "listing_class": "agent", "rank": 667, "previous_rank": 665, "rank_delta": -2, "stars": 298062, "stars_fmt": "298.1k", "forks": 26634, "forks_fmt": "26.6k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 3, "commits_low_confidence": true, "score": 82.2, "description": "An agentic skills framework & software development methodology that works.", "language": "Shell", "open_issues": 190, "category": "Coding Agents", "category_rank": 40, "npm_package": "superpowers", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 226, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:02:07Z", "slug": "superpowers", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'superpowers' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "superpowers", "version": "0.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:11Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.9, "trust_score_v2": 59.9, "rank_v2": 667, "rank_v2_delta": 14, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 13.3, "maintenance": 13.1, "adoption": 16.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Map Traveler MCP", "repo": "mfukushim/map-traveler-mcp", "display_repo": "", "url": "https://github.com/mfukushim/map-traveler-mcp", "listing_class": "agent", "rank": 668, "previous_rank": 660, "rank_delta": -8, "stars": 24, "stars_fmt": "24", "forks": 9, "forks_fmt": "9", "last_push": "2026-08-03", "days_ago": 70, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.4, "description": "Virtual traveler library for MCP", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 363, "npm_package": "@mfukushim/map-traveler-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 153, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:26:43Z", "slug": "map-traveler-mcp", "full_fetched_at": "2026-10-11T20:01:59Z", "source_note": "", "github_homepage": "https://akibakokoubou.jp/", "homepage_icon": "/site-icons/2c689d619002235a.png", "homepage_icon_for": "https://akibakokoubou.jp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "Found Google Gemini dependency '@google/genai' in package.json", "README/docs also mention Google Gemini", "Found credential/config marker 'MT_TURSO_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mfukushim/map-traveler-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mfukushim/map-traveler-mcp", "version": "0.1.7" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.9, "trust_score_v2": 59.9, "rank_v2": 668, "rank_v2_delta": 249, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.9, "identity": 18.0, "transparency": 10.9, "maintenance": 7.3, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Home Assistant MCP", "repo": "Coolver/home-assistant-mcp", "display_repo": "", "url": "https://github.com/Coolver/home-assistant-mcp", "listing_class": "agent", "rank": 669, "previous_rank": 663, "rank_delta": -6, "stars": 58, "stars_fmt": "58", "forks": 7, "forks_fmt": "7", "last_push": "2026-08-03", "days_ago": 70, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.1, "description": "Home Assistant MCP Server. Enable Cursor, VS Code, Claude Code or any MCP-enabled IDE to vibe-code and manage Home Assistant: create automations, design dashboards, tweak themes, modify configs and deploy changes to your HA instance using natural language 🏠🤖 ", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 364, "npm_package": "@coolver/home-assistant-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 175, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.12, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:12:23Z", "slug": "home-assistant-mcp", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SUPERVISOR_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@coolver/home-assistant-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@coolver/home-assistant-mcp", "version": "3.2.31" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:56Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.8, "trust_score_v2": 59.8, "rank_v2": 669, "rank_v2_delta": 270, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.5, "identity": 18.0, "transparency": 10.8, "maintenance": 7.3, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Microsoft Learn MCP", "repo": "MicrosoftDocs/mcp", "display_repo": "", "url": "https://github.com/MicrosoftDocs/mcp", "listing_class": "agent", "rank": 670, "previous_rank": 664, "rank_delta": -6, "stars": 1938, "stars_fmt": "1.9k", "forks": 263, "forks_fmt": "263", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 0, "commits_low_confidence": true, "score": 55.4, "description": "Official Microsoft Learn MCP Server and CLI tool – powering LLMs and AI agents with real-time, trusted Microsoft docs & code samples.", "language": "TypeScript", "open_issues": 14, "category": "MCP Servers", "category_rank": 365, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.963, "scorecard_score": 6.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-09-30T18:54:51Z", "slug": "microsoft-learn-mcp", "full_fetched_at": "2026-10-11T20:01:56Z", "source_note": "", "github_homepage": "https://learn.microsoft.com", "homepage_icon": "/site-icons/38dd9f92e4fe8271.png", "homepage_icon_for": "https://learn.microsoft.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in cli/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "CC-BY-4.0", "license_type": "open", "license_override": "", "trust_score": 59.7, "trust_score_v2": 59.7, "rank_v2": 670, "rank_v2_delta": 136, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.3, "identity": 10.8, "transparency": 14.3, "maintenance": 11.7, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "adk-java", "repo": "google/adk-java", "display_repo": "", "url": "https://github.com/google/adk-java", "listing_class": "agent", "rank": 671, "previous_rank": 673, "rank_delta": 2, "stars": 1746, "stars_fmt": "1.7k", "forks": 433, "forks_fmt": "433", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 89, "commits_low_confidence": false, "score": 81.2, "description": "An open-source, code-first Java toolkit for building, evaluating, and deploying sophisticated AI agents with flexibility and control.", "language": "Java", "open_issues": 57, "category": "Agent Frameworks", "category_rank": 63, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:51:43Z", "slug": "adk-java", "full_fetched_at": "2026-10-12T16:02:08Z", "source_note": "", "github_homepage": "https://google.github.io/adk-docs/", "homepage_icon": "/site-icons/092ba6b0ca3d528a.png", "homepage_icon_for": "https://google.github.io/adk-docs/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: core/src/main/java/com/google/adk/tools/mcp/McpServerLogConsumer.java", "Found MCP-related server path: core/src/main/java/com/google/adk/tools/mcp/SseServerParameters.java", "Found MCP-related server test path: core/src/test/java/com/google/adk/tools/mcp/StdioServerParametersTest.java" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: core/src/main/java/com/google/adk/plugins/BasePlugin.java", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.7, "trust_score_v2": 59.7, "rank_v2": 671, "rank_v2_delta": 39, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 13.8, "maintenance": 19.8, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Security Scanner MCP", "repo": "sinewaveai/agent-security-scanner-mcp", "display_repo": "", "url": "https://github.com/sinewaveai/agent-security-scanner-mcp", "listing_class": "agent", "rank": 672, "previous_rank": 668, "rank_delta": -4, "stars": 123, "stars_fmt": "123", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 0, "commits_low_confidence": true, "score": 42.2, "description": "Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 366, "npm_package": "agent-security-scanner-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 404, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.71, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T10:02:49Z", "slug": "agent-security-scanner-mcp", "full_fetched_at": "2026-10-12T00:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server-full/README.md", "Found MCP-related server path: mcp-server-full/analyzer.py", "Found MCP-related server test path: mcp-server-full/rules/java/spring/security/audit/spring-actuator-fully-enabled-yaml.test.yaml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: mcp-server-full/rules/php/wordpress-plugins/security/audit/wp-ajax-no-auth-and-auth-hooks-audit.yaml", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'agent-security-scanner-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "agent-security-scanner-mcp", "version": "4.5.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.7, "trust_score_v2": 59.7, "rank_v2": 672, "rank_v2_delta": 299, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 12.9, "maintenance": 11.7, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Yahoo Finance", "repo": "narumiruna/yfinance-mcp", "display_repo": "", "url": "https://github.com/narumiruna/yfinance-mcp", "listing_class": "agent", "rank": 673, "previous_rank": 666, "rank_delta": -7, "stars": 201, "stars_fmt": "201", "forks": 66, "forks_fmt": "66", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 10, "commits_low_confidence": false, "score": 60.2, "description": "", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 367, "npm_package": "", "crate_package": "", "pypi_package": "yfmcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 621, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.84, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:39:46Z", "slug": "yahoo-finance", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'yfmcp' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.7, "trust_score_v2": 59.7, "rank_v2": 673, "rank_v2_delta": 148, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.4, "identity": 10.8, "transparency": 12.1, "maintenance": 16.1, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Golem", "repo": "golemcloud/golem", "display_repo": "", "url": "https://github.com/golemcloud/golem", "listing_class": "agent", "rank": 674, "previous_rank": 669, "rank_delta": -5, "stars": 1509, "stars_fmt": "1.5k", "forks": 209, "forks_fmt": "209", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 210, "commits_low_confidence": false, "score": 79.9, "description": "Golem Cloud is the agent-native platform for building AI agents and distributed applications that never lose state, never duplicate work, and never require you to build infrastructure.", "language": "Rust", "open_issues": 6, "category": "Workflow Platforms", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 2, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:18:46Z", "slug": "golem", "full_fetched_at": "2026-10-12T04:02:41Z", "source_note": "", "github_homepage": "https://learn.golem.cloud/", "homepage_icon": "/site-icons/c289c19216c413f4.png", "homepage_icon_for": "https://learn.golem.cloud/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: golem-skills/skills/common/golem-configure-mcp-server/SKILL.md", "Found MCP-related server path: golem-worker-service/src/mcp/agent_mcp_server.rs", "Found MCP-related server docs path: docs/src/content/next/how-to-guides/common/golem-configure-mcp-server.mdx", "Found MCP-related server docs path: docs/src/content/v1.5/how-to-guides/common/golem-configure-mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .agents/skills/creating-new-builtin-plugins/SKILL.md" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 59.7, "trust_score_v2": 59.7, "rank_v2": 674, "rank_v2_delta": 37, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 11.9, "maintenance": 20.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Rowboat", "repo": "rowboatlabs/rowboat", "display_repo": "", "url": "https://github.com/rowboatlabs/rowboat", "listing_class": "agent", "rank": 675, "previous_rank": 674, "rank_delta": -1, "stars": 18009, "stars_fmt": "18.0k", "forks": 1800, "forks_fmt": "1.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 189, "commits_low_confidence": false, "score": 90.6, "description": "AI coworker with memory and collaboration", "language": "TypeScript", "open_issues": 93, "category": "Multi-Agent Systems", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.57, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T03:30:38Z", "slug": "rowboat", "full_fetched_at": "2026-10-12T08:02:20Z", "source_note": "", "github_homepage": "https://www.rowboatlabs.com", "homepage_icon": "/site-icons/8f0476dca994d2fb.png", "homepage_icon_for": "https://www.rowboatlabs.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: apps/x/apps/renderer/src/extensions/calendar-block.tsx", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.7, "trust_score_v2": 59.7, "rank_v2": 675, "rank_v2_delta": 64, "trust_v2_adjustment": 0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 11.3, "maintenance": 20.0, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Vercel fx", "repo": "vercel-labs/fx", "display_repo": "", "url": "https://github.com/vercel-labs/fx", "listing_class": "agent", "rank": 676, "previous_rank": 729, "rank_delta": 53, "stars": 3374, "stars_fmt": "3.4k", "forks": 377, "forks_fmt": "377", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 976, "commits_low_confidence": false, "score": 83.2, "description": "Unix like coding agent", "language": "Zig", "open_issues": 77, "category": "Coding Agents", "category_rank": 41, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:07:06Z", "slug": "vercel-fx", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "https://fx.sh", "homepage_icon": "/site-icons/e7f951d96ea07234.png", "homepage_icon_for": "https://fx.sh", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/acp/mcp_servers.zig", "Found MCP-related server path: src/core/mcp/server_auth.zig" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.7, "trust_score_v2": 59.7, "rank_v2": 676, "rank_v2_delta": 142, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 10.5, "maintenance": 20.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Traceroot", "repo": "traceroot-ai/traceroot", "display_repo": "", "url": "https://github.com/traceroot-ai/traceroot", "listing_class": "agent", "rank": 677, "previous_rank": 672, "rank_delta": -5, "stars": 796, "stars_fmt": "796", "forks": 268, "forks_fmt": "268", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 880, "commits_low_confidence": false, "score": 78.7, "description": "TraceRoot - Open Source Self-Improving Layer for AI Agents YC S25", "language": "TypeScript", "open_issues": 304, "category": "Observability & Evaluation", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 7.2, "scorecard_checks": { "Code-Review": 8, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Maintained": 10, "Security-Policy": 10, "Token-Permissions": 10, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Signed-Releases": -1, "Packaging": 10, "License": 9, "Vulnerabilities": 0, "SAST": 4, "Branch-Protection": -1, "Fuzzing": 0, "Pinned-Dependencies": 0, "CI-Tests": 10, "Contributors": 10 }, "scorecard_scanned_at": "2026-10-12T08:06:20Z", "slug": "traceroot", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "https://traceroot.ai", "homepage_icon": "/site-icons/f17b3ce645011974.png", "homepage_icon_for": "https://traceroot.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml", "Found Redis dependency 'redis' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 59.6, "trust_score_v2": 59.6, "rank_v2": 677, "rank_v2_delta": -60, "trust_v2_adjustment": -2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 14.6, "maintenance": 20.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skill Recorder", "repo": "microsoft/skill-recorder", "display_repo": "", "url": "https://github.com/microsoft/skill-recorder", "listing_class": "skill", "rank": 105, "previous_rank": 105, "rank_delta": 0, "stars": 4220, "stars_fmt": "4.2k", "forks": 443, "forks_fmt": "443", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 21, "commits_low_confidence": false, "score": 75.1, "description": "Desktop app that records your on-screen work session and uses the GitHub Copilot SDK to reconstruct it as an intent + ordered steps, then builds a reusable Skill or Automation for Microsoft Autopilots like Scout, Microsoft Copilot Cowork, or Copilot Studio.", "language": "TypeScript", "open_issues": 21, "category": "Agent Skills", "category_rank": 105, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.55, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:03:24Z", "slug": "skill-recorder", "full_fetched_at": "2026-10-12T16:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.6, "trust_score_v2": 59.6, "rank_v2": 105, "rank_v2_delta": 619, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 13.3, "maintenance": 17.0, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Open Multi-Agent", "repo": "open-multi-agent/open-multi-agent", "display_repo": "", "url": "https://github.com/open-multi-agent/open-multi-agent", "listing_class": "agent", "rank": 678, "previous_rank": 667, "rank_delta": -11, "stars": 6998, "stars_fmt": "7.0k", "forks": 2437, "forks_fmt": "2.4k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 15, "commits_low_confidence": false, "score": 78.7, "description": "Self-hosted TypeScript agent runtime with durable approvals and verifiable run records. Own it, approve it, audit it.", "language": "TypeScript", "open_issues": 4, "category": "Multi-Agent Systems", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:02:45Z", "slug": "open-multi-agent", "full_fetched_at": "2026-10-12T08:02:13Z", "source_note": "", "github_homepage": "https://open-multi-agent.com/go/repo", "homepage_icon": "/site-icons/c1f5aa2a635a4719.png", "homepage_icon_for": "https://open-multi-agent.com/go/repo", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in packages/core/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/core/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/core/package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in packages/core/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.6, "trust_score_v2": 59.6, "rank_v2": 678, "rank_v2_delta": -37, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.7, "identity": 10.8, "transparency": 13.2, "maintenance": 16.7, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Scientific Agent Skills", "repo": "K-Dense-AI/scientific-agent-skills", "display_repo": "", "url": "https://github.com/K-Dense-AI/scientific-agent-skills", "listing_class": "skill", "rank": 106, "previous_rank": 111, "rank_delta": 5, "stars": 48538, "stars_fmt": "48.5k", "forks": 4360, "forks_fmt": "4.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 34, "commits_low_confidence": false, "score": 89.3, "description": "Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 250,000+ scientists worldwide. 177 ready-to-use validated skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi…", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 106, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:49:32Z", "slug": "scientific-agent-skills", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "https://arxiv.org/abs/2609.00065", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "https://arxiv.org/abs/2609.00065", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.6, "trust_score_v2": 59.6, "rank_v2": 106, "rank_v2_delta": 617, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.5, "maintenance": 18.2, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Glade MCP", "repo": "Glade-tool/glade-mcp", "display_repo": "", "url": "https://github.com/Glade-tool/glade-mcp", "listing_class": "agent", "rank": 679, "previous_rank": 671, "rank_delta": -8, "stars": 209, "stars_fmt": "209", "forks": 22, "forks_fmt": "22", "last_push": "2026-09-02", "days_ago": 40, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.8, "description": "Connect any MCP-compatible AI client (Claude Code, Cursor, Windsurf) to Unity or Godot. 275+ granular tools, an editor aware system prompt, game design document project context, script semantic search, and skill calibration.", "language": "C#", "open_issues": 0, "category": "MCP Servers", "category_rank": 368, "npm_package": "", "crate_package": "", "pypi_package": "gladekit-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 136, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.04, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:02:51Z", "slug": "glade-mcp", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "https://www.gladekit.com/", "homepage_icon": "/site-icons/4a9be27d2ec16e2d.png", "homepage_icon_for": "https://www.gladekit.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server/.gitignore", "Found MCP-related server path: mcp-server/.mcp.json", "Found MCP-related server test path: mcp-server/tests/__init__.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in mcp-server/pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'gladekit-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.6, "trust_score_v2": 59.6, "rank_v2": 679, "rank_v2_delta": 99, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.7, "identity": 18.0, "transparency": 11.2, "maintenance": 9.3, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "NotFair", "repo": "nowork-studio/notfair-plugin", "display_repo": "", "url": "https://github.com/nowork-studio/notfair-plugin", "listing_class": "skill", "rank": 107, "previous_rank": 159, "rank_delta": 52, "stars": 3927, "stars_fmt": "3.9k", "forks": 495, "forks_fmt": "495", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 18, "commits_low_confidence": false, "score": 74.7, "description": "Open-source SEO, GEO, and marketing skills for AI agents.", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 107, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 6.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:10:38Z", "slug": "notfair", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://notfair.co/", "homepage_icon": "/site-icons/b3651e56b291523e.png", "homepage_icon_for": "https://notfair.co/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.4, "trust_score_v2": 59.4, "rank_v2": 107, "rank_v2_delta": 594, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 14.2, "maintenance": 16.9, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BrowserSkill", "repo": "Tencent/BrowserSkill", "display_repo": "", "url": "https://github.com/Tencent/BrowserSkill", "listing_class": "skill", "rank": 108, "previous_rank": 110, "rank_delta": 2, "stars": 8713, "stars_fmt": "8.7k", "forks": 623, "forks_fmt": "623", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 309, "commits_low_confidence": false, "score": 86.6, "description": "Let AI agents use your real, logged-in browser without interrupting your work. CLI + extension for browser automation across any shell-capable AI agent.", "language": "TypeScript", "open_issues": 39, "category": "Agent Skills", "category_rank": 108, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.28, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:32:09Z", "slug": "browserskill", "full_fetched_at": "2026-10-12T16:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.4, "trust_score_v2": 59.4, "rank_v2": 108, "rank_v2_delta": 626, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Marketing Skills", "repo": "coreyhaines31/marketingskills", "display_repo": "", "url": "https://github.com/coreyhaines31/marketingskills", "listing_class": "skill", "rank": 109, "previous_rank": 106, "rank_delta": -3, "stars": 54325, "stars_fmt": "54.3k", "forks": 8065, "forks_fmt": "8.1k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 462, "commits_low_confidence": false, "score": 96.2, "description": "Marketing skills for Claude Code and AI agents. CRO, copywriting, SEO, analytics, and growth engineering.", "language": "JavaScript", "open_issues": 18, "category": "Agent Skills", "category_rank": 109, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T09:52:37Z", "slug": "marketing-skills", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://marketing-skills.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.4, "trust_score_v2": 59.4, "rank_v2": 109, "rank_v2_delta": 611, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 12.2, "maintenance": 19.7, "adoption": 11.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cisco Modeling Labs CML", "repo": "xorrkaz/cml-mcp", "display_repo": "", "url": "https://github.com/xorrkaz/cml-mcp", "listing_class": "agent", "rank": 680, "previous_rank": 676, "rank_delta": -4, "stars": 74, "stars_fmt": "74", "forks": 43, "forks_fmt": "43", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 23, "commits_low_confidence": false, "score": 61.1, "description": "A Model Context Protocol (MCP) Server for Cisco Modeling Labs (CML)", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 369, "npm_package": "", "crate_package": "", "pypi_package": "cml-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 879, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.1, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-09T21:49:08Z", "slug": "cisco-modeling-labs-cml", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'cml-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "cml-mcp", "version": "0.32.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:00Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-2-Clause", "license_type": "open", "license_override": "", "trust_score": 59.4, "trust_score_v2": 59.4, "rank_v2": 680, "rank_v2_delta": 313, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 11.6, "maintenance": 17.5, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Jeffallan Claude Skills", "repo": "Jeffallan/claude-skills", "display_repo": "", "url": "https://github.com/Jeffallan/claude-skills", "listing_class": "skill", "rank": 110, "previous_rank": 107, "rank_delta": -3, "stars": 11840, "stars_fmt": "11.8k", "forks": 1137, "forks_fmt": "1.1k", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 17, "commits_low_confidence": false, "score": 78.1, "description": "67 Specialized Skills for Full-Stack Developers. Transform Claude Code into your expert pair programmer.", "language": "Python", "open_issues": 28, "category": "Agent Skills", "category_rank": 110, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.92, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T11:16:19Z", "slug": "jeffallan-claude-skills", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: skills/atlassian-mcp/references/mcp-server-setup.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.4, "trust_score_v2": 59.4, "rank_v2": 110, "rank_v2_delta": 710, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 11.6, "maintenance": 16.4, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Excel Vision MCP", "repo": "VOYAGER-Inc/excel-vision-mcp", "display_repo": "", "url": "https://github.com/VOYAGER-Inc/excel-vision-mcp", "listing_class": "agent", "rank": 681, "previous_rank": 677, "rank_delta": -4, "stars": 20, "stars_fmt": "20", "forks": 2, "forks_fmt": "2", "last_push": "2026-07-31", "days_ago": 73, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.0, "description": "MCP server that lets AI agents SEE embedded images inside Excel files — full text + image extraction for .xlsx/.xlsm", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 370, "npm_package": "", "crate_package": "", "pypi_package": "excel-vision-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T19:21:00Z", "slug": "excel-vision-mcp", "full_fetched_at": "2026-10-12T00:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'excel-vision-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "excel-vision-mcp", "version": "1.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:36Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.4, "trust_score_v2": 59.4, "rank_v2": 681, "rank_v2_delta": 315, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 18.0, "transparency": 11.3, "maintenance": 7.1, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SWE-agent", "repo": "SWE-agent/SWE-agent", "display_repo": "", "url": "https://github.com/SWE-agent/SWE-agent", "listing_class": "agent", "rank": 682, "previous_rank": 678, "rank_delta": -4, "stars": 20533, "stars_fmt": "20.5k", "forks": 2252, "forks_fmt": "2.3k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 65.7, "description": "SWE-agent takes a GitHub issue and tries to automatically fix it, using your LM of choice. It can also be employed for offensive cybersecurity or competitive coding challenges. [NeurIPS 2024] ", "language": "Python", "open_issues": 56, "category": "Coding Agents", "category_rank": 42, "npm_package": "", "crate_package": "", "pypi_package": "sweagent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 32, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.94, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 6, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:34:14Z", "slug": "swe-agent", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://swe-agent.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'sweagent' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.3, "trust_score_v2": 59.3, "rank_v2": 682, "rank_v2_delta": 43, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.2, "maintenance": 11.6, "adoption": 12.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "9Router", "repo": "decolua/9router", "display_repo": "", "url": "https://github.com/decolua/9router", "listing_class": "skill", "rank": 111, "previous_rank": 108, "rank_delta": -3, "stars": 30672, "stars_fmt": "30.7k", "forks": 5852, "forks_fmt": "5.9k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 179, "commits_low_confidence": false, "score": 93.8, "description": "Unlimited FREE AI coding. Connect Claude Code, Codex, Cursor, Cline, Copilot, Antigravity to FREE Claude/GPT/Gemini via 40+ providers. Auto-fallback, RTK -40% tokens, never hit limits.", "language": "JavaScript", "open_issues": 1353, "category": "Agent Skills", "category_rank": 111, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-30T01:15:33Z", "slug": "9router", "full_fetched_at": "2026-10-12T12:03:02Z", "source_note": "", "github_homepage": "https://9router.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: src/app/api/v1/videos/extensions/route.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.3, "trust_score_v2": 59.3, "rank_v2": 111, "rank_v2_delta": 561, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 13.0, "maintenance": 19.7, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenCLI", "repo": "jackwener/OpenCLI", "display_repo": "", "url": "https://github.com/jackwener/OpenCLI", "listing_class": "agent", "rank": 683, "previous_rank": 696, "rank_delta": 13, "stars": 30101, "stars_fmt": "30.1k", "forks": 2936, "forks_fmt": "2.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 7, "commits_low_confidence": true, "score": 79.3, "description": "Make Any Website into CLI & Use your logged-in browser by AI agent. ", "language": "JavaScript", "open_issues": 124, "category": "Browser & Computer Use", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:20:04Z", "slug": "opencli", "full_fetched_at": "2026-10-12T04:02:47Z", "source_note": "", "github_homepage": "https://opencli.info/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.3, "trust_score_v2": 59.3, "rank_v2": 683, "rank_v2_delta": 59, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 13.8, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pyslang MCP", "repo": "ariklapid/pyslang-mcp", "display_repo": "", "url": "https://github.com/ariklapid/pyslang-mcp", "listing_class": "agent", "rank": 684, "previous_rank": 679, "rank_delta": -5, "stars": 21, "stars_fmt": "21", "forks": 4, "forks_fmt": "4", "last_push": "2026-06-14", "days_ago": 120, "weekly_commits": 0, "commits_low_confidence": false, "score": 19.7, "description": "pyslang-mcp is a read-only Model Context Protocol server for compiler-backed Verilog and SystemVerilog analysis. It uses pyslang to parse HDL projects, report diagnostics, inspect design units and hierarchy, and expose structured semantic information to AI tools.", "language": "HTML", "open_issues": 2, "category": "MCP Servers", "category_rank": 371, "npm_package": "", "crate_package": "", "pypi_package": "pyslang-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 41, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.143, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:58:44Z", "slug": "pyslang-mcp", "full_fetched_at": "2026-10-12T12:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'pyslang-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pyslang-mcp", "version": "0.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:24Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.3, "trust_score_v2": 59.3, "rank_v2": 684, "rank_v2_delta": 317, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.7, "identity": 18.0, "transparency": 12.2, "maintenance": 4.0, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PostgreSQL MCP Server", "repo": "neverinfamous/postgres-mcp", "display_repo": "", "url": "https://github.com/neverinfamous/postgres-mcp", "listing_class": "agent", "rank": 685, "previous_rank": 680, "rank_delta": -5, "stars": 12, "stars_fmt": "12", "forks": 3, "forks_fmt": "3", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 2, "commits_low_confidence": false, "score": 38.6, "description": "Secure PostgreSQL Administration & Observability with Code Mode— True V8 Isolate Sandbox Replacing 278 Specialized Tools for up to 90% Token Savings. Includes Tool Filtering, Payload Optimization, HTTP/SSE, OAuth 2.1, Audit & Token Logging, Deterministic Error Handling, Support for 12 Extensions…", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 372, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/writenotenow/postgres-mcp:latest", "vscode_extension": "", "weekly_downloads": 31958, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.85, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": -1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T20:46:17Z", "slug": "postgresql-mcp-server", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://search.adamic.tech/", "homepage_icon": "/site-icons/3ab96d3270c403e2.png", "homepage_icon_for": "https://search.adamic.tech/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/server/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'pg' in package.json", "Found Postgres credential/config marker 'POSTGRES_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: src/adapters/postgresql/schemas/extensions/citext.ts", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'pg' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.2, "trust_score_v2": 59.2, "rank_v2": 685, "rank_v2_delta": 67, "trust_v2_adjustment": 0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.5, "identity": 10.8, "transparency": 14.1, "maintenance": 13.0, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "InsForge InsForge", "repo": "InsForge/insforge-mcp", "display_repo": "", "url": "https://github.com/InsForge/insforge-mcp", "listing_class": "agent", "rank": 686, "previous_rank": 682, "rank_delta": -4, "stars": 36, "stars_fmt": "36", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 8, "commits_low_confidence": true, "score": 51.2, "description": "", "language": "TypeScript", "open_issues": 19, "category": "MCP Servers", "category_rank": 373, "npm_package": "@insforge/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 392, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.3, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T01:28:19Z", "slug": "insforge-insforge", "full_fetched_at": "2026-10-12T16:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@insforge/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@insforge/mcp", "version": "1.2.11" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:26Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.2, "trust_score_v2": 59.2, "rank_v2": 686, "rank_v2_delta": 319, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 13.2, "maintenance": 13.6, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "drawio-skill", "repo": "Agents365-ai/drawio-skill", "display_repo": "", "url": "https://github.com/Agents365-ai/drawio-skill", "listing_class": "skill", "rank": 112, "previous_rank": 109, "rank_delta": -3, "stars": 10085, "stars_fmt": "10.1k", "forks": 708, "forks_fmt": "708", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 20, "commits_low_confidence": false, "score": 78.7, "description": "Agent skill that turns natural language, code, Terraform/K8s, SQL, OpenAPI, AsyncAPI, Protobuf and GraphQL sources into editable, tested draw.io architecture diagrams: incremental sync, multi-view projection, drift diff, CI architecture tests, whiteboard derasterize, interactive HTML/PPTX/Mermaid…", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 112, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:02:53Z", "slug": "drawio-skill", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "https://agents365-ai.github.io/drawio-skill/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.2, "trust_score_v2": 59.2, "rank_v2": 112, "rank_v2_delta": 717, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 12.2, "maintenance": 17.2, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Taste Skill", "repo": "Leonxlnx/taste-skill", "display_repo": "", "url": "https://github.com/Leonxlnx/taste-skill", "listing_class": "skill", "rank": 113, "previous_rank": 124, "rank_delta": 11, "stars": 95033, "stars_fmt": "95.0k", "forks": 6465, "forks_fmt": "6.5k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 41, "commits_low_confidence": false, "score": 92.8, "description": "Taste-Skill - gives your AI good taste. stops the AI from generating boring, generic slop ", "language": "JavaScript", "open_issues": 4, "category": "Agent Skills", "category_rank": 113, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-27T17:32:14Z", "slug": "taste-skill", "full_fetched_at": "2026-10-11T20:01:48Z", "source_note": "", "github_homepage": "https://tasteskill.dev", "homepage_icon": "/site-icons/605cc5627f4b1de9.png", "homepage_icon_for": "https://tasteskill.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.2, "trust_score_v2": 59.2, "rank_v2": 113, "rank_v2_delta": 616, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 11.8, "maintenance": 18.4, "adoption": 11.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Answer Me With HTML", "repo": "QingYunA/answer-me-with-html", "display_repo": "", "url": "https://github.com/QingYunA/answer-me-with-html", "listing_class": "skill", "rank": 114, "previous_rank": 119, "rank_delta": 5, "stars": 3061, "stars_fmt": "3.1k", "forks": 209, "forks_fmt": "209", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 176, "commits_low_confidence": false, "score": 81.7, "description": "Answer me with HTML — an agent skill that answers hard questions with a one-page HTML you can actually read. 让 AI Agent 用一页 HTML 回答复杂问题。", "language": "JavaScript", "open_issues": 3, "category": "Agent Skills", "category_rank": 114, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:28:55Z", "slug": "answer-me-with-html", "full_fetched_at": "2026-10-12T12:02:37Z", "source_note": "", "github_homepage": "https://answer-me-with-html.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.2, "trust_score_v2": 59.2, "rank_v2": 114, "rank_v2_delta": 616, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 11.3, "maintenance": 20.0, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenLIT", "repo": "openlit/openlit", "display_repo": "", "url": "https://github.com/openlit/openlit", "listing_class": "agent", "rank": 687, "previous_rank": 690, "rank_delta": 3, "stars": 2844, "stars_fmt": "2.8k", "forks": 430, "forks_fmt": "430", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 21, "commits_low_confidence": false, "score": 74.7, "description": "OpenLIT is the open-source agent harness engineering platform: trace, evaluate, guard, and improve everything around the model in your AI agents, on OTEL.", "language": "TypeScript", "open_issues": 77, "category": "Observability & Evaluation", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.88, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 3, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:22:58Z", "slug": "openlit", "full_fetched_at": "2026-10-12T08:02:14Z", "source_note": "", "github_homepage": "https://docs.openlit.io", "homepage_icon": "/site-icons/a0fb571f956a2aff.png", "homepage_icon_for": "https://docs.openlit.io", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Mistral AI", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/client/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in src/client/package.json", "README/docs also mention Anthropic", "Found Mistral AI dependency 'mistralai' in src/client/package.json", "README/docs also mention Mistral AI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.0, "trust_score_v2": 59.0, "rank_v2": 687, "rank_v2_delta": -28, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.5, "identity": 10.8, "transparency": 13.3, "maintenance": 17.4, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenEvolve", "repo": "algorithmicsuperintelligence/openevolve", "display_repo": "", "url": "https://github.com/algorithmicsuperintelligence/openevolve", "listing_class": "agent", "rank": 688, "previous_rank": 691, "rank_delta": 3, "stars": 7530, "stars_fmt": "7.5k", "forks": 1183, "forks_fmt": "1.2k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 23, "commits_low_confidence": false, "score": 79.7, "description": "Open-source implementation of AlphaEvolve", "language": "Python", "open_issues": 55, "category": "Agent Frameworks", "category_rank": 64, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T10:56:03Z", "slug": "openevolve", "full_fetched_at": "2026-10-12T04:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.0, "trust_score_v2": 59.0, "rank_v2": 688, "rank_v2_delta": 1, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 13.2, "maintenance": 17.4, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tld", "repo": "Mertcikla/tld", "display_repo": "", "url": "https://github.com/Mertcikla/tld", "listing_class": "skill", "rank": 115, "previous_rank": 114, "rank_delta": -1, "stars": 290, "stars_fmt": "290", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 194, "commits_low_confidence": false, "score": 70.9, "description": "Software architecture diagramming tool. Includes a modern easy to use Frontend + Backend + CLI to enable managing diagrams from the shell or in CI.", "language": "Go", "open_issues": 2, "category": "Agent Skills", "category_rank": 115, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:16:56Z", "slug": "tld", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "https://tldiagram.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 59.0, "trust_score_v2": 59.0, "rank_v2": 115, "rank_v2_delta": 545, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.5, "identity": 10.8, "transparency": 13.1, "maintenance": 20.0, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sub Agents MCP", "repo": "shinpr/sub-agents-mcp", "display_repo": "", "url": "https://github.com/shinpr/sub-agents-mcp", "listing_class": "agent", "rank": 689, "previous_rank": 683, "rank_delta": -6, "stars": 98, "stars_fmt": "98", "forks": 16, "forks_fmt": "16", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 46.9, "description": "Define task-specific AI sub-agents in Markdown for any MCP-compatible tool.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 374, "npm_package": "sub-agents-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 229, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.65, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-11T03:47:40Z", "slug": "sub-agents-mcp", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CLI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'sub-agents-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "sub-agents-mcp", "version": "0.14.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:10Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.0, "trust_score_v2": 59.0, "rank_v2": 689, "rank_v2_delta": 281, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 12.8, "maintenance": 13.0, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Humanizer", "repo": "blader/humanizer", "display_repo": "", "url": "https://github.com/blader/humanizer", "listing_class": "skill", "rank": 116, "previous_rank": 113, "rank_delta": -3, "stars": 56091, "stars_fmt": "56.1k", "forks": 4434, "forks_fmt": "4.4k", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 20, "commits_low_confidence": false, "score": 85.1, "description": "Agent skill that removes signs of AI-generated writing from text", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 116, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.392, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:06:55Z", "slug": "humanizer", "full_fetched_at": "2026-10-12T12:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.0, "trust_score_v2": 59.0, "rank_v2": 116, "rank_v2_delta": 624, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 12.7, "maintenance": 16.3, "adoption": 11.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude BugHunter", "repo": "elementalsouls/Claude-BugHunter", "display_repo": "", "url": "https://github.com/elementalsouls/Claude-BugHunter", "listing_class": "skill", "rank": 117, "previous_rank": 115, "rank_delta": -2, "stars": 5025, "stars_fmt": "5.0k", "forks": 764, "forks_fmt": "764", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 33, "commits_low_confidence": false, "score": 79.7, "description": "A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructure attack matrices.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 117, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T12:04:21Z", "slug": "claude-bughunter", "full_fetched_at": "2026-10-12T16:01:49Z", "source_note": "", "github_homepage": "https://elementalsouls.github.io/Claude-BugHunter", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 59.0, "trust_score_v2": 59.0, "rank_v2": 117, "rank_v2_delta": 718, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 12.4, "maintenance": 18.1, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tech Leads Club Agent Skills", "repo": "tech-leads-club/agent-skills", "display_repo": "", "url": "https://github.com/tech-leads-club/agent-skills", "listing_class": "skill", "rank": 118, "previous_rank": 112, "rank_delta": -6, "stars": 7051, "stars_fmt": "7.1k", "forks": 560, "forks_fmt": "560", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 9, "commits_low_confidence": false, "score": 73.0, "description": "The secure, validated skill registry for professional AI coding agents. Extend Antigravity, Claude Code, Cursor, Copilot and more with absolute confidence.", "language": "TypeScript", "open_issues": 29, "category": "Agent Skills", "category_rank": 118, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:11:20Z", "slug": "tech-leads-club-agent-skills", "full_fetched_at": "2026-10-12T00:02:24Z", "source_note": "", "github_homepage": "https://agent-skills.techleads.club", "homepage_icon": "/site-icons/c36bb14b49422f61.png", "homepage_icon_for": "https://agent-skills.techleads.club", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mcp/mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json", "Found MCP dependency 'modelcontextprotocol' in packages/mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (packages/mcp/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 58.9, "trust_score_v2": 58.9, "rank_v2": 118, "rank_v2_delta": 722, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 13.6, "maintenance": 15.8, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ChromaDB Remote MCP Server", "repo": "meloncafe/chromadb-remote-mcp", "display_repo": "", "url": "https://github.com/meloncafe/chromadb-remote-mcp", "listing_class": "agent", "rank": 690, "previous_rank": 694, "rank_delta": 4, "stars": 12, "stars_fmt": "12", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 38, "commits_low_confidence": false, "score": 55.1, "description": "Remote MCP server for ChromaDB", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 375, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "devsaurus/chromadb-remote-mcp:latest", "vscode_extension": "", "weekly_downloads": 7141, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:54:55Z", "slug": "chromadb-remote-mcp-server", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.9, "trust_score_v2": 58.9, "rank_v2": 690, "rank_v2_delta": 120, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 13.1, "maintenance": 18.4, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Token Optimizer", "repo": "alexgreensh/token-optimizer", "display_repo": "", "url": "https://github.com/alexgreensh/token-optimizer", "listing_class": "skill", "rank": 119, "previous_rank": 117, "rank_delta": -2, "stars": 2542, "stars_fmt": "2.5k", "forks": 199, "forks_fmt": "199", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 422, "commits_low_confidence": false, "score": 81.1, "description": "Find the ghost tokens. Fix them. Survive compaction. Avoid context quality decay. ", "language": "Python", "open_issues": 3, "category": "Agent Skills", "category_rank": 119, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-06T11:45:29Z", "slug": "token-optimizer", "full_fetched_at": "2026-10-12T08:02:38Z", "source_note": "", "github_homepage": "https://token-optimizer.dev", "homepage_icon": "/site-icons/dcffb26c824c802a.png", "homepage_icon_for": "https://token-optimizer.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 58.9, "trust_score_v2": 58.9, "rank_v2": 119, "rank_v2_delta": 719, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.3, "maintenance": 19.9, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Obsidian Local REST API", "repo": "coddingtonbear/obsidian-local-rest-api", "display_repo": "", "url": "https://github.com/coddingtonbear/obsidian-local-rest-api", "listing_class": "agent", "rank": 691, "previous_rank": 685, "rank_delta": -6, "stars": 3020, "stars_fmt": "3.0k", "forks": 355, "forks_fmt": "355", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 26, "commits_low_confidence": false, "score": 75.7, "description": "A secure REST API and Model Context Protocol (MCP) server for your vault.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 376, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-07T09:54:15Z", "slug": "obsidian-local-rest-api", "full_fetched_at": "2026-10-12T12:02:51Z", "source_note": "", "github_homepage": "https://coddingtonbear.github.io/obsidian-local-rest-api/", "homepage_icon": "/site-icons/43a2d329761380a7.png", "homepage_icon_for": "https://coddingtonbear.github.io/obsidian-local-rest-api/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.9, "trust_score_v2": 58.9, "rank_v2": 691, "rank_v2_delta": 164, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 12.2, "maintenance": 17.6, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Search MCP", "repo": "lennney/agent-search-mcp", "display_repo": "", "url": "https://github.com/lennney/agent-search-mcp", "listing_class": "agent", "rank": 692, "previous_rank": 686, "rank_delta": -6, "stars": 111, "stars_fmt": "111", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-21", "days_ago": 21, "weekly_commits": 7, "commits_low_confidence": false, "score": 50.7, "description": "Free-first Chinese and English web search MCP using zero-key sources and inspectable evidence.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 377, "npm_package": "agent-search-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 152, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:44:40Z", "slug": "agent-search-mcp", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "https://take-a-deep-breath0.com/en/agent-search-mcp", "homepage_icon": "/site-icons/78e758e9f969e7d8.png", "homepage_icon_for": "https://take-a-deep-breath0.com/en/agent-search-mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency 'modelcontextprotocol' in experiments/mcp-2026/package.json" ] }, "external_service_dependencies": { "providers": [ "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'agent-search-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "agent-search-mcp", "version": "3.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:52Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.8, "trust_score_v2": 58.8, "rank_v2": 692, "rank_v2_delta": 285, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 13.2, "maintenance": 14.2, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Teamwork MCP", "repo": "Teamwork/mcp", "display_repo": "", "url": "https://github.com/Teamwork/mcp", "listing_class": "agent", "rank": 693, "previous_rank": 693, "rank_delta": 0, "stars": 26, "stars_fmt": "26", "forks": 19, "forks_fmt": "19", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 57, "commits_low_confidence": false, "score": 61.6, "description": "Teamwork.com MCP server", "language": "Go", "open_issues": 1, "category": "MCP Servers", "category_rank": 378, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/teamwork/mcp:v1.26.5", "vscode_extension": "", "weekly_downloads": 33033, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-10T08:18:18Z", "slug": "teamwork-mcp", "full_fetched_at": "2026-10-12T00:02:24Z", "source_note": "", "github_homepage": "https://mcp.ai.teamwork.com", "homepage_icon": "/site-icons/0face16191795e10.png", "homepage_icon_for": "https://mcp.ai.teamwork.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in examples/nodejs-langchain/package.json", "Found Anthropic dependency 'anthropic' in examples/nodejs-langchain/package.json", "Found Google Gemini dependency 'google-genai' in examples/nodejs-langchain/package.json", "Found credential/config marker 'TW_MCP_BEARER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.8, "trust_score_v2": 58.8, "rank_v2": 693, "rank_v2_delta": 72, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 12.8, "maintenance": 19.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wavyrai reMarkable MCP Server", "repo": "wavyrai/rm-mcp", "display_repo": "", "url": "https://github.com/wavyrai/rm-mcp", "listing_class": "agent", "rank": 694, "previous_rank": 687, "rank_delta": -7, "stars": 21, "stars_fmt": "21", "forks": 7, "forks_fmt": "7", "last_push": "2026-08-24", "days_ago": 49, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.6, "description": "MCP server for accessing reMarkable tablet data", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 379, "npm_package": "", "crate_package": "", "pypi_package": "rm-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 49, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-23T07:16:49Z", "slug": "wavyrai-remarkable-mcp-server", "full_fetched_at": "2026-10-12T00:02:39Z", "source_note": "", "github_homepage": "https://www.thijsverreck.com/w/remarkable-mcp", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'REMARKABLE_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'rm-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "rm-mcp", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:39Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.8, "trust_score_v2": 58.8, "rank_v2": 694, "rank_v2_delta": 122, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 18.0, "transparency": 12.4, "maintenance": 8.7, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Drawio MCP", "repo": "jgraph/drawio-mcp", "display_repo": "", "url": "https://github.com/jgraph/drawio-mcp", "listing_class": "agent", "rank": 695, "previous_rank": 700, "rank_delta": 5, "stars": 5618, "stars_fmt": "5.6k", "forks": 347, "forks_fmt": "347", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 66, "commits_low_confidence": false, "score": 82.1, "description": "", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 380, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:33:37Z", "slug": "drawio-mcp", "full_fetched_at": "2026-10-12T16:02:30Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in mcp-app-server/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in mcp-tool-server/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude-code/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.8, "trust_score_v2": 58.8, "rank_v2": 695, "rank_v2_delta": 149, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.2, "maintenance": 19.3, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Lagent", "repo": "InternLM/lagent", "display_repo": "", "url": "https://github.com/InternLM/lagent", "listing_class": "agent", "rank": 696, "previous_rank": 689, "rank_delta": -7, "stars": 2282, "stars_fmt": "2.3k", "forks": 246, "forks_fmt": "246", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 0, "commits_low_confidence": true, "score": 55.9, "description": "A lightweight framework for building LLM-based agents", "language": "Python", "open_issues": 11, "category": "Agent Frameworks", "category_rank": 65, "npm_package": "", "crate_package": "", "pypi_package": "lagent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 396, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-06-27T09:16:37Z", "slug": "lagent", "full_fetched_at": "2026-10-12T04:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'lagent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "lagent", "version": "0.2.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:47Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.8, "trust_score_v2": 58.8, "rank_v2": 696, "rank_v2_delta": 200, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 11.8, "maintenance": 11.8, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "UniFi Gateway", "repo": "pete-builds/mcp-unifi", "display_repo": "", "url": "https://github.com/pete-builds/mcp-unifi", "listing_class": "agent", "rank": 697, "previous_rank": 697, "rank_delta": 0, "stars": 24, "stars_fmt": "24", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 43, "commits_low_confidence": false, "score": 57.5, "description": "Safety-first MCP server for self-hosted UniFi. 57 Network + 11 Protect + 18 Access tools, dry-run previews, JSONL audit log, composite rollback. Multi-site. Stdio + Streamable HTTP.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 381, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/pete-builds/mcp-unifi:0.16.1", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-09-23T18:18:32Z", "slug": "unifi-gateway", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://pete-builds.github.io/mcp-unifi/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'UNIFI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.7, "trust_score_v2": 58.7, "rank_v2": 697, "rank_v2_delta": 125, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.3, "maintenance": 18.6, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Elixir Phoenix", "repo": "oliver-kriska/claude-elixir-phoenix", "display_repo": "", "url": "https://github.com/oliver-kriska/claude-elixir-phoenix", "listing_class": "skill", "rank": 120, "previous_rank": 116, "rank_delta": -4, "stars": 565, "stars_fmt": "565", "forks": 45, "forks_fmt": "45", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 19, "commits_low_confidence": false, "score": 64.6, "description": "Claude Code plugin for Elixir/Phoenix/LiveView — 26 specialist agents, Iron Laws enforcement, and Tidewave MCP integration. Plan features with parallel research agents, execute with automatic verification, review with 4-agent parallel audits, and capture learnings as reusable knowledge.", "language": "Python", "open_issues": 12, "category": "Agent Skills", "category_rank": 120, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.89, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-07T09:55:51Z", "slug": "claude-elixir-phoenix", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://phxagents.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/catchup/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.7, "trust_score_v2": 58.7, "rank_v2": 120, "rank_v2_delta": 635, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.3, "maintenance": 16.7, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Rasa", "repo": "RasaHQ/rasa", "display_repo": "", "url": "https://github.com/RasaHQ/rasa", "listing_class": "agent", "rank": 698, "previous_rank": 684, "rank_delta": -14, "stars": 21347, "stars_fmt": "21.3k", "forks": 4916, "forks_fmt": "4.9k", "last_push": "2026-07-24", "days_ago": 80, "weekly_commits": 0, "commits_low_confidence": false, "score": 57.1, "description": "💬 Open source machine learning framework to automate text- and voice-based conversations: NLU, dialogue management, connect to Slack, Facebook, and more - Create chatbots and voice assistants", "language": "Python", "open_issues": 10, "category": "Voice & Conversational", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "rasa", "docker_image": "", "vscode_extension": "", "weekly_downloads": 60681, "dl_source": "pypi", "hn_mentions_30d": 285, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.59, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:55:48Z", "slug": "rasa", "full_fetched_at": "2026-10-12T08:02:26Z", "source_note": "", "github_homepage": "https://rasa.com/docs/rasa/", "homepage_icon": "/site-icons/3a975657d70ea13c.png", "homepage_icon_for": "https://rasa.com/docs/rasa/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml", "Found Redis dependency 'redis' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database", "filesystem" ], "confidence": "high", "evidence": [ "Found declared path: docs/plugins/google-tagmanager/client.js", "Found filesystem dependency 'fs-extra' in docs/package.json", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'rasa' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "rasa", "version": "3.6.21" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:26Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.7, "trust_score_v2": 58.7, "rank_v2": 698, "rank_v2_delta": 177, "trust_v2_adjustment": 2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.4, "identity": 10.8, "transparency": 12.9, "maintenance": 6.7, "adoption": 16.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ClawRouter", "repo": "BlockRunAI/ClawRouter", "display_repo": "", "url": "https://github.com/BlockRunAI/ClawRouter", "listing_class": "agent", "rank": 699, "previous_rank": 738, "rank_delta": 39, "stars": 6623, "stars_fmt": "6.6k", "forks": 652, "forks_fmt": "652", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 59, "commits_low_confidence": false, "score": 83.2, "description": "The agent-native LLM router for autonomous agents. Every frontier model behind one wallet, <1ms local routing, USDC payments on Base & Solana via x402.", "language": "TypeScript", "open_issues": 0, "category": "LLM Gateways & Infra", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.3, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T13:37:46Z", "slug": "clawrouter", "full_fetched_at": "2026-10-12T12:02:45Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in apps/desktop/runtime/package.json", "README/docs also mention DeepSeek", "Found credential/config marker 'BLOCKRUN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.7, "trust_score_v2": 58.7, "rank_v2": 699, "rank_v2_delta": 22, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 12.8, "maintenance": 19.1, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PrivateGPT", "repo": "zylon-ai/private-gpt", "display_repo": "", "url": "https://github.com/zylon-ai/private-gpt", "listing_class": "agent", "rank": 700, "previous_rank": 692, "rank_delta": -8, "stars": 57569, "stars_fmt": "57.6k", "forks": 7619, "forks_fmt": "7.6k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 15, "commits_low_confidence": false, "score": 86.3, "description": "Complete API layer for private AI applications on local models: RAG, skills, tools, MCP, text-to-sql, and more. Works with any OpenAI-compatible inference server.", "language": "Python", "open_issues": 2, "category": "Memory & Knowledge", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T22:49:37Z", "slug": "privategpt", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://www.zylon.ai/private-gpt", "homepage_icon": "/site-icons/57183433c0e60d26.png", "homepage_icon_for": "https://www.zylon.ai/private-gpt", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Qdrant dependency 'qdrant' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found extension-based path: private_gpt/chat/extensions/__init__.py", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.7, "trust_score_v2": 58.7, "rank_v2": 700, "rank_v2_delta": -84, "trust_v2_adjustment": -3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 12.6, "maintenance": 16.6, "adoption": 11.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Aegis", "repo": "GanyuanRan/Aegis", "display_repo": "", "url": "https://github.com/GanyuanRan/Aegis", "listing_class": "skill", "rank": 121, "previous_rank": 120, "rank_delta": -1, "stars": 1343, "stars_fmt": "1.3k", "forks": 72, "forks_fmt": "72", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 81, "commits_low_confidence": false, "score": 76.4, "description": "Make AI coding agents architecture-aware: baseline-first, evidence-verified, drift-checked, and safe across long tasks.", "language": "Python", "open_issues": 10, "category": "Agent Skills", "category_rank": 121, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 48, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.31, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:03:51Z", "slug": "aegis", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "https://autoloom.codes/aegis/", "homepage_icon": "/site-icons/ad272d5cc4c3c020.png", "homepage_icon_for": "https://autoloom.codes/aegis/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in package.json", "README/docs also mention DeepSeek", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.7, "trust_score_v2": 58.7, "rank_v2": 121, "rank_v2_delta": 612, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 12.2, "maintenance": 19.6, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Zero", "repo": "agent0ai/agent-zero", "display_repo": "", "url": "https://github.com/agent0ai/agent-zero", "listing_class": "agent", "rank": 701, "previous_rank": 688, "rank_delta": -13, "stars": 19430, "stars_fmt": "19.4k", "forks": 3825, "forks_fmt": "3.8k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 93, "commits_low_confidence": false, "score": 92.0, "description": "Agent Zero AI framework", "language": "Python", "open_issues": 58, "category": "Agent Frameworks", "category_rank": 66, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T18:43:36Z", "slug": "agent-zero", "full_fetched_at": "2026-10-12T04:02:02Z", "source_note": "", "github_homepage": "https://agent-zero.ai", "homepage_icon": "/site-icons/dbf5fb541481b7dd.png", "homepage_icon_for": "https://agent-zero.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: api/mcp_server_get_detail.py", "Found MCP-related server path: api/mcp_server_get_detail.py.dox.md", "Found MCP-related server test path: tests/test_fastmcp_openapi_security.py", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in requirements.txt", "Found Amazon Bedrock dependency 'boto3' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found extension-based path: agents/_example/extensions/agent_init/_10_example_extension.py", "README/docs also mention a extension-based plugin/integration surface", "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 58.7, "trust_score_v2": 58.7, "rank_v2": 701, "rank_v2_delta": 69, "trust_v2_adjustment": 0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 12.2, "maintenance": 19.8, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SenseNova Skills", "repo": "OpenSenseNova/SenseNova-Skills", "display_repo": "", "url": "https://github.com/OpenSenseNova/SenseNova-Skills", "listing_class": "skill", "rank": 122, "previous_rank": 118, "rank_delta": -4, "stars": 5756, "stars_fmt": "5.8k", "forks": 402, "forks_fmt": "402", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 5, "commits_low_confidence": true, "score": 69.0, "description": "Modular SenseNova skills for building AI-powered office assistants and productivity workflows", "language": "JavaScript", "open_issues": 15, "category": "Agent Skills", "category_rank": 122, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T19:24:11Z", "slug": "sensenova-skills", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.6, "trust_score_v2": 58.6, "rank_v2": 122, "rank_v2_delta": 654, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 13.3, "maintenance": 13.4, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DeepCode", "repo": "HKUDS/DeepCode", "display_repo": "", "url": "https://github.com/HKUDS/DeepCode", "listing_class": "agent", "rank": 702, "previous_rank": 695, "rank_delta": -7, "stars": 16698, "stars_fmt": "16.7k", "forks": 2171, "forks_fmt": "2.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 91, "commits_low_confidence": false, "score": 90.3, "description": "\"DeepCode: Open Agentic Coding (Agent Harness & Loop Engineering & Multi-Agent Orchestration)\"", "language": "Python", "open_issues": 11, "category": "Coding Agents", "category_rank": 43, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:56:26Z", "slug": "deepcode", "full_fetched_at": "2026-10-12T04:02:42Z", "source_note": "", "github_homepage": "http://arxiv.org/abs/2512.07921", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "http://arxiv.org/abs/2512.07921", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: cli/mcp_server.py", "Found MCP-related server path: core/skills/builtin/mcp-builder/reference/node_mcp_server.md", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in requirements.txt", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: core/plugins/__init__.py", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.5, "trust_score_v2": 58.5, "rank_v2": 702, "rank_v2_delta": 15, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 12.7, "maintenance": 19.8, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cc Skills Golang", "repo": "samber/cc-skills-golang", "display_repo": "", "url": "https://github.com/samber/cc-skills-golang", "listing_class": "skill", "rank": 123, "previous_rank": 121, "rank_delta": -2, "stars": 3457, "stars_fmt": "3.5k", "forks": 228, "forks_fmt": "228", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 1, "commits_low_confidence": false, "score": 59.5, "description": "🧑‍🎨 A collection of Golang agentic skills that works", "language": "Go", "open_issues": 5, "category": "Agent Skills", "category_rank": 123, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:15:06Z", "slug": "cc-skills-golang", "full_fetched_at": "2026-10-12T00:01:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.4, "trust_score_v2": 58.4, "rank_v2": 123, "rank_v2_delta": 719, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 13.3, "maintenance": 12.5, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Chorus", "repo": "Chorus-AIDLC/Chorus", "display_repo": "", "url": "https://github.com/Chorus-AIDLC/Chorus", "listing_class": "agent", "rank": 703, "previous_rank": 703, "rank_delta": 0, "stars": 1195, "stars_fmt": "1.2k", "forks": 111, "forks_fmt": "111", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 60, "commits_low_confidence": false, "score": 75.3, "description": "The Agent Harness for AI-Human Collaboration, inspired by the AI-DLC (AI-Driven Development Lifecycle)", "language": "TypeScript", "open_issues": 9, "category": "Agent Frameworks", "category_rank": 67, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.53, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:16:12Z", "slug": "chorus", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "https://chorus-ai.dev/", "homepage_icon": "/site-icons/6b66fe71dac1a1b8.png", "homepage_icon_for": "https://chorus-ai.dev/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/chorus-hermes/chorus-mcp/mcp.json", "Found MCP-related server path: public/kiro-plugin/.kiro/settings/mcp.json", "Found MCP-related server test path: packages/chorus-pi/test/fixtures/native-mcp-server.mjs", "Found MCP-related server test path: src/mcp/__tests__/server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'pg' in package.json", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (public/chorus-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'pg' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 58.4, "trust_score_v2": 58.4, "rank_v2": 703, "rank_v2_delta": 78, "trust_v2_adjustment": -0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 12.6, "maintenance": 19.1, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Zenml", "repo": "zenml-io/mcp-zenml", "display_repo": "", "url": "https://github.com/zenml-io/mcp-zenml", "listing_class": "agent", "rank": 704, "previous_rank": 699, "rank_delta": -5, "stars": 49, "stars_fmt": "49", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 19, "commits_low_confidence": false, "score": 56.1, "description": "MCP server to connect an MCP client (Cursor, Claude Desktop etc) with your ZenML MLOps and LLMOps pipelines", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 382, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/zenmldocker/mcp-zenml:1.5.1", "vscode_extension": "", "weekly_downloads": 10567, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.46, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:11:20Z", "slug": "mcp-zenml", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "https://www.zenml.io", "homepage_icon": "/site-icons/39754f9e2fe7a676.png", "homepage_icon_for": "https://www.zenml.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: scripts/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ZENML_STORE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.4, "trust_score_v2": 58.4, "rank_v2": 704, "rank_v2_delta": 119, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.5, "maintenance": 16.8, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ongrid", "repo": "ongridio/ongrid", "display_repo": "", "url": "https://github.com/ongridio/ongrid", "listing_class": "agent", "rank": 705, "previous_rank": 716, "rank_delta": 11, "stars": 1146, "stars_fmt": "1.1k", "forks": 250, "forks_fmt": "250", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 46, "commits_low_confidence": false, "score": 75.5, "description": "An ops AI Agent that understands your infrastructure, finds the root cause, and fixes it — right from Slack, Telegram, Lark or DingTalk.", "language": "Go", "open_issues": 63, "category": "Workflow Platforms", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.75, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:05:04Z", "slug": "ongrid", "full_fetched_at": "2026-10-12T00:02:06Z", "source_note": "", "github_homepage": "https://ongrid.cloud", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: docs/assets/readme-tour/user-20260707-mcp-servers.png" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (internal/manager/biz/aiops/chatruntime/testdata/plugin_container/claude_pack/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: internal/edgeagent/plugins/autoapm/discovery.go", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 58.4, "trust_score_v2": 58.4, "rank_v2": 705, "rank_v2_delta": 62, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 12.4, "maintenance": 18.7, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "wcgw", "repo": "rusiaaman/wcgw", "display_repo": "", "url": "https://github.com/rusiaaman/wcgw", "listing_class": "agent", "rank": 706, "previous_rank": 702, "rank_delta": -4, "stars": 678, "stars_fmt": "678", "forks": 66, "forks_fmt": "66", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 3, "commits_low_confidence": false, "score": 54.0, "description": "Shell and coding agent on mcp clients", "language": "Python", "open_issues": 3, "category": "Protocols & Tool Integration", "category_rank": 41, "npm_package": "", "crate_package": "", "pypi_package": "wcgw", "docker_image": "", "vscode_extension": "", "weekly_downloads": 906, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.28, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:29:46Z", "slug": "wcgw", "full_fetched_at": "2026-10-12T00:02:01Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/wcgw/client/mcp_server/Readme.md", "Found MCP-related server path: src/wcgw/client/mcp_server/__init__.py", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'wcgw' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "wcgw", "version": "5.6.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:01Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.4, "trust_score_v2": 58.4, "rank_v2": 706, "rank_v2_delta": 315, "trust_v2_adjustment": 5.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 12.2, "maintenance": 12.4, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "RPG Maker MV Ultimate MCP", "repo": "DiegoLopez0208/RpgMakerMVUltimate-MCP", "display_repo": "", "url": "https://github.com/DiegoLopez0208/RpgMakerMVUltimate-MCP", "listing_class": "agent", "rank": 707, "previous_rank": 720, "rank_delta": 13, "stars": 26, "stars_fmt": "26", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 25, "commits_low_confidence": false, "score": 53.8, "description": "RPG Maker MV Ultimate — AI copilot (MCP): generate maps, edit the database & events, and understand your project (validate references, explain why an event never fires, critique maps).", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 383, "npm_package": "rpgmaker-mv-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 649, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:08:44Z", "slug": "rpg-maker-mv-ultimate-mcp", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VISION_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'rpgmaker-mv-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "rpgmaker-mv-mcp", "version": "5.20.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:03Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.4, "trust_score_v2": 58.4, "rank_v2": 707, "rank_v2_delta": 274, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 12.0, "maintenance": 17.3, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Google Health MCP", "repo": "davidmosiah/google-health-mcp", "display_repo": "", "url": "https://github.com/davidmosiah/google-health-mcp", "listing_class": "agent", "rank": 708, "previous_rank": 701, "rank_delta": -7, "stars": 66, "stars_fmt": "66", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 2, "commits_low_confidence": true, "score": 46.2, "description": "Local-first MCP server for Google Health API v4 (Fitbit + Pixel Watch) — Claude/Cursor/Hermes", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 384, "npm_package": "google-health-mcp-unofficial", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 396, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:52:14Z", "slug": "google-health-mcp", "full_fetched_at": "2026-10-12T12:03:02Z", "source_note": "", "github_homepage": "https://wellness.delx.ai/connectors/google-health", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'google-health-mcp-unofficial' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "google-health-mcp-unofficial", "version": "0.7.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.3, "trust_score_v2": 58.3, "rank_v2": 708, "rank_v2_delta": 336, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 13.4, "maintenance": 12.7, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Franklin", "repo": "BlockRunAI/Franklin", "display_repo": "", "url": "https://github.com/BlockRunAI/Franklin", "listing_class": "agent", "rank": 709, "previous_rank": 709, "rank_delta": 0, "stars": 554, "stars_fmt": "554", "forks": 54, "forks_fmt": "54", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 71, "commits_low_confidence": false, "score": 72.8, "description": "The AI agent with a wallet — spends USDC autonomously to get real work done. Apache-2.0, TypeScript.", "language": "TypeScript", "open_issues": 1, "category": "Agent Frameworks", "category_rank": 68, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.41, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:39:17Z", "slug": "franklin", "full_fetched_at": "2026-10-12T12:02:45Z", "source_note": "", "github_homepage": "https://franklin.run", "homepage_icon": "/site-icons/c102db6ea7cee3db.png", "homepage_icon_for": "https://franklin.run", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BLOCKRUN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: src/plugins/registry.ts", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.3, "trust_score_v2": 58.3, "rank_v2": 709, "rank_v2_delta": 100, "trust_v2_adjustment": 0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 12.8, "maintenance": 19.3, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sepia", "repo": "Nanako0129/sepia", "display_repo": "", "url": "https://github.com/Nanako0129/sepia", "listing_class": "skill", "rank": 124, "previous_rank": 122, "rank_delta": -2, "stars": 3134, "stars_fmt": "3.1k", "forks": 196, "forks_fmt": "196", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 164, "commits_low_confidence": false, "score": 81.3, "description": "De-AI writing skill for any Agent Skills-compatible agent (77+ via the Skills CLI), with native plugins for Claude Code, Codex, Grok Build, and Antigravity. Narrative-architecture repair for fiction, venue-matched rules for professional prose. Based on StoryScope (arXiv:2604.03136).", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 124, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:26:56Z", "slug": "sepia", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.3, "trust_score_v2": 58.3, "rank_v2": 124, "rank_v2_delta": 648, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 12.5, "maintenance": 19.8, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Console Automation", "repo": "ooples/mcp-console-automation", "display_repo": "", "url": "https://github.com/ooples/mcp-console-automation", "listing_class": "agent", "rank": 710, "previous_rank": 704, "rank_delta": -6, "stars": 51, "stars_fmt": "51", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 2, "commits_low_confidence": true, "score": 46.2, "description": "MCP server for AI-driven console application automation and monitoring", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 385, "npm_package": "mcp-console-automation", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 34, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:07:39Z", "slug": "mcp-console-automation", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-console-automation' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-console-automation", "version": "1.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:07Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.3, "trust_score_v2": 58.3, "rank_v2": 710, "rank_v2_delta": 335, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.3, "maintenance": 12.6, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Builderio Skills", "repo": "BuilderIO/skills", "display_repo": "", "url": "https://github.com/BuilderIO/skills", "listing_class": "skill", "rank": 125, "previous_rank": 123, "rank_delta": -2, "stars": 4561, "stars_fmt": "4.6k", "forks": 231, "forks_fmt": "231", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 37, "commits_low_confidence": false, "score": 77.3, "description": "Skills for agents", "language": "JavaScript", "open_issues": 3, "category": "Agent Skills", "category_rank": 125, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.6, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:01:26Z", "slug": "builderio-skills", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "https://www.agent-native.com/", "homepage_icon": "/site-icons/645fda6405b70334.png", "homepage_icon_for": "https://www.agent-native.com/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.3, "trust_score_v2": 58.3, "rank_v2": 125, "rank_v2_delta": 649, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 12.3, "maintenance": 18.1, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MonkeyCode", "repo": "chaitin/MonkeyCode", "display_repo": "", "url": "https://github.com/chaitin/MonkeyCode", "listing_class": "agent", "rank": 711, "previous_rank": 712, "rank_delta": 1, "stars": 4820, "stars_fmt": "4.8k", "forks": 739, "forks_fmt": "739", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 89, "commits_low_confidence": false, "score": 84.8, "description": "AI coding platform for teams", "language": "TypeScript", "open_issues": 363, "category": "Coding Agents", "category_rank": 44, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.6, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:37:35Z", "slug": "monkeycode", "full_fetched_at": "2026-10-12T12:02:49Z", "source_note": "", "github_homepage": "https://monkeycode-ai.net/", "homepage_icon": "/site-icons/8e9d8073fc796c29.png", "homepage_icon_for": "https://monkeycode-ai.net/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: frontend/src/components/console/settings/add-mcp-server-dialog.tsx", "Found MCP-related server path: frontend/src/components/manager/team-mcp-server-dialog.tsx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: backend/biz/plugin/handler/v1/plugin.go" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 58.3, "trust_score_v2": 58.3, "rank_v2": 711, "rank_v2_delta": 60, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 11.6, "maintenance": 19.8, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Atlassian Rovo MCP Server", "repo": "atlassian/atlassian-mcp-server", "display_repo": "", "url": "https://github.com/atlassian/atlassian-mcp-server", "listing_class": "agent", "rank": 712, "previous_rank": 706, "rank_delta": -6, "stars": 1089, "stars_fmt": "1.1k", "forks": 140, "forks_fmt": "140", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 4, "commits_low_confidence": true, "score": 61.8, "description": "Official remote MCP server for Atlassian. Securely connect Jira, Confluence, Jira Service Management, Bitbucket, and Compass to Claude, ChatGPT, Cursor, VS Code, and other AI tools using OAuth 2.1 or API tokens.", "language": "JavaScript", "open_issues": 83, "category": "MCP Servers", "category_rank": 386, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 7.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T17:24:55Z", "slug": "atlassian-rovo-mcp-server", "full_fetched_at": "2026-10-12T12:02:29Z", "source_note": "", "github_homepage": "https://atlassian.com/platform/rovo-mcp", "homepage_icon": "/site-icons/b02aa6829e51c920.png", "homepage_icon_for": "https://atlassian.com/platform/rovo-mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.2, "trust_score_v2": 58.2, "rank_v2": 712, "rank_v2_delta": 139, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 14.6, "maintenance": 13.3, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Styleseed", "repo": "bitjaru/styleseed", "display_repo": "", "url": "https://github.com/bitjaru/styleseed", "listing_class": "skill", "rank": 126, "previous_rank": 125, "rank_delta": -1, "stars": 977, "stars_fmt": "977", "forks": 89, "forks_fmt": "89", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 28, "commits_low_confidence": false, "score": 70.2, "description": "Open-source design-method engine for Claude Code, Codex & Cursor. 23 agent skills for fixed design judgment, multiple grammars, semantic palettes, reference compilation, and evidence-verified UI. MIT.", "language": "JavaScript", "open_issues": 8, "category": "Agent Skills", "category_rank": 126, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.42, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-12T00:26:15Z", "slug": "styleseed", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "https://styleseed-demo.vercel.app", "homepage_icon": "/site-icons/7bc41969bc73c85b.png", "homepage_icon_for": "https://styleseed-demo.vercel.app", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: extensions/learning/mcp/styleseed-learning-server.mjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.2, "trust_score_v2": 58.2, "rank_v2": 126, "rank_v2_delta": 657, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 13.4, "maintenance": 17.8, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Computer Use", "repo": "domdomegg/computer-use-mcp", "display_repo": "", "url": "https://github.com/domdomegg/computer-use-mcp", "listing_class": "agent", "rank": 713, "previous_rank": 705, "rank_delta": -8, "stars": 384, "stars_fmt": "384", "forks": 53, "forks_fmt": "53", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.2, "description": "💻 Give AI models complete control of your computer (probably a bad idea)", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 387, "npm_package": "computer-use-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 379, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.85, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:06:53Z", "slug": "computer-use", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'computer-use-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "computer-use-mcp", "version": "1.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.2, "trust_score_v2": 58.2, "rank_v2": 713, "rank_v2_delta": 339, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 12.2, "maintenance": 9.8, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Hive", "repo": "aden-hive/hive", "display_repo": "", "url": "https://github.com/aden-hive/hive", "listing_class": "agent", "rank": 714, "previous_rank": 829, "rank_delta": 115, "stars": 11098, "stars_fmt": "11.1k", "forks": 5647, "forks_fmt": "5.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 50, "commits_low_confidence": false, "score": 88.0, "description": "Multi-Agent Harness for Production AI", "language": "Python", "open_issues": 930, "category": "Multi-Agent Systems", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T12:44:15Z", "slug": "hive", "full_fetched_at": "2026-10-12T00:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: core/examples/mcp_servers.json", "Found MCP-related server path: core/framework/agents/queen/mcp_servers.json", "Found MCP-related server test path: core/tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in core/pyproject.toml", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in core/pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)", "Found Postgres dependency 'psycopg' in tools/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in tools/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.2, "trust_score_v2": 58.2, "rank_v2": 714, "rank_v2_delta": 114, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.2, "maintenance": 18.8, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pi", "repo": "earendil-works/pi", "display_repo": "", "url": "https://github.com/earendil-works/pi", "listing_class": "agent", "rank": 715, "previous_rank": 711, "rank_delta": -4, "stars": 114557, "stars_fmt": "114.6k", "forks": 14586, "forks_fmt": "14.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 539, "commits_low_confidence": false, "score": 99.4, "description": "AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI", "language": "TypeScript", "open_issues": 239, "category": "Coding Agents", "category_rank": 45, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 3, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:50:55Z", "slug": "pi", "full_fetched_at": "2026-10-12T04:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: packages/coding-agent/src/core/mcp-servers.ts", "Found MCP-related server test path: packages/mcp/test/fixtures/stdio-server.mjs", "Found MCP-related server test path: packages/mcp/test/fixtures/stubborn-server.mjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/ai/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/ai/package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in packages/ai/package.json" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: .pi/extensions/import-repro.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.2, "trust_score_v2": 58.2, "rank_v2": 715, "rank_v2_delta": 1, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.6, "maintenance": 20.0, "adoption": 12.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Happy Platform MCP", "repo": "Happy-Technologies-LLC/happy-platform-mcp", "display_repo": "", "url": "https://github.com/Happy-Technologies-LLC/happy-platform-mcp", "listing_class": "agent", "rank": 716, "previous_rank": 707, "rank_delta": -9, "stars": 54, "stars_fmt": "54", "forks": 35, "forks_fmt": "35", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 61, "commits_low_confidence": false, "score": 64.3, "description": "Happy Platform MCP v5.1 - Multi-Instance ServiceNow MCP Server", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 388, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 6.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 6, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T08:29:33Z", "slug": "happy-platform-mcp", "full_fetched_at": "2026-10-12T16:02:15Z", "source_note": "", "github_homepage": "https://happy-tech.biz", "homepage_icon": "/site-icons/0860261cd1c262d7.png", "homepage_icon_for": "https://happy-tech.biz", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server-consolidated.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'HAPPY_MCP_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.1, "trust_score_v2": 58.1, "rank_v2": 716, "rank_v2_delta": 130, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 14.0, "maintenance": 18.8, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "UFO", "repo": "microsoft/UFO", "display_repo": "", "url": "https://github.com/microsoft/UFO", "listing_class": "agent", "rank": 717, "previous_rank": 657, "rank_delta": -60, "stars": 9994, "stars_fmt": "10.0k", "forks": 1070, "forks_fmt": "1.1k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 8, "commits_low_confidence": true, "score": 74.3, "description": "UFO³: Weaving the Digital Agent Galaxy", "language": "Python", "open_issues": 44, "category": "Browser & Computer Use", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:31:00Z", "slug": "ufo", "full_fetched_at": "2026-10-12T08:01:58Z", "source_note": "", "github_homepage": "https://microsoft.github.io/UFO/", "homepage_icon": "/site-icons/0f4faba7b9be9191.png", "homepage_icon_for": "https://microsoft.github.io/UFO/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: ufo/client/mcp/http_servers/hardware_mcp_server.py", "Found MCP-related server path: ufo/client/mcp/http_servers/linux_mcp_server.py", "Found MCP-related server docs path: documents/docs/mcp/local_servers.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: aip/extensions/__init__.py", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.1, "trust_score_v2": 58.1, "rank_v2": 717, "rank_v2_delta": 122, "trust_v2_adjustment": 0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 13.5, "maintenance": 13.6, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Autotask", "repo": "WYRE-AI/autotask-mcp", "display_repo": "", "url": "https://github.com/WYRE-AI/autotask-mcp", "listing_class": "agent", "rank": 718, "previous_rank": 719, "rank_delta": 1, "stars": 57, "stars_fmt": "57", "forks": 66, "forks_fmt": "66", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 20, "commits_low_confidence": false, "score": 60.6, "description": "MCP server for Kaseya Autotask PSA — 39 tools for companies, tickets, projects, time entries, and more", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 389, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/wyre-technology/autotask-mcp:v2.31.1", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:11:04Z", "slug": "autotask", "full_fetched_at": "2026-10-12T04:01:58Z", "source_note": "", "github_homepage": "https://wyre-ai.github.io/autotask-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'NODE_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 58.1, "trust_score_v2": 58.1, "rank_v2": 718, "rank_v2_delta": 129, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.2, "maintenance": 17.3, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Stagewise", "repo": "stagewise-io/stagewise", "display_repo": "", "url": "https://github.com/stagewise-io/stagewise", "listing_class": "agent", "rank": 719, "previous_rank": 708, "rank_delta": -11, "stars": 6827, "stars_fmt": "6.8k", "forks": 511, "forks_fmt": "511", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 16, "commits_low_confidence": false, "score": 75.1, "description": "The Open Source Agentic IDE. Create and orchestrate coding agents, show app previews and run git workflows. Use your favorite models across all providers.", "language": "TypeScript", "open_issues": 13, "category": "Coding Agents", "category_rank": 46, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T23:39:27Z", "slug": "stagewise", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://stagewise.io", "homepage_icon": "/site-icons/c24e23720fe2a26e.png", "homepage_icon_for": "https://stagewise.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: apps/browser/src/backend/agents/acp/stagewise-mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in apps/browser/package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/browser/bundled/plugins/figma/SKILL.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 58.1, "trust_score_v2": 58.1, "rank_v2": 719, "rank_v2_delta": 160, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 13.1, "maintenance": 16.4, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mondaycom MCP", "repo": "mondaycom/mcp", "display_repo": "", "url": "https://github.com/mondaycom/mcp", "listing_class": "agent", "rank": 720, "previous_rank": 714, "rank_delta": -6, "stars": 428, "stars_fmt": "428", "forks": 103, "forks_fmt": "103", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 23, "commits_low_confidence": false, "score": 67.4, "description": "Enable AI agents to work reliably - giving them secure access to structured data, tools to take action, and the context needed to make smart decisions.", "language": "TypeScript", "open_issues": 23, "category": "MCP Servers", "category_rank": 390, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:02:07Z", "slug": "mondaycom-mcp", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "https://monday.com", "homepage_icon": "/site-icons/665ffbdcadf5d122.png", "homepage_icon_for": "https://monday.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/agent-toolkit/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/monday-api-mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/agent-toolkit/package.json", "README/docs also mention OpenAI", "Ships a Claude Code plugin manifest (plugins/monday-crm/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'MONDAY_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.1, "trust_score_v2": 58.1, "rank_v2": 720, "rank_v2_delta": 67, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 17.5, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wisp Science", "repo": "xuzhougeng/wisp-science", "display_repo": "", "url": "https://github.com/xuzhougeng/wisp-science", "listing_class": "agent", "rank": 721, "previous_rank": 710, "rank_delta": -11, "stars": 1034, "stars_fmt": "1.0k", "forks": 105, "forks_fmt": "105", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 284, "commits_low_confidence": false, "score": 77.5, "description": "Open-source, local-first desktop AI research workbench for scientific computing with Python/R, MCP bioinformatics tools, SSH/WSL/GPU runtimes, and OpenAI/Anthropic models.", "language": "Rust", "open_issues": 2, "category": "Research & Data", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.74, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:40:58Z", "slug": "wisp-science", "full_fetched_at": "2026-10-12T04:02:08Z", "source_note": "", "github_homepage": "http://wispscience.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: python/mock_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 58.1, "trust_score_v2": 58.1, "rank_v2": 721, "rank_v2_delta": 76, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 11.7, "maintenance": 20.0, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Klever Vm", "repo": "klever-io/mcp-klever-vm", "display_repo": "", "url": "https://github.com/klever-io/mcp-klever-vm", "listing_class": "agent", "rank": 722, "previous_rank": 713, "rank_delta": -9, "stars": 31, "stars_fmt": "31", "forks": 5, "forks_fmt": "5", "last_push": "2026-05-19", "days_ago": 146, "weekly_commits": 0, "commits_low_confidence": false, "score": 17.3, "description": "MCP server for Klever blockchain smart contract development", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 391, "npm_package": "@klever/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 30, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 2, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:54:13Z", "slug": "mcp-klever-vm", "full_fetched_at": "2026-10-12T16:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server path: mcp.json", "Found MCP-related server test path: src/mcp/server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in package.json", "Found Redis credential/config marker 'REDIS_URL'", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@klever/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@klever/mcp-server", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:39Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.1, "trust_score_v2": 58.1, "rank_v2": 722, "rank_v2_delta": 275, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 16.4, "identity": 18.0, "transparency": 11.1, "maintenance": 2.3, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cesium MCP", "repo": "gaopengbin/cesium-mcp", "display_repo": "", "url": "https://github.com/gaopengbin/cesium-mcp", "listing_class": "agent", "rank": 723, "previous_rank": 721, "rank_delta": -2, "stars": 140, "stars_fmt": "140", "forks": 26, "forks_fmt": "26", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 11, "commits_low_confidence": false, "score": 58.1, "description": "Protocol-agnostic CesiumJS AI control runtime for MCP, WebMCP, function calling, and browser agents.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 392, "npm_package": "cesium-mcp-dev", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 296, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:52:21Z", "slug": "cesium-mcp", "full_fetched_at": "2026-10-12T16:02:12Z", "source_note": "", "github_homepage": "https://gaopengbin.github.io/cesium-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/cesium-map/mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json", "Found MCP dependency 'modelcontextprotocol' in packages/cesium-mcp-dev/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'cesium-mcp-dev' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "cesium-mcp-dev", "version": "1.147.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 58.0, "trust_score_v2": 58.0, "rank_v2": 723, "rank_v2_delta": 318, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 10.9, "maintenance": 16.3, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Orcaslicer MCP", "repo": "MaxEllis/orcaslicer-mcp", "display_repo": "", "url": "https://github.com/MaxEllis/orcaslicer-mcp", "listing_class": "agent", "rank": 724, "previous_rank": 725, "rank_delta": 1, "stars": 69, "stars_fmt": "69", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 69, "commits_low_confidence": false, "score": 64.8, "description": "OrcaSlicer MCP — drive OrcaSlicer from Claude or any MCP client: load models, tune settings, slice, analyze", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 393, "npm_package": "", "crate_package": "", "pypi_package": "orcaslicer-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 947, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.01, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:35:46Z", "slug": "orcaslicer-mcp", "full_fetched_at": "2026-10-11T20:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ORCA_PRINTER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'orcaslicer-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "orcaslicer-mcp", "version": "0.1.16" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:54Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 58.0, "trust_score_v2": 58.0, "rank_v2": 724, "rank_v2_delta": 290, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 19.4, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bolna", "repo": "bolna-ai/bolna", "display_repo": "", "url": "https://github.com/bolna-ai/bolna", "listing_class": "agent", "rank": 725, "previous_rank": 726, "rank_delta": 1, "stars": 787, "stars_fmt": "787", "forks": 371, "forks_fmt": "371", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 53, "commits_low_confidence": false, "score": 76.0, "description": "Conversational voice AI agents", "language": "Python", "open_issues": 62, "category": "Voice & Conversational", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:17:44Z", "slug": "bolna", "full_fetched_at": "2026-10-12T04:02:16Z", "source_note": "", "github_homepage": "https://www.bolna.ai", "homepage_icon": "/site-icons/e2a3233971f02143.png", "homepage_icon_for": "https://www.bolna.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "ElevenLabs", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in requirements.txt", "Found Groq dependency 'groq' in requirements.txt", "Found ElevenLabs credential/config marker 'ELEVENLABS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in requirements.txt", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.9, "trust_score_v2": 57.9, "rank_v2": 725, "rank_v2_delta": -88, "trust_v2_adjustment": -3.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.2, "maintenance": 18.9, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Buildkite MCP Server", "repo": "buildkite/buildkite-mcp-server", "display_repo": "", "url": "https://github.com/buildkite/buildkite-mcp-server", "listing_class": "agent", "rank": 726, "previous_rank": 727, "rank_delta": 1, "stars": 55, "stars_fmt": "55", "forks": 39, "forks_fmt": "39", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 93, "commits_low_confidence": false, "score": 67.5, "description": "Official MCP Server for Buildkite.", "language": "Go", "open_issues": 2, "category": "MCP Servers", "category_rank": 394, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/buildkite/buildkite-mcp-server:0.7.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-11T16:30:09Z", "slug": "buildkite-mcp-server", "full_fetched_at": "2026-10-12T12:02:45Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cmd/buildkite-mcp-server/main.go", "Found MCP-related server path: cmd/buildkite-mcp-server/main_test.go" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BUILDKITE_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.9, "trust_score_v2": 57.9, "rank_v2": 726, "rank_v2_delta": 130, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 13.1, "maintenance": 19.9, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Rust MCP Sdk", "repo": "paiml/rust-mcp-sdk", "display_repo": "", "url": "https://github.com/paiml/rust-mcp-sdk", "listing_class": "agent", "rank": 727, "previous_rank": 715, "rank_delta": -12, "stars": 52, "stars_fmt": "52", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 25, "commits_low_confidence": false, "score": 56.3, "description": "Pragmatic AI Labs MCP SDK ", "language": "Rust", "open_issues": 15, "category": "MCP Servers", "category_rank": 395, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 4, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:07:09Z", "slug": "rust-mcp-sdk", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "https://paiml.github.io/rust-mcp-sdk/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .planning/milestones/v2.5-phases/51-pmcp-mcp-server/.gitkeep", "Found MCP-related server path: .planning/milestones/v2.5-phases/51-pmcp-mcp-server/51-01-PLAN.md", "Found MCP-related server test path: crates/pmcp-server-toolkit/tests/backend_core_smoke.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.9, "trust_score_v2": 57.9, "rank_v2": 727, "rank_v2_delta": 166, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 17.2, "adoption": 4.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BitFun", "repo": "GCWing/OpenBitFun", "display_repo": "", "url": "https://github.com/GCWing/OpenBitFun", "listing_class": "agent", "rank": 728, "previous_rank": 717, "rank_delta": -11, "stars": 2419, "stars_fmt": "2.4k", "forks": 253, "forks_fmt": "253", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 825, "commits_low_confidence": false, "score": 81.5, "description": "OpenBitFun combines a high-performance agent runtime written in Rust with a polished desktop application. It pairs the depth of a Code Agent with open, general-purpose capabilities for work beyond software development.", "language": "Rust", "open_issues": 77, "category": "Agent Frameworks", "category_rank": 69, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 6, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:07:45Z", "slug": "bitfun", "full_fetched_at": "2026-10-12T16:02:18Z", "source_note": "", "github_homepage": "https://openbitfun.com", "homepage_icon": "/site-icons/ff1fb4a6bc61ec0d.png", "homepage_icon_for": "https://openbitfun.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/web-ui/src/locales/en-US/settings/mcp.json", "Found MCP-related server path: src/web-ui/src/locales/zh-CN/settings/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: docs/architecture/extensions/capability-runtime-integration-design.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.9, "trust_score_v2": 57.9, "rank_v2": 728, "rank_v2_delta": 51, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "claude-code-router", "repo": "musistudio/claude-code-router", "display_repo": "", "url": "https://github.com/musistudio/claude-code-router", "listing_class": "agent", "rank": 729, "previous_rank": 718, "rank_delta": -11, "stars": 37637, "stars_fmt": "37.6k", "forks": 3160, "forks_fmt": "3.2k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 61, "commits_low_confidence": false, "score": 90.9, "description": "One local control plane for every AI agent: route across models, fuse new capabilities, orchestrate tools, and stay fully in control.", "language": "TypeScript", "open_issues": 934, "category": "LLM Gateways & Infra", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:00:20Z", "slug": "claude-code-router", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "https://ccrdesk.top/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: packages/ui/test/unit/mcp-server-config.test.mjs" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/core/src/plugins/backend-service.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.9, "trust_score_v2": 57.9, "rank_v2": 729, "rank_v2_delta": 65, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.6, "maintenance": 19.0, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenResearch", "repo": "alphaXiv/OpenResearch", "display_repo": "", "url": "https://github.com/alphaXiv/OpenResearch", "listing_class": "agent", "rank": 730, "previous_rank": 722, "rank_delta": -8, "stars": 6910, "stars_fmt": "6.9k", "forks": 446, "forks_fmt": "446", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 171, "commits_low_confidence": false, "score": 85.3, "description": "Turn your coding agents into research agents", "language": "Rust", "open_issues": 42, "category": "Research & Data", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.1, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T23:01:04Z", "slug": "openresearch", "full_fetched_at": "2026-10-12T16:02:15Z", "source_note": "", "github_homepage": "https://openresearch.sh/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.9, "trust_score_v2": 57.9, "rank_v2": 730, "rank_v2_delta": 78, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 10.3, "maintenance": 20.0, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "arbigent", "repo": "takahirom/arbigent", "display_repo": "", "url": "https://github.com/takahirom/arbigent", "listing_class": "agent", "rank": 731, "previous_rank": 723, "rank_delta": -8, "stars": 650, "stars_fmt": "650", "forks": 63, "forks_fmt": "63", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 51, "commits_low_confidence": false, "score": 70.3, "description": "AI Agent for testing Android, iOS, and Web apps. Get Started in 5 Minutes. Arbigent's intuitive UI and powerful code interface make it accessible to everyone, while its scenario breakdown feature ensures scalability for even the most complex tasks.", "language": "Kotlin", "open_issues": 17, "category": "Browser & Computer Use", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 8, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:58:14Z", "slug": "arbigent", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.8, "trust_score_v2": 57.8, "rank_v2": 731, "rank_v2_delta": 132, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 13.0, "maintenance": 18.2, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Plinth", "repo": "jabrena/plinth", "display_repo": "", "url": "https://github.com/jabrena/plinth", "listing_class": "skill", "rank": 127, "previous_rank": 130, "rank_delta": 3, "stars": 448, "stars_fmt": "448", "forks": 94, "forks_fmt": "94", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 45, "commits_low_confidence": false, "score": 70.8, "description": "Plinth is an AI-native engineering toolkit for modern Java enterprise SDLC, built around reusable Commands, Agents, Skills, and MCP Servers.", "language": "Java", "open_issues": 20, "category": "Agent Skills", "category_rank": 127, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:49:33Z", "slug": "plinth", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "https://jabrena.github.io/plinth/", "homepage_icon": "/site-icons/349d1a27ef2d4699.png", "homepage_icon_for": "https://jabrena.github.io/plinth/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .cursor/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.8, "trust_score_v2": 57.8, "rank_v2": 127, "rank_v2_delta": 671, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 12.1, "maintenance": 18.6, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Auto claude code research in sleep", "repo": "wanshuiyin/Auto-claude-code-research-in-sleep", "display_repo": "", "url": "https://github.com/wanshuiyin/Auto-claude-code-research-in-sleep", "listing_class": "skill", "rank": 128, "previous_rank": 126, "rank_delta": -2, "stars": 17331, "stars_fmt": "17.3k", "forks": 1456, "forks_fmt": "1.5k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 55, "commits_low_confidence": false, "score": 86.2, "description": "ARIS ⚔️ (Auto-Research-In-Sleep) — Lightweight Markdown-only skills for autonomous ML research: cross-model review loops, idea discovery, and experiment automation. No framework, no lock-in — works with Claude Code, Codex, OpenClaw, or any LLM agent.", "language": "Python", "open_issues": 57, "category": "Agent Skills", "category_rank": 128, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:16:55Z", "slug": "auto-claude-code-research-in-sleep", "full_fetched_at": "2026-10-12T00:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-servers/antigravity-exec/README.md", "Found MCP-related server path: mcp-servers/antigravity-exec/aris-antigravity-review.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.8, "trust_score_v2": 57.8, "rank_v2": 128, "rank_v2_delta": 668, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.0, "maintenance": 18.6, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TEN Framework", "repo": "TEN-framework/ten-framework", "display_repo": "", "url": "https://github.com/TEN-framework/ten-framework", "listing_class": "agent", "rank": 732, "previous_rank": 728, "rank_delta": -4, "stars": 11157, "stars_fmt": "11.2k", "forks": 1362, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 17, "commits_low_confidence": false, "score": 79.6, "description": " Open-source framework for conversational voice AI agents", "language": "Python", "open_issues": 165, "category": "Voice & Conversational", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:01:46Z", "slug": "ten-framework", "full_fetched_at": "2026-10-12T12:02:33Z", "source_note": "", "github_homepage": "https://agent.theten.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: core/src/ten_manager/src/designer/extensions/create.rs", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 57.8, "trust_score_v2": 57.8, "rank_v2": 732, "rank_v2_delta": 3, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 11.9, "maintenance": 17.0, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "jcode", "repo": "1jehuang/jcode", "display_repo": "", "url": "https://github.com/1jehuang/jcode", "listing_class": "agent", "rank": 733, "previous_rank": 732, "rank_delta": -1, "stars": 20564, "stars_fmt": "20.6k", "forks": 2396, "forks_fmt": "2.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 843, "commits_low_confidence": false, "score": 91.6, "description": "High performance coding agent harness written in rust", "language": "Rust", "open_issues": 562, "category": "Coding Agents", "category_rank": 47, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:43:01Z", "slug": "jcode", "full_fetched_at": "2026-10-12T08:02:18Z", "source_note": "", "github_homepage": "https://jcode.sh", "homepage_icon": "/site-icons/2cca45688542346b.png", "homepage_icon_for": "https://jcode.sh", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .claude/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Fireworks AI", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Fireworks AI credential/config marker 'FIREWORKS_API_KEY'", "README/docs also mention Fireworks AI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.8, "trust_score_v2": 57.8, "rank_v2": 733, "rank_v2_delta": 57, "trust_v2_adjustment": -0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.9, "maintenance": 20.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Flow Next", "repo": "gmickel/flow-next", "display_repo": "", "url": "https://github.com/gmickel/flow-next", "listing_class": "skill", "rank": 129, "previous_rank": 129, "rank_delta": 0, "stars": 709, "stars_fmt": "709", "forks": 59, "forks_fmt": "59", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 416, "commits_low_confidence": false, "score": 75.4, "description": "Faster than your agent alone. And better. A workflow plugin that takes a bug, idea or ticket to a verified pull request: specs, cross-model review by risk, live QA, receipts in your repo. Claude Code · Codex · Cursor · Droid · Grok Build · OpenCode.", "language": "Python", "open_issues": 13, "category": "Agent Skills", "category_rank": 129, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T17:48:51Z", "slug": "flow-next", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "https://flow-next.dev", "homepage_icon": "/site-icons/4cf66723ad8e7762.png", "homepage_icon_for": "https://flow-next.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/flow-next/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.7, "trust_score_v2": 57.7, "rank_v2": 129, "rank_v2_delta": 675, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.8, "maintenance": 20.0, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skillshare", "repo": "runkids/skillshare", "display_repo": "", "url": "https://github.com/runkids/skillshare", "listing_class": "skill", "rank": 130, "previous_rank": 135, "rank_delta": 5, "stars": 2773, "stars_fmt": "2.8k", "forks": 175, "forks_fmt": "175", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1047, "commits_low_confidence": false, "score": 81.1, "description": "📚 Sync skills, agents, MCP, plugins to all AI CLI tools with one command and simplify team sharing.", "language": "Go", "open_issues": 16, "category": "Agent Skills", "category_rank": 130, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:22:17Z", "slug": "skillshare", "full_fetched_at": "2026-10-12T00:02:03Z", "source_note": "", "github_homepage": "https://skillshare.runkids.cc", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: ui/src/components/mcp/MCPServerDialog.tsx", "Found MCP-related server path: ui/src/components/mcp/MCPServerList.tsx", "Found MCP-related server test path: ui/src/components/mcp/MCPServerDialog.test.tsx", "Found MCP-related server test path: ui/src/components/mcp/mcpServerDraft.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: ai_docs/designs/pi-extensions/implementation-report.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.7, "trust_score_v2": 57.7, "rank_v2": 130, "rank_v2_delta": 661, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skills Manager", "repo": "xingkongliang/skills-manager", "display_repo": "", "url": "https://github.com/xingkongliang/skills-manager", "listing_class": "skill", "rank": 131, "previous_rank": 133, "rank_delta": 2, "stars": 6150, "stars_fmt": "6.2k", "forks": 506, "forks_fmt": "506", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 61, "commits_low_confidence": false, "score": 82.6, "description": "A lightweight desktop app to manage, sync, and organize AI agent skills across 50+ coding tools — Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more.", "language": "Rust", "open_issues": 212, "category": "Agent Skills", "category_rank": 131, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:57:22Z", "slug": "skills-manager", "full_fetched_at": "2026-10-12T04:01:59Z", "source_note": "", "github_homepage": "https://skillsmanager.dev", "homepage_icon": "/site-icons/753a812a390172ee.png", "homepage_icon_for": "https://skillsmanager.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.7, "trust_score_v2": 57.7, "rank_v2": 131, "rank_v2_delta": 688, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.1, "maintenance": 19.1, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Maestro Orchestrate", "repo": "josstei/maestro-orchestrate", "display_repo": "", "url": "https://github.com/josstei/maestro-orchestrate", "listing_class": "skill", "rank": 132, "previous_rank": 127, "rank_delta": -5, "stars": 465, "stars_fmt": "465", "forks": 38, "forks_fmt": "38", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 2, "commits_low_confidence": true, "score": 54.3, "description": "Multi-agent orchestration platform for Gemini CLI, Claude Code, Codex, and Qwen Code — 39 specialists, parallel subagents, persistent sessions, and built-in code review, debugging, security, SEO, accessibility, and compliance tools", "language": "JavaScript", "open_issues": 6, "category": "Agent Skills", "category_rank": 132, "npm_package": "@josstei/maestro", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 203, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.53, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-03T07:39:18Z", "slug": "maestro-orchestrate", "full_fetched_at": "2026-10-12T16:02:40Z", "source_note": "", "github_homepage": "https://josstei.github.io/maestro-orchestrate/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: bin/maestro-mcp-server.js", "Found MCP-related server path: claude/mcp/maestro-server.js", "Found MCP-related server test path: tests/integration/mcp-server-bundle-behavior.test.js" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (claude/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@josstei/maestro' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@josstei/maestro", "version": "1.6.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:40Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.7, "trust_score_v2": 57.7, "rank_v2": 132, "rank_v2_delta": 902, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.5, "identity": 10.8, "transparency": 11.8, "maintenance": 12.9, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Spellbook", "repo": "majiayu000/spellbook", "display_repo": "", "url": "https://github.com/majiayu000/spellbook", "listing_class": "skill", "rank": 133, "previous_rank": 128, "rank_delta": -5, "stars": 287, "stars_fmt": "287", "forks": 26, "forks_fmt": "26", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 27, "commits_low_confidence": false, "score": 64.0, "description": "Cross-runtime skills for Claude Code, Codex, and multi-agent workflows.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 133, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.64, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:35:50Z", "slug": "spellbook", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "https://majiayu000.github.io/spellbook/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in skills/skill-creator/requirements.txt", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 133, "rank_v2_delta": 682, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.3, "identity": 10.8, "transparency": 13.3, "maintenance": 17.5, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Workflows", "repo": "shinpr/claude-code-workflows", "display_repo": "", "url": "https://github.com/shinpr/claude-code-workflows", "listing_class": "skill", "rank": 134, "previous_rank": 138, "rank_delta": 4, "stars": 694, "stars_fmt": "694", "forks": 105, "forks_fmt": "105", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 31, "commits_low_confidence": false, "score": 70.3, "description": "Development workflows for Claude Code that keep broad exploration focused on the outcome you approved.", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 134, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:38:48Z", "slug": "claude-code-workflows", "full_fetched_at": "2026-10-12T00:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (dev-skills/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 134, "rank_v2_delta": 680, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 13.3, "maintenance": 18.0, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BotSharp", "repo": "SciSharp/BotSharp", "display_repo": "", "url": "https://github.com/SciSharp/BotSharp", "listing_class": "agent", "rank": 734, "previous_rank": 724, "rank_delta": -10, "stars": 3112, "stars_fmt": "3.1k", "forks": 650, "forks_fmt": "650", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 47, "commits_low_confidence": false, "score": 78.3, "description": "AI Multi-Agent Framework in .NET", "language": "C#", "open_issues": 44, "category": "Agent Frameworks", "category_rank": 70, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:48:03Z", "slug": "botsharp", "full_fetched_at": "2026-10-12T08:02:20Z", "source_note": "", "github_homepage": "https://botsharp.readthedocs.io", "homepage_icon": "/site-icons/e38cf0d415ca16d0.png", "homepage_icon_for": "https://botsharp.readthedocs.io", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: src/Infrastructure/BotSharp.Abstraction/MCP/Models/McpServerConfigModel.cs", "Found MCP-related server path: src/Infrastructure/BotSharp.Abstraction/MCP/Models/McpServerOptionModel.cs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/Infrastructure/BotSharp.Abstraction/Plugins/IBotSharpAppPlugin.cs", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 734, "rank_v2_delta": 78, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 12.8, "maintenance": 17.8, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Deepsec", "repo": "vercel-labs/deepsec", "display_repo": "", "url": "https://github.com/vercel-labs/deepsec", "listing_class": "agent", "rank": 735, "previous_rank": 730, "rank_delta": -5, "stars": 8130, "stars_fmt": "8.1k", "forks": 493, "forks_fmt": "493", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 3, "commits_low_confidence": false, "score": 66.7, "description": "Deepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents", "language": "TypeScript", "open_issues": 23, "category": "Security & Guardrails", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:06:00Z", "slug": "deepsec", "full_fetched_at": "2026-10-12T08:02:38Z", "source_note": "", "github_homepage": "https://deepsec.sh/", "homepage_icon": "/site-icons/47f6ecc398b0213b.png", "homepage_icon_for": "https://deepsec.sh/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 735, "rank_v2_delta": 96, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 13.5, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Victoriametrics", "repo": "VictoriaMetrics/mcp-victoriametrics", "display_repo": "", "url": "https://github.com/VictoriaMetrics/mcp-victoriametrics", "listing_class": "agent", "rank": 736, "previous_rank": 731, "rank_delta": -5, "stars": 237, "stars_fmt": "237", "forks": 33, "forks_fmt": "33", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 19, "commits_low_confidence": false, "score": 62.5, "description": "The implementation of Model Context Protocol (MCP) server for VictoriaMetrics", "language": "Go", "open_issues": 10, "category": "MCP Servers", "category_rank": 396, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/victoriametrics/mcp-victoriametrics:1.120.1", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:43:22Z", "slug": "mcp-victoriametrics", "full_fetched_at": "2026-10-12T00:02:33Z", "source_note": "", "github_homepage": "https://victoriametrics.com/", "homepage_icon": "/site-icons/becba1707c67de35.png", "homepage_icon_for": "https://victoriametrics.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in web/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VMC_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 736, "rank_v2_delta": 141, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 17.1, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ripwire", "repo": "redhat-et/ripwire", "display_repo": "", "url": "https://github.com/redhat-et/ripwire", "listing_class": "agent", "rank": 737, "previous_rank": 733, "rank_delta": -4, "stars": 2437, "stars_fmt": "2.4k", "forks": 151, "forks_fmt": "151", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 2441, "commits_low_confidence": false, "score": 80.4, "description": "The ripgrep of AI context: a zero-dependency C++23 CLI + MCP server for coding agents. Find what you want without reading the repo, then check you built what you meant — blast radius, tests-to-run, quality deltas. Signatures at 74.7% fewer bytes than bodies; every guess labelled, every loss…", "language": "C++", "open_issues": 45, "category": "MCP Servers", "category_rank": 397, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-12T00:24:20Z", "slug": "ripwire", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .codex-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 737, "rank_v2_delta": 157, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 11.9, "maintenance": 19.9, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Vibe Kanban", "repo": "BloopAI/vibe-kanban", "display_repo": "", "url": "https://github.com/BloopAI/vibe-kanban", "listing_class": "agent", "rank": 738, "previous_rank": 734, "rank_delta": -4, "stars": 28335, "stars_fmt": "28.3k", "forks": 3034, "forks_fmt": "3.0k", "last_push": "2026-09-19", "days_ago": 23, "weekly_commits": 10, "commits_low_confidence": false, "score": 77.7, "description": "Get 10X more out of Claude Code, Codex or any coding agent", "language": "Rust", "open_issues": 389, "category": "Coding Agents", "category_rank": 48, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.78, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:46:32Z", "slug": "vibe-kanban", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "https://www.vibekanban.com/", "homepage_icon": "/site-icons/a272f3a16c8f21ac.png", "homepage_icon_for": "https://www.vibekanban.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/images/settings-popular-mcp-servers.png", "Found MCP-related server docs path: docs/images/vk-mcp-server-config.jpeg" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'POSTHOG_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 738, "rank_v2_delta": 138, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 11.7, "maintenance": 14.6, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Graphify", "repo": "graphify-labs/graphify", "display_repo": "", "url": "https://github.com/Graphify-Labs/graphify", "listing_class": "agent", "rank": 739, "previous_rank": 805, "rank_delta": 66, "stars": 125785, "stars_fmt": "125.8k", "forks": 12143, "forks_fmt": "12.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 570, "commits_low_confidence": false, "score": 99.0, "description": "Turn any codebase, with its docs, SQL schemas, configs, and PDFs, into a queryable knowledge graph. A /graphify skill for Claude Code, Cursor, Codex, and Gemini CLI: local deterministic AST parsing, every edge explained, no vector store.", "language": "Python", "open_issues": 687, "category": "Protocols & Tool Integration", "category_rank": 42, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:07:20Z", "slug": "graphify", "full_fetched_at": "2026-10-12T16:02:11Z", "source_note": "", "github_homepage": "https://www.graphify.com", "homepage_icon": "/site-icons/2d76ca0e12ff0a81.png", "homepage_icon_for": "https://www.graphify.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Azure OpenAI", "DeepSeek", "Google Gemini", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 739, "rank_v2_delta": -11, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.7, "maintenance": 20.0, "adoption": 12.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Goose Skills", "repo": "gooseworks-ai/goose-skills", "display_repo": "", "url": "https://github.com/gooseworks-ai/goose-skills", "listing_class": "skill", "rank": 135, "previous_rank": 137, "rank_delta": 2, "stars": 1244, "stars_fmt": "1.2k", "forks": 216, "forks_fmt": "216", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 344, "commits_low_confidence": false, "score": 79.5, "description": "Library of Growth & GTM skills + data APIs for Claude Code, Codex, Cursor to run ads, social, content, lead gen, seo and data scraping", "language": "JavaScript", "open_issues": 5, "category": "Agent Skills", "category_rank": 135, "npm_package": "goose-skills", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:11:37Z", "slug": "goose-skills", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "https://gooseworks.ai/cli", "homepage_icon": "/site-icons/15868cdb37f7735b.png", "homepage_icon_for": "https://gooseworks.ai/cli", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in skills/design/packs/video-production/requirements.txt", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'goose-skills' points to athina-ai/goose-skills, which GitHub redirects to the tracked repo after a rename/transfer (not treated as drift)" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 135, "rank_v2_delta": 773, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.4, "maintenance": 20.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenResearch MCP", "repo": "olanokhin/openresearch-mcp", "display_repo": "", "url": "https://github.com/olanokhin/openresearch-mcp", "listing_class": "agent", "rank": 740, "previous_rank": 735, "rank_delta": -5, "stars": 11, "stars_fmt": "11", "forks": 1, "forks_fmt": "1", "last_push": "2026-07-08", "days_ago": 96, "weekly_commits": 0, "commits_low_confidence": false, "score": 19.7, "description": "Zero-auth, security-hardened cross-domain research MCP server: web, academic, GitHub, news, weather, macro/finance, SEC, biomedical, Bluesky, YouTube. SSRF and prompt-injection defenses.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 398, "npm_package": "", "crate_package": "", "pypi_package": "openresearch-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 64, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:22:41Z", "slug": "openresearch-mcp", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'openresearch-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openresearch-mcp", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:05Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.5, "trust_score_v2": 57.5, "rank_v2": 740, "rank_v2_delta": 350, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 18.0, "transparency": 11.3, "maintenance": 5.6, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Ads", "repo": "AgriciDaniel/claude-ads", "display_repo": "", "url": "https://github.com/AgriciDaniel/claude-ads", "listing_class": "skill", "rank": 136, "previous_rank": 131, "rank_delta": -5, "stars": 9919, "stars_fmt": "9.9k", "forks": 1466, "forks_fmt": "1.5k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 0, "commits_low_confidence": true, "score": 63.1, "description": "Claude-first paid-media operations skill for Claude Code across 12 ad platforms (Google, Meta, YouTube, LinkedIn, TikTok, Microsoft, Apple, Amazon, Reddit, Pinterest, Snapchat, X): source-grounded audits, deterministic scoring, versioned JSON reports, and capability-gated account changes.", "language": "Python", "open_issues": 12, "category": "Agent Skills", "category_rank": 136, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.57, "scorecard_score": 6.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-07T17:22:32Z", "slug": "claude-ads", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://claude-ads.md", "homepage_icon": "/site-icons/c9b9db8d3792db4e.png", "homepage_icon_for": "https://claude-ads.md", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in requirements.txt", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.4, "trust_score_v2": 57.4, "rank_v2": 136, "rank_v2_delta": 669, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.5, "identity": 10.8, "transparency": 14.4, "maintenance": 11.7, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Squad", "repo": "2FastLabs/agent-squad", "display_repo": "", "url": "https://github.com/2FastLabs/agent-squad", "listing_class": "agent", "rank": 741, "previous_rank": 737, "rank_delta": -4, "stars": 7790, "stars_fmt": "7.8k", "forks": 742, "forks_fmt": "742", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 15, "commits_low_confidence": false, "score": 76.1, "description": "Flexible and powerful framework for managing multiple AI agents and handling complex conversations", "language": "Python", "open_issues": 33, "category": "Multi-Agent Systems", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.52, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T12:03:32Z", "slug": "agent-squad", "full_fetched_at": "2026-10-12T00:02:41Z", "source_note": "", "github_homepage": "https://2fastlabs.github.io/agent-squad/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/src/content/docs/swift/examples/mcp-server.md", "Found MCP dependency '@modelcontextprotocol/sdk' in typescript/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in typescript/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in typescript/package.json", "README/docs also mention Anthropic", "Found credential/config marker 'TYPESAFE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.4, "trust_score_v2": 57.4, "rank_v2": 741, "rank_v2_delta": 113, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 12.2, "maintenance": 16.5, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Xiaohongshu MCP", "repo": "xpzouying/xiaohongshu-mcp", "display_repo": "", "url": "https://github.com/xpzouying/xiaohongshu-mcp", "listing_class": "agent", "rank": 742, "previous_rank": 740, "rank_delta": -2, "stars": 16231, "stars_fmt": "16.2k", "forks": 2386, "forks_fmt": "2.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8, "commits_low_confidence": true, "score": 77.9, "description": "MCP for xiaohongshu.com", "language": "Go", "open_issues": 48, "category": "MCP Servers", "category_rank": 399, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:12:34Z", "slug": "xiaohongshu-mcp", "full_fetched_at": "2026-10-12T04:02:03Z", "source_note": "", "github_homepage": "https://www.haha.ai/xiaohongshu-mcp", "homepage_icon": "/site-icons/a0c93c58f8156789.png", "homepage_icon_for": "https://www.haha.ai/xiaohongshu-mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.4, "trust_score_v2": 57.4, "rank_v2": 742, "rank_v2_delta": 136, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 11.8, "maintenance": 13.9, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MeiGen AI Design MCP", "repo": "jau123/MeiGen-AI-Design-MCP", "display_repo": "", "url": "https://github.com/jau123/MeiGen-AI-Design-MCP", "listing_class": "agent", "rank": 743, "previous_rank": 755, "rank_delta": 12, "stars": 1781, "stars_fmt": "1.8k", "forks": 234, "forks_fmt": "234", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 21, "commits_low_confidence": false, "score": 72.2, "description": "Supports GPT Image 2, Seedance & ComfyUI, with a 1,400+ prompt library, carefully crafted hooks and a multi-task orchestration system", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 400, "npm_package": "meigen", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 549, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T09:56:28Z", "slug": "meigen-ai-design-mcp", "full_fetched_at": "2026-10-12T16:02:34Z", "source_note": "", "github_homepage": "https://meigen.ai", "homepage_icon": "/site-icons/e3a4d9123f665374.png", "homepage_icon_for": "https://meigen.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in openclaw-plugin/package.json", "Found credential/config marker 'MEIGEN_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'meigen' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "meigen", "version": "3.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:34Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.4, "trust_score_v2": 57.4, "rank_v2": 743, "rank_v2_delta": 199, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 17.4, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PentestAgent", "repo": "GH05TCREW/pentestagent", "display_repo": "", "url": "https://github.com/GH05TCREW/pentestagent", "listing_class": "agent", "rank": 744, "previous_rank": 775, "rank_delta": 31, "stars": 3172, "stars_fmt": "3.2k", "forks": 627, "forks_fmt": "627", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 4, "commits_low_confidence": false, "score": 67.7, "description": "PentestAgent is an AI agent framework for black-box security testing, supporting bug bounty, red-team, and penetration testing workflows.", "language": "Python", "open_issues": 14, "category": "Security & Guardrails", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.47, "scorecard_score": 6.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:02:18Z", "slug": "pentestagent", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp_examples/sse/n8n/mcp_servers.json", "Found MCP-related server path: mcp_examples/stdio/kali/mcp_servers.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)", "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.3, "trust_score_v2": 57.3, "rank_v2": 744, "rank_v2_delta": 55, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 13.9, "maintenance": 14.8, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Greptimedb MCP Server", "repo": "GreptimeTeam/greptimedb-mcp-server", "display_repo": "", "url": "https://github.com/GreptimeTeam/greptimedb-mcp-server", "listing_class": "agent", "rank": 745, "previous_rank": 838, "rank_delta": 93, "stars": 29, "stars_fmt": "29", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 23, "commits_low_confidence": false, "score": 56.3, "description": "A Model Context Protocol (MCP) server for GreptimeDB", "language": "Python", "open_issues": 6, "category": "MCP Servers", "category_rank": 401, "npm_package": "", "crate_package": "", "pypi_package": "greptimedb-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 129, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.21, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:58:20Z", "slug": "greptimedb-mcp-server", "full_fetched_at": "2026-10-12T16:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: src/greptimedb_mcp_server/__init__.py", "Found MCP-related server path: src/greptimedb_mcp_server/config.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'greptimedb-mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "greptimedb-mcp-server", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.3, "trust_score_v2": 57.3, "rank_v2": 745, "rank_v2_delta": 91, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 13.8, "maintenance": 17.5, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Open Managed Agents", "repo": "openma-ai/open-managed-agents", "display_repo": "", "url": "https://github.com/openma-ai/open-managed-agents", "listing_class": "skill", "rank": 137, "previous_rank": 132, "rank_delta": -5, "stars": 317, "stars_fmt": "317", "forks": 46, "forks_fmt": "46", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 69, "commits_low_confidence": false, "score": 70.8, "description": "Open Managed Agents — an open-source alternative to Claude Managed Agents and OpenAI Agents API. Deploy with Node.js or Docker, run on Cloudflare, or use hosted OpenMA. Choose your models, harnesses and sandboxes.", "language": "TypeScript", "open_issues": 12, "category": "Agent Skills", "category_rank": 137, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:21:37Z", "slug": "open-managed-agents", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "https://openma.ai", "homepage_icon": "/site-icons/b279f6a37199d88f.png", "homepage_icon_for": "https://openma.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server test path: test/fakes/scripted-mcp-server.ts", "Found MCP-related server test path: test/unit/inject-mcp-servers-into-snapshot.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "E2B", "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Tavily credential/config marker 'TAVILY_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/console/src/plugins/registry.ts", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.3, "trust_score_v2": 57.3, "rank_v2": 137, "rank_v2_delta": 572, "trust_v2_adjustment": -2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 12.9, "maintenance": 19.4, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Blender MCP", "repo": "ahujasid/mcp-for-blender", "display_repo": "", "url": "https://github.com/ahujasid/mcp-for-blender", "listing_class": "agent", "rank": 746, "previous_rank": 736, "rank_delta": -10, "stars": 30542, "stars_fmt": "30.5k", "forks": 2763, "forks_fmt": "2.8k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 45, "commits_low_confidence": false, "score": 87.8, "description": "Community plugin to control Blender 3D with any LLM of your choice. Not affiliated with the official Blender Foundation.", "language": "Python", "open_issues": 25, "category": "MCP Servers", "category_rank": 402, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:53:06Z", "slug": "blender-mcp", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "https://www.mcp-for-blender.com/", "homepage_icon": "/site-icons/7c0a6015299993a1.png", "homepage_icon_for": "https://www.mcp-for-blender.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BLENDERMCP_SKETCHFAB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: integrations/codex/.agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.3, "trust_score_v2": 57.3, "rank_v2": 746, "rank_v2_delta": 126, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.1, "maintenance": 18.2, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Potpie", "repo": "potpie-ai/potpie", "display_repo": "", "url": "https://github.com/potpie-ai/potpie", "listing_class": "agent", "rank": 747, "previous_rank": 748, "rank_delta": 1, "stars": 5742, "stars_fmt": "5.7k", "forks": 683, "forks_fmt": "683", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8, "commits_low_confidence": true, "score": 72.7, "description": "Context Graph for AI Native SDLC", "language": "Python", "open_issues": 23, "category": "Coding Agents", "category_rank": 49, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:17:38Z", "slug": "potpie", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "https://potpie.ai", "homepage_icon": "/site-icons/e49020c7c2d1e71a.png", "homepage_icon_for": "https://potpie.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: potpie/cli/templates/claude_plugin/.claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.2, "trust_score_v2": 57.2, "rank_v2": 747, "rank_v2_delta": 83, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 13.9, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Happy", "repo": "slopus/happy", "display_repo": "", "url": "https://github.com/slopus/happy", "listing_class": "skill", "rank": 138, "previous_rank": 134, "rank_delta": -4, "stars": 24109, "stars_fmt": "24.1k", "forks": 2062, "forks_fmt": "2.1k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 130, "commits_low_confidence": false, "score": 91.6, "description": "Orchestrate Claude, Codex and Grok in one app. Open-source (MIT), reuses the subscriptions you already pay for.", "language": "TypeScript", "open_issues": 646, "category": "Agent Skills", "category_rank": 138, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.11, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:00:23Z", "slug": "happy", "full_fetched_at": "2026-10-12T00:02:12Z", "source_note": "", "github_homepage": "https://happy.engineering/", "homepage_icon": "/site-icons/219393178aed957c.png", "homepage_icon_for": "https://happy.engineering/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in packages/happy-cli/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "ElevenLabs" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in packages/happy-cli/package.json", "Found ElevenLabs dependency 'elevenlabs' in packages/happy-app/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: packages/expo-tailcat/plugin/index.js" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.2, "trust_score_v2": 57.2, "rank_v2": 138, "rank_v2_delta": 664, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.6, "maintenance": 19.9, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SAS MCP Server", "repo": "sassoftware/sas-mcp-server", "display_repo": "", "url": "https://github.com/sassoftware/sas-mcp-server", "listing_class": "agent", "rank": 748, "previous_rank": 741, "rank_delta": -7, "stars": 65, "stars_fmt": "65", "forks": 24, "forks_fmt": "24", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 27, "commits_low_confidence": false, "score": 58.7, "description": "A self-hosted Model Context Protocol (MCP) server that connects to your SAS Viya environment and provides tools across the analytics lifecycle.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 403, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:18:44Z", "slug": "sas-mcp-server", "full_fetched_at": "2026-10-12T00:02:36Z", "source_note": "", "github_homepage": "https://www.sas.com/en_us/software/viya/mcp-server.html", "homepage_icon": "/site-icons/a0c6c2aa8a6849a4.png", "homepage_icon_for": "https://www.sas.com/en_us/software/viya/mcp-server.html", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: deploy/helm/sas-mcp-server/.helmignore", "Found MCP-related server path: deploy/helm/sas-mcp-server/Chart.yaml", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VIYA_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.0, "trust_score_v2": 57.0, "rank_v2": 748, "rank_v2_delta": 141, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.8, "maintenance": 16.9, "adoption": 4.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Supabase Agent Skills", "repo": "supabase/agent-skills", "display_repo": "", "url": "https://github.com/supabase/agent-skills", "listing_class": "skill", "rank": 139, "previous_rank": 136, "rank_delta": -3, "stars": 2782, "stars_fmt": "2.8k", "forks": 231, "forks_fmt": "231", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 3, "commits_low_confidence": false, "score": 62.8, "description": "Agent Skills to help developers using AI agents with Supabase", "language": "TypeScript", "open_issues": 469, "category": "Agent Skills", "category_rank": 139, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.729, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:42:26Z", "slug": "supabase-agent-skills", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "https://supabase.com/docs/guides/getting-started/ai-skills", "homepage_icon": "/site-icons/e2c4439da4a07d4e.png", "homepage_icon_for": "https://supabase.com/docs/guides/getting-started/ai-skills", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.0, "trust_score_v2": 57.0, "rank_v2": 139, "rank_v2_delta": 781, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 12.7, "maintenance": 13.7, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Gemini Cloud Assist MCP", "repo": "GoogleCloudPlatform/gemini-cloud-assist-mcp", "display_repo": "", "url": "https://github.com/GoogleCloudPlatform/gemini-cloud-assist-mcp", "listing_class": "agent", "rank": 749, "previous_rank": 757, "rank_delta": 8, "stars": 68, "stars_fmt": "68", "forks": 21, "forks_fmt": "21", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 4, "commits_low_confidence": true, "score": 50.9, "description": "An MCP Server for Gemini Cloud Assist; provides tools to assist with your tasks on GCP", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 404, "npm_package": "@google-cloud/gemini-cloud-assist-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 94, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.268, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 7, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T13:17:43Z", "slug": "gemini-cloud-assist-mcp", "full_fetched_at": "2026-10-12T16:02:12Z", "source_note": "", "github_homepage": "https://cloud.google.com/products/gemini/cloud-assist", "homepage_icon": "/site-icons/62cf648830990c6a.png", "homepage_icon_for": "https://cloud.google.com/products/gemini/cloud-assist", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@google-cloud/gemini-cloud-assist-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@google-cloud/gemini-cloud-assist-mcp", "version": "0.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.0, "trust_score_v2": 57.0, "rank_v2": 749, "rank_v2_delta": 365, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.5, "maintenance": 13.4, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Houtini Ai Gemini MCP", "repo": "houtini-ai/gemini-mcp", "display_repo": "", "url": "https://github.com/houtini-ai/gemini-mcp", "listing_class": "agent", "rank": 750, "previous_rank": 744, "rank_delta": -6, "stars": 35, "stars_fmt": "35", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 10, "commits_low_confidence": false, "score": 51.6, "description": "Google Gemini MCP - Use Google's visual, video and chat capabilities in your AI Assistant. Uses MCP Apps to preview created images, landing pages, SVGs and video", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 405, "npm_package": "@houtini/gemini-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2329, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-26T21:50:44Z", "slug": "houtini-ai-gemini-mcp", "full_fetched_at": "2026-10-12T16:02:30Z", "source_note": "", "github_homepage": "https://houtini.com", "homepage_icon": "/site-icons/45465dd0be06e1b8.png", "homepage_icon_for": "https://houtini.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency '@google/genai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@houtini/gemini-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@houtini/gemini-mcp", "version": "2.9.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:30Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 57.0, "trust_score_v2": 57.0, "rank_v2": 750, "rank_v2_delta": 314, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 12.0, "maintenance": 15.8, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Lighthouse MCP", "repo": "priyankark/lighthouse-mcp", "display_repo": "", "url": "https://github.com/priyankark/lighthouse-mcp", "listing_class": "agent", "rank": 751, "previous_rank": 745, "rank_delta": -6, "stars": 211, "stars_fmt": "211", "forks": 20, "forks_fmt": "20", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 2, "commits_low_confidence": true, "score": 50.3, "description": "Allows AI assistants such as Amp/Cline/Cursor/Claude Code/Codex/GitHub Copilot to use Google's lighthouse tool to measure perf metrics for your webpage. You can then run an agentic loop and get the assistants to optimize those metrics!", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 406, "npm_package": "lighthouse-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1515, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.429, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-05T08:17:25Z", "slug": "lighthouse-mcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'lighthouse-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "lighthouse-mcp", "version": "0.1.17" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 57.0, "trust_score_v2": 57.0, "rank_v2": 751, "rank_v2_delta": 364, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 11.4, "maintenance": 12.6, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Runapi Ai MCP", "repo": "runapi-ai/mcp", "display_repo": "", "url": "https://github.com/runapi-ai/mcp", "listing_class": "agent", "rank": 752, "previous_rank": 681, "rank_delta": -71, "stars": 55, "stars_fmt": "55", "forks": 0, "forks_fmt": "0", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 9, "commits_low_confidence": true, "score": 47.2, "description": "RunAPI MCP server for model discovery, pricing lookup, media task creation, and balance checks.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 407, "npm_package": "@runapi.ai/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 162, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.014, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:51:13Z", "slug": "runapi-ai-mcp", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "https://runapi.ai", "homepage_icon": "/site-icons/c1e3cdbb3b043695.png", "homepage_icon_for": "https://runapi.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/awesome-mcp-servers-entry.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)", "Found credential/config marker 'RUNAPI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .codex-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@runapi.ai/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@runapi.ai/mcp", "version": "0.15.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:10Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.9, "trust_score_v2": 56.9, "rank_v2": 752, "rank_v2_delta": 299, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 13.4, "maintenance": 13.6, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pyxel MCP", "repo": "kitao/pyxel-mcp", "display_repo": "", "url": "https://github.com/kitao/pyxel-mcp", "listing_class": "agent", "rank": 753, "previous_rank": 743, "rank_delta": -10, "stars": 30, "stars_fmt": "30", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 8, "commits_low_confidence": true, "score": 48.5, "description": "MCP server for AI-assisted retro game development with Pyxel", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 408, "npm_package": "", "crate_package": "", "pypi_package": "pyxel-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 135, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:29:51Z", "slug": "pyxel-mcp", "full_fetched_at": "2026-10-09T16:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'pyxel-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pyxel-mcp", "version": "1.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-09T16:02:35Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.9, "trust_score_v2": 56.9, "rank_v2": 753, "rank_v2_delta": 367, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 13.2, "maintenance": 13.6, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Kernel MCP Server", "repo": "kernel/kernel-mcp-server", "display_repo": "", "url": "https://github.com/kernel/kernel-mcp-server", "listing_class": "agent", "rank": 754, "previous_rank": 751, "rank_delta": -3, "stars": 37, "stars_fmt": "37", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 80, "commits_low_confidence": false, "score": 62.7, "description": "Open-source MCP server for secure, low-latency cloud-browser automation on Kernel.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 409, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.63, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:56:53Z", "slug": "kernel-mcp-server", "full_fetched_at": "2026-10-12T16:02:37Z", "source_note": "", "github_homepage": "https://mcp.onkernel.com/mcp", "homepage_icon": "/site-icons/4c258097f8d3c6d0.png", "homepage_icon_for": "https://mcp.onkernel.com/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: benchmarks/harbor/bin/start-kernel-mcp-server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Redis dependency 'redis' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities", "Found database dependency 'redis' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.9, "trust_score_v2": 56.9, "rank_v2": 754, "rank_v2_delta": 159, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 12.4, "maintenance": 19.6, "adoption": 3.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "llm-for-zotero", "repo": "yilewang/llm-for-zotero", "display_repo": "", "url": "https://github.com/yilewang/llm-for-zotero", "listing_class": "agent", "rank": 755, "previous_rank": 753, "rank_delta": -2, "stars": 3278, "stars_fmt": "3.3k", "forks": 190, "forks_fmt": "190", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 604, "commits_low_confidence": false, "score": 81.7, "description": "An open-source research agent system for your Zotero library.", "language": "TypeScript", "open_issues": 165, "category": "Research & Data", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:40:28Z", "slug": "llm-for-zotero", "full_fetched_at": "2026-10-12T04:02:20Z", "source_note": "", "github_homepage": "https://yilewang.github.io/llm-for-zotero", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/agent/mcp/server.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 56.9, "trust_score_v2": 56.9, "rank_v2": 755, "rank_v2_delta": 97, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Secondsky Claude Skills", "repo": "secondsky/claude-skills", "display_repo": "", "url": "https://github.com/secondsky/claude-skills", "listing_class": "skill", "rank": 140, "previous_rank": 140, "rank_delta": 0, "stars": 229, "stars_fmt": "229", "forks": 32, "forks_fmt": "32", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 5, "commits_low_confidence": false, "score": 54.1, "description": "Production-ready skills for Claude Code CLI - Cloudflare, React, Tailwind v4, and AI integrations", "language": "TypeScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 140, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 20, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.39, "scorecard_score": 6.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-03T17:13:48Z", "slug": "secondsky-claude-skills", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: plugins/cloudflare-agents/skills/cloudflare-agents/templates/mcp-server-basic.ts", "Found MCP-related server path: plugins/cloudflare-mcp-server/.claude-plugin/plugin.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in plugins/playwright/skills/playwright/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.8, "trust_score_v2": 56.8, "rank_v2": 140, "rank_v2_delta": 694, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 14.4, "maintenance": 14.2, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ring", "repo": "LerianStudio/ring", "display_repo": "", "url": "https://github.com/LerianStudio/ring", "listing_class": "skill", "rank": 141, "previous_rank": 139, "rank_delta": -2, "stars": 217, "stars_fmt": "217", "forks": 27, "forks_fmt": "27", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 10, "commits_low_confidence": false, "score": 58.1, "description": "89 skills and 38 specialized agents that enforce proven engineering practices for AI-assisted development. TDD, systematic debugging, parallel code review, and 10-gate development cycles — as a Claude Code plugin marketplace.", "language": "HTML", "open_issues": 6, "category": "Agent Skills", "category_rank": 141, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:59:37Z", "slug": "ring", "full_fetched_at": "2026-10-11T20:01:47Z", "source_note": "", "github_homepage": "https://lerian.studio", "homepage_icon": "/site-icons/d9051a5e81f06b3f.png", "homepage_icon_for": "https://lerian.studio", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.8, "trust_score_v2": 56.8, "rank_v2": 141, "rank_v2_delta": 708, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.1, "maintenance": 15.8, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MaiBot", "repo": "Mai-with-u/MaiBot", "display_repo": "", "url": "https://github.com/Mai-with-u/MaiBot", "listing_class": "agent", "rank": 756, "previous_rank": 754, "rank_delta": -2, "stars": 6175, "stars_fmt": "6.2k", "forks": 647, "forks_fmt": "647", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 454, "commits_low_confidence": false, "score": 85.8, "description": "MaiSaka, an LLM-based intelligent agent, is a digital lifeform devoted to understanding you and interacting in the style of a real human. She does not pursue perfection, nor does she seek efficiency; instead, she values warmth, authenticity, and genuine connection.", "language": "Python", "open_issues": 32, "category": "Voice & Conversational", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-23T18:20:26Z", "slug": "maibot", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "https://docs.mai-mai.org/", "homepage_icon": "/site-icons/4a1d3ed8780e0ade.png", "homepage_icon_for": "https://docs.mai-mai.org/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: dashboard/src/routes/plugins/InstallDialog.tsx", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 56.8, "trust_score_v2": 56.8, "rank_v2": 756, "rank_v2_delta": 51, "trust_v2_adjustment": -1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.0, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fence", "repo": "fencesandbox/fence", "display_repo": "", "url": "https://github.com/fencesandbox/fence", "listing_class": "agent", "rank": 757, "previous_rank": 750, "rank_delta": -7, "stars": 990, "stars_fmt": "990", "forks": 44, "forks_fmt": "44", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 50.0, "description": "Lightweight, container-free sandbox for running commands with network and filesystem restrictions", "language": "Go", "open_issues": 34, "category": "Sandboxes & Runtimes", "category_rank": 6, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.79, "scorecard_score": 7.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 10, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T07:33:42Z", "slug": "fence", "full_fetched_at": "2026-10-12T16:02:08Z", "source_note": "", "github_homepage": "https://fencesandbox.com/docs", "homepage_icon": "/site-icons/0b41601d5a3d4652.png", "homepage_icon_for": "https://fencesandbox.com/docs", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.7, "trust_score_v2": 56.7, "rank_v2": 757, "rank_v2_delta": 112, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.7, "identity": 10.8, "transparency": 14.4, "maintenance": 11.6, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenROAD MCP", "repo": "The-OpenROAD-Project/OpenROAD-MCP", "display_repo": "", "url": "https://github.com/The-OpenROAD-Project/OpenROAD-MCP", "listing_class": "agent", "rank": 758, "previous_rank": 746, "rank_delta": -12, "stars": 25, "stars_fmt": "25", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 15, "commits_low_confidence": false, "score": 53.2, "description": " Model Context Protocol (MCP) server for OpenROAD", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 410, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T02:01:13Z", "slug": "openroad-mcp", "full_fetched_at": "2026-10-12T00:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in typescript/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-3-Clause", "license_type": "open", "license_override": "", "trust_score": 56.7, "trust_score_v2": 56.7, "rank_v2": 758, "rank_v2_delta": 186, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 13.2, "maintenance": 16.6, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "macOS Calendar and Reminders", "repo": "PsychQuant/che-ical-mcp", "display_repo": "", "url": "https://github.com/PsychQuant/che-ical-mcp", "listing_class": "agent", "rank": 759, "previous_rank": 756, "rank_delta": -3, "stars": 41, "stars_fmt": "41", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 305, "commits_low_confidence": false, "score": 64.4, "description": "macOS Calendar & Reminders MCP server (29 tools) — native Swift EventKit for Claude Desktop & Code. Events + reminders CRUD, recurring, batch ops, conflict & duplicate detection, per-event timezone, undo/redo, #tags, --cli mode, SwiftUI --setup TCC flow, --self-update. Developer-ID signed +…", "language": "Swift", "open_issues": 40, "category": "MCP Servers", "category_rank": 411, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:16:31Z", "slug": "macos-calendar-and-reminders", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.7, "trust_score_v2": 56.7, "rank_v2": 759, "rank_v2_delta": 173, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 13.1, "maintenance": 20.0, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Localstack MCP Server", "repo": "localstack/localstack-mcp-server", "display_repo": "", "url": "https://github.com/localstack/localstack-mcp-server", "listing_class": "agent", "rank": 760, "previous_rank": 768, "rank_delta": 8, "stars": 27, "stars_fmt": "27", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 3, "commits_low_confidence": true, "score": 46.5, "description": "MCP Server for LocalStack", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 412, "npm_package": "@localstack/localstack-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 246, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.531, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:13:05Z", "slug": "localstack-mcp-server", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Amazon Bedrock credential/config marker 'AWS_ACCESS_KEY_ID'", "README/docs also mention Amazon Bedrock" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@localstack/localstack-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@localstack/localstack-mcp-server", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:52Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.7, "trust_score_v2": 56.7, "rank_v2": 760, "rank_v2_delta": 321, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.5, "identity": 10.8, "transparency": 12.5, "maintenance": 13.2, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SurfSense", "repo": "MODSetter/SurfSense", "display_repo": "", "url": "https://github.com/MODSetter/SurfSense", "listing_class": "agent", "rank": 761, "previous_rank": 759, "rank_delta": -2, "stars": 16385, "stars_fmt": "16.4k", "forks": 1575, "forks_fmt": "1.6k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1439, "commits_low_confidence": false, "score": 90.2, "description": "Air-gapped, privacy-focused, open-source NotebookLM alternative. AI agent that researches, transforms, and edits your documents. Join our Discord: https://discord.gg/ejRNvftDp9", "language": "Python", "open_issues": 79, "category": "Research & Data", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:15:13Z", "slug": "surfsense", "full_fetched_at": "2026-10-12T08:02:10Z", "source_note": "", "github_homepage": "https://www.surfsense.com", "homepage_icon": "/site-icons/f3884b26327f3ad0.png", "homepage_icon_for": "https://www.surfsense.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: surfsense_mcp/mcp_server/__init__.py", "Found MCP-related server path: surfsense_mcp/mcp_server/__main__.py", "Found MCP-related server docs path: docs/adr/0051-plugins-are-mcp-servers-behind-one-tool-gateway.md", "Found MCP-related server docs path: surfsense_web/content/docs/legacy/how-to/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Azure OpenAI", "Cohere", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in surfsense_backend/pyproject.toml", "README/docs also mention OpenAI", "Found Cohere dependency 'cohere' in surfsense_backend/pyproject.toml", "Found Groq dependency 'groq' in surfsense_backend/pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in surfsense_backend/pyproject.toml", "Found Azure OpenAI dependency 'azure-openai' in surfsense_backend/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: docs/proposals/plugins/README.md", "Found database dependency 'pg' in surfsense_web/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 56.7, "trust_score_v2": 56.7, "rank_v2": 761, "rank_v2_delta": -64, "trust_v2_adjustment": -3.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.5, "maintenance": 20.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cr7258 Elasticsearch MCP Server", "repo": "cr7258/elasticsearch-mcp-server", "display_repo": "", "url": "https://github.com/cr7258/elasticsearch-mcp-server", "listing_class": "agent", "rank": 762, "previous_rank": 749, "rank_delta": -13, "stars": 312, "stars_fmt": "312", "forks": 66, "forks_fmt": "66", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 5, "commits_low_confidence": true, "score": 58.1, "description": "A Model Context Protocol (MCP) server implementation that provides Elasticsearch and OpenSearch interaction.", "language": "Python", "open_issues": 8, "category": "MCP Servers", "category_rank": 413, "npm_package": "", "crate_package": "", "pypi_package": "elasticsearch-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2418, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.55, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-12T00:21:19Z", "slug": "cr7258-elasticsearch-mcp-server", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: helm/elasticsearch-mcp-server/Chart.yaml", "Found MCP-related server path: helm/elasticsearch-mcp-server/README.md", "Found MCP-related server test path: helm/elasticsearch-mcp-server/tests/deployment_credentials_test.yaml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ELASTICSEARCH_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'elasticsearch-mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "elasticsearch-mcp-server", "version": "2.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:57Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.7, "trust_score_v2": 56.7, "rank_v2": 762, "rank_v2_delta": 139, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.5, "identity": 10.8, "transparency": 12.4, "maintenance": 13.5, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Plumb MCP", "repo": "tathagat22/plumb-mcp", "display_repo": "", "url": "https://github.com/tathagat22/plumb-mcp", "listing_class": "agent", "rank": 763, "previous_rank": 752, "rank_delta": -11, "stars": 79, "stars_fmt": "79", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 10, "commits_low_confidence": false, "score": 53.3, "description": "Local Figma MCP server with no REST rate limits, no metered tool-call quotas, and a verification loop. Drop-in alternative to Figma's Dev Mode MCP and Framelink for Claude Code, Cursor, Windsurf — works on every plan including Free.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 414, "npm_package": "plumb-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 95, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:54:41Z", "slug": "plumb-mcp", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "https://tathagat22.github.io/plumb-mcp/", "homepage_icon": "/site-icons/338f727915efe62c.png", "homepage_icon_for": "https://tathagat22.github.io/plumb-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: figma-plugin/README.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'plumb-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "plumb-mcp", "version": "0.13.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:25Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.7, "trust_score_v2": 56.7, "rank_v2": 763, "rank_v2_delta": 300, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.2, "maintenance": 16.0, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Code My Workflow", "repo": "pedrohcgs/claude-code-my-workflow", "display_repo": "", "url": "https://github.com/pedrohcgs/claude-code-my-workflow", "listing_class": "skill", "rank": 142, "previous_rank": 141, "rank_delta": -1, "stars": 1657, "stars_fmt": "1.7k", "forks": 3108, "forks_fmt": "3.1k", "last_push": "2026-09-27", "days_ago": 15, "weekly_commits": 9, "commits_low_confidence": false, "score": 71.1, "description": "A ready-to-fork Claude Code template for academics using LaTeX/Beamer + R. Multi-agent review, quality gates, adversarial QA, and replication protocols.", "language": "HTML", "open_issues": 4, "category": "Agent Skills", "category_rank": 142, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:07:51Z", "slug": "claude-code-my-workflow", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://psantanna.com/claude-code-my-workflow/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.6, "trust_score_v2": 56.6, "rank_v2": 142, "rank_v2_delta": 806, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 13.3, "maintenance": 15.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Jido", "repo": "agentjido/jido", "display_repo": "", "url": "https://github.com/agentjido/jido", "listing_class": "agent", "rank": 764, "previous_rank": 766, "rank_delta": 2, "stars": 1882, "stars_fmt": "1.9k", "forks": 121, "forks_fmt": "121", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 10, "commits_low_confidence": true, "score": 67.3, "description": "🤖 Autonomous agent framework for Elixir. Built for distributed, autonomous behavior and dynamic workflows.", "language": "Elixir", "open_issues": 3, "category": "Agent Frameworks", "category_rank": 71, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T20:48:28Z", "slug": "jido", "full_fetched_at": "2026-10-12T04:02:33Z", "source_note": "", "github_homepage": "https://jido.run", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: lib/jido/plugin/config.ex", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.6, "trust_score_v2": 56.6, "rank_v2": 764, "rank_v2_delta": 93, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.9, "maintenance": 14.1, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "memU", "repo": "NevaMind-AI/memU", "display_repo": "", "url": "https://github.com/NevaMind-AI/memU", "listing_class": "agent", "rank": 765, "previous_rank": 774, "rank_delta": 9, "stars": 14532, "stars_fmt": "14.5k", "forks": 1089, "forks_fmt": "1.1k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 5, "commits_low_confidence": true, "score": 73.8, "description": "Personal memory across agents", "language": "Python", "open_issues": 67, "category": "Memory & Knowledge", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-02T00:39:10Z", "slug": "memu", "full_fetched_at": "2026-10-12T08:02:10Z", "source_note": "", "github_homepage": "https://memu.pro", "homepage_icon": "/site-icons/6cdbc12660b8a01d.png", "homepage_icon_for": "https://memu.pro", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Postgres dependency 'postgres' in pyproject.toml", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'postgres' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 56.6, "trust_score_v2": 56.6, "rank_v2": 765, "rank_v2_delta": 20, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 12.8, "maintenance": 13.6, "adoption": 10.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP For Stata", "repo": "SepineTam/mcp-for-stata", "display_repo": "", "url": "https://github.com/SepineTam/mcp-for-stata", "listing_class": "agent", "rank": 766, "previous_rank": 758, "rank_delta": -8, "stars": 265, "stars_fmt": "265", "forks": 36, "forks_fmt": "36", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 17, "commits_low_confidence": false, "score": 61.7, "description": "Stata-MCP: A MCP server for integrating Stata into your agent loop with a safety-first design.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 415, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:34:06Z", "slug": "mcp-for-stata", "full_fetched_at": "2026-10-12T00:02:09Z", "source_note": "", "github_homepage": "https://aidea-labs.com/open/projects/mcp-for-stata", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/external/mcp.json", "Found MCP-related server path: plugins/stata-toolbox/mcp.json", "Found MCP-related server test path: tests/test_mcp_servers_security_log.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 56.5, "trust_score_v2": 56.5, "rank_v2": 766, "rank_v2_delta": 172, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 13.6, "maintenance": 16.6, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Rampstackco Claude Skills", "repo": "rampstackco/claude-skills", "display_repo": "", "url": "https://github.com/rampstackco/claude-skills", "listing_class": "skill", "rank": 143, "previous_rank": 142, "rank_delta": -1, "stars": 953, "stars_fmt": "953", "forks": 132, "forks_fmt": "132", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 5, "commits_low_confidence": true, "score": 61.8, "description": "Stack-agnostic Claude Skills covering the full website lifecycle: brand, design, content, SEO, dev, ops, growth, and research. Build, ship, audit, optimize.", "language": "JavaScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 143, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.95, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T08:28:52Z", "slug": "rampstackco-claude-skills", "full_fetched_at": "2026-10-11T20:02:13Z", "source_note": "", "github_homepage": "https://rampstack.co", "homepage_icon": "/site-icons/e4f9e3f1b0807ee5.png", "homepage_icon_for": "https://rampstack.co", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.5, "trust_score_v2": 56.5, "rank_v2": 143, "rank_v2_delta": 721, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 10.8, "transparency": 13.5, "maintenance": 13.2, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BISHENG", "repo": "dataelement/bisheng", "display_repo": "", "url": "https://github.com/dataelement/bisheng", "listing_class": "agent", "rank": 767, "previous_rank": 765, "rank_delta": -2, "stars": 12037, "stars_fmt": "12.0k", "forks": 1978, "forks_fmt": "2.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 282, "commits_low_confidence": false, "score": 89.8, "description": "BISHENG is an open LLM devops platform for next generation Enterprise AI applications. Powerful and comprehensive features include: GenAI workflow, RAG, Agent, Unified model management, Evaluation, SFT, Dataset Management, Enterprise-level System Management, Observability and more.", "language": "Python", "open_issues": 11, "category": "Workflow Platforms", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T13:17:14Z", "slug": "bisheng", "full_fetched_at": "2026-10-11T20:02:14Z", "source_note": "", "github_homepage": "http://www.bisheng.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "E2B", "OpenAI", "Postgres", "Qdrant", "Redis", "Supabase", "Weaviate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/backend/pyproject.toml", "Found Qdrant dependency 'qdrant' in src/backend/pyproject.toml", "Found Weaviate dependency 'weaviate' in src/backend/pyproject.toml", "Found E2B dependency 'e2b' in src/backend/pyproject.toml", "Found Supabase dependency 'supabase' in src/backend/pyproject.toml", "Found Postgres dependency 'psycopg' in src/backend/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found declared path: src/frontend/client/plugins/strip-internal-loader.cjs", "Found browser dependency 'playwright' in src/backend/pyproject.toml", "Found database dependency 'redis' in src/backend/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.5, "trust_score_v2": 56.5, "rank_v2": 767, "rank_v2_delta": -75, "trust_v2_adjustment": -3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 13.0, "maintenance": 20.0, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Youtube Transcript", "repo": "jkawamoto/mcp-youtube-transcript", "display_repo": "", "url": "https://github.com/jkawamoto/mcp-youtube-transcript", "listing_class": "agent", "rank": 768, "previous_rank": 761, "rank_delta": -7, "stars": 490, "stars_fmt": "490", "forks": 76, "forks_fmt": "76", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 18, "commits_low_confidence": false, "score": 64.7, "description": "MCP server retrieving transcripts of YouTube videos", "language": "Python", "open_issues": 7, "category": "MCP Servers", "category_rank": 416, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.52, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-27T00:23:37Z", "slug": "mcp-youtube-transcript", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SCRAPINGANT_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.5, "trust_score_v2": 56.5, "rank_v2": 768, "rank_v2_delta": 143, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 12.8, "maintenance": 16.6, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Android Skills", "repo": "android/skills", "display_repo": "", "url": "https://github.com/android/skills", "listing_class": "skill", "rank": 144, "previous_rank": 177, "rank_delta": 33, "stars": 7775, "stars_fmt": "7.8k", "forks": 513, "forks_fmt": "513", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8, "commits_low_confidence": false, "score": 72.8, "description": "", "language": "Python", "open_issues": 35, "category": "Agent Skills", "category_rank": 144, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.421, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T04:05:15Z", "slug": "android-skills", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .agents/plugins/marketplace.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.5, "trust_score_v2": 56.5, "rank_v2": 144, "rank_v2_delta": 717, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.7, "maintenance": 15.8, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Anti Slop", "repo": "miqdadbadjuber/anti-slop", "display_repo": "", "url": "https://github.com/miqdadbadjuber/anti-slop", "listing_class": "skill", "rank": 145, "previous_rank": 149, "rank_delta": 4, "stars": 5917, "stars_fmt": "5.9k", "forks": 394, "forks_fmt": "394", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 31, "commits_low_confidence": false, "score": 78.5, "description": "Rules for an AI coding agent to filter out generic AI-generated UI designs, text, and code.", "language": "JavaScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 145, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T02:05:49Z", "slug": "anti-slop", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.5, "trust_score_v2": 56.5, "rank_v2": 145, "rank_v2_delta": 715, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.3, "maintenance": 18.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "sympozium", "repo": "sympozium-ai/sympozium", "display_repo": "", "url": "https://github.com/sympozium-ai/sympozium", "listing_class": "agent", "rank": 769, "previous_rank": 763, "rank_delta": -6, "stars": 660, "stars_fmt": "660", "forks": 82, "forks_fmt": "82", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 339, "commits_low_confidence": false, "score": 75.8, "description": " The Coordination Layer for Multi-Agent AI", "language": "Go", "open_issues": 39, "category": "Multi-Agent Systems", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:15:29Z", "slug": "sympozium", "full_fetched_at": "2026-10-12T00:02:22Z", "source_note": "", "github_homepage": "https://sympozium.ai/", "homepage_icon": "/site-icons/c3b88e085f41af08.png", "homepage_icon_for": "https://sympozium.ai/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: charts/sympozium/files/mcp-servers/argocd.yaml", "Found MCP-related server path: charts/sympozium/files/mcp-servers/github.yaml", "Found MCP-related server docs path: docs/assets/screenshots/mcp-servers.png" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.5, "trust_score_v2": 56.5, "rank_v2": 769, "rank_v2_delta": 11, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 12.2, "maintenance": 20.0, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "FrontierAgent", "repo": "ApodexAI/FrontierAgent", "display_repo": "", "url": "https://github.com/ApodexAI/FrontierAgent", "listing_class": "agent", "rank": 770, "previous_rank": 764, "rank_delta": -6, "stars": 5236, "stars_fmt": "5.2k", "forks": 283, "forks_fmt": "283", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 84, "commits_low_confidence": false, "score": 82.8, "description": "🧩 FrontierAgent, our agent framework, open-sourced alongside it — native command-line TUI, ReAct and Agent Team modes, one command on macOS and Linux, no preinstall, no hard Docker dependency.", "language": "Python", "open_issues": 2, "category": "Agent Frameworks", "category_rank": 72, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:14:34Z", "slug": "frontieragent", "full_fetched_at": "2026-10-12T12:03:01Z", "source_note": "", "github_homepage": "https://www.apodex.ai", "homepage_icon": "/site-icons/6ebca6a83989c813.png", "homepage_icon_for": "https://www.apodex.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Browserbase", "E2B", "Firecrawl", "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Tavily dependency 'tavily' in pyproject.toml", "Found Firecrawl dependency 'firecrawl' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found declared path: plugins/__init__.py", "README/docs also mention a extension-based plugin/integration surface", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.4, "trust_score_v2": 56.4, "rank_v2": 770, "rank_v2_delta": -83, "trust_v2_adjustment": -4.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 13.1, "maintenance": 19.7, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "trpc-agent-go", "repo": "trpc-group/trpc-agent-go", "display_repo": "", "url": "https://github.com/trpc-group/trpc-agent-go", "listing_class": "agent", "rank": 771, "previous_rank": 762, "rank_delta": -9, "stars": 1860, "stars_fmt": "1.9k", "forks": 322, "forks_fmt": "322", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 20, "commits_low_confidence": false, "score": 72.8, "description": "A Go framework for building production agent systems with graph workflows, tools, memory, A2A, AG-UI, MCP, evaluation, and observability.", "language": "Go", "open_issues": 70, "category": "Agent Frameworks", "category_rank": 73, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:53:28Z", "slug": "trpc-agent-go", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "https://trpc-group.github.io/trpc-agent-go/", "homepage_icon": "/site-icons/00fb48369c885d33.png", "homepage_icon_for": "https://trpc-group.github.io/trpc-agent-go/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: examples/knowledge/features/code_context_engine/mcp/server.go", "Found MCP-related server path: openclaw/internal/browser/testdata/browser_mcp_server/main.go" ] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in examples/a2aadk/adk/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: examples/plugin/README.md", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in openclaw/browser-server/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.4, "trust_score_v2": 56.4, "rank_v2": 771, "rank_v2_delta": 11, "trust_v2_adjustment": -2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.2, "maintenance": 17.3, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Understand Anything", "repo": "Egonex-AI/Understand-Anything", "display_repo": "", "url": "https://github.com/Egonex-AI/Understand-Anything", "listing_class": "skill", "rank": 146, "previous_rank": 144, "rank_delta": -2, "stars": 86028, "stars_fmt": "86.0k", "forks": 7250, "forks_fmt": "7.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 12, "commits_low_confidence": false, "score": 86.5, "description": "Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more.", "language": "TypeScript", "open_issues": 117, "category": "Agent Skills", "category_rank": 146, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T19:01:39Z", "slug": "understand-anything", "full_fetched_at": "2026-10-12T12:03:09Z", "source_note": "", "github_homepage": "https://understand-anything.com/", "homepage_icon": "/site-icons/69b7652fa30d3a56.png", "homepage_icon_for": "https://understand-anything.com/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.4, "trust_score_v2": 56.4, "rank_v2": 146, "rank_v2_delta": 720, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.8, "maintenance": 16.4, "adoption": 11.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Council", "repo": "hex/claude-council", "display_repo": "", "url": "https://github.com/hex/claude-council", "listing_class": "skill", "rank": 147, "previous_rank": 143, "rank_delta": -4, "stars": 870, "stars_fmt": "870", "forks": 106, "forks_fmt": "106", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 367, "commits_low_confidence": false, "score": 77.0, "description": "Claude Code plugin that asks several AI coding agents the same question and shows their answers side by side. Gemini, OpenAI, Grok, Perplexity, Kimi and any model OpenRouter routes to over API; codex, antigravity, grok, kimi and cursor CLIs on subscription auth; ollama locally. Codex specialists…", "language": "Shell", "open_issues": 0, "category": "Agent Skills", "category_rank": 147, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:47:22Z", "slug": "claude-council", "full_fetched_at": "2026-10-12T16:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "OpenRouter", "Perplexity", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.3, "trust_score_v2": 56.3, "rank_v2": 147, "rank_v2_delta": 561, "trust_v2_adjustment": -3.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 13.9, "maintenance": 19.9, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Lumibot", "repo": "Lumiwealth/lumibot", "display_repo": "", "url": "https://github.com/Lumiwealth/lumibot", "listing_class": "agent", "rank": 772, "previous_rank": 767, "rank_delta": -5, "stars": 2119, "stars_fmt": "2.1k", "forks": 413, "forks_fmt": "413", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 391, "commits_low_confidence": false, "score": 82.2, "description": "AI agents that actually place the trade. 12 brokers, real backtests, stocks options futures forex crypto and prediction markets.", "language": "Python", "open_issues": 66, "category": "Research & Data", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-12T00:27:09Z", "slug": "lumibot", "full_fetched_at": "2026-10-12T04:02:50Z", "source_note": "", "github_homepage": "https://lumibot.lumiwealth.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in setup.py", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in setup.py", "README/docs also mention Google Gemini", "Found Multi-provider (LiteLLM) dependency 'litellm' in setup.py" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 56.3, "trust_score_v2": 56.3, "rank_v2": 772, "rank_v2_delta": -31, "trust_v2_adjustment": -3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 13.1, "maintenance": 20.0, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Aaron Marketing Skills", "repo": "aaron-he-zhu/aaron-marketing-skills", "display_repo": "", "url": "https://github.com/aaron-he-zhu/aaron-marketing-skills", "listing_class": "skill", "rank": 148, "previous_rank": 145, "rank_delta": -3, "stars": 2907, "stars_fmt": "2.9k", "forks": 373, "forks_fmt": "373", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 114, "commits_low_confidence": false, "score": 82.8, "description": "120 marketing skills as an AI marketing staff — plugin, portable skills, or an 8-bot team across 7 disciplines (narrative, SEO/GEO, social, email, paid, influencer, launch) on one contract, with 8 auditor gates: TALE · CORE-EEAT · CITE · ECHO · SEND · ROAS · STAR · RAMP.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 148, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:19:33Z", "slug": "aaron-marketing-skills", "full_fetched_at": "2026-10-12T08:02:17Z", "source_note": "", "github_homepage": "https://aaronmarketing.ai/", "homepage_icon": "/site-icons/2ad73ee7568aeb98.png", "homepage_icon_for": "https://aaronmarketing.ai/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.3, "trust_score_v2": 56.3, "rank_v2": 148, "rank_v2_delta": 725, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 12.1, "maintenance": 20.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "freebuff", "repo": "CodebuffAI/freebuff", "display_repo": "", "url": "https://github.com/CodebuffAI/freebuff", "listing_class": "agent", "rank": 773, "previous_rank": 769, "rank_delta": -4, "stars": 13473, "stars_fmt": "13.5k", "forks": 1435, "forks_fmt": "1.4k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2016, "commits_low_confidence": false, "score": 89.5, "description": "The free coding agent", "language": "TypeScript", "open_issues": 190, "category": "Coding Agents", "category_rank": 50, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 4, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:37:16Z", "slug": "freebuff", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "https://freebuff.com", "homepage_icon": "/site-icons/9a9855a9486d8cc3.png", "homepage_icon_for": "https://freebuff.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: common/src/mcp/__tests__/mapping-contract-server.ts", "Found MCP-related server test path: common/src/mcp/__tests__/parameterized-tools-server.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in sdk/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.3, "trust_score_v2": 56.3, "rank_v2": 773, "rank_v2_delta": 109, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 20.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "HelloAgents", "repo": "jjyaoao/HelloAgents", "display_repo": "", "url": "https://github.com/jjyaoao/HelloAgents", "listing_class": "skill", "rank": 149, "previous_rank": 146, "rank_delta": -3, "stars": 3205, "stars_fmt": "3.2k", "forks": 727, "forks_fmt": "727", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 2, "commits_low_confidence": true, "score": 64.5, "description": "A agent framework based on the tutorial hello-agents", "language": "Python", "open_issues": 25, "category": "Agent Skills", "category_rank": 149, "npm_package": "", "crate_package": "", "pypi_package": "hello-agents", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1204, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.28, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:40:18Z", "slug": "helloagents", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/tools/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "Qdrant" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'qdrant' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'hello-agents' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "hello-agents", "version": "1.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:52Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 56.2, "trust_score_v2": 56.2, "rank_v2": 149, "rank_v2_delta": 782, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.2, "maintenance": 12.6, "adoption": 12.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Git MCP Server", "repo": "cyanheads/git-mcp-server", "display_repo": "", "url": "https://github.com/cyanheads/git-mcp-server", "listing_class": "agent", "rank": 774, "previous_rank": 770, "rank_delta": -4, "stars": 241, "stars_fmt": "241", "forks": 57, "forks_fmt": "57", "last_push": "2026-09-26", "days_ago": 16, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.4, "description": "Clone, commit, diff, branch, merge, rebase, cherry-pick, stash, tag, and manage worktrees in local git repos via MCP. STDIO or Streamable HTTP.", "language": "TypeScript", "open_issues": 15, "category": "MCP Servers", "category_rank": 417, "npm_package": "@cyanheads/git-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2936, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:11:00Z", "slug": "git-mcp-server", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server/prompts/definitions/git-wrapup.prompt.ts", "Found MCP-related server path: src/mcp-server/prompts/definitions/index.ts", "Found MCP-related server test path: tests/mcp-server/prompts/definitions/git-wrapup.prompt.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_AUTH_SECRET_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@cyanheads/git-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@cyanheads/git-mcp-server", "version": "2.15.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:58Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 56.2, "trust_score_v2": 56.2, "rank_v2": 774, "rank_v2_delta": 327, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 10.8, "maintenance": 10.9, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Audio File MCP App", "repo": "counterpoint-studio/audio-file-mcp-app", "display_repo": "", "url": "https://github.com/counterpoint-studio/audio-file-mcp-app", "listing_class": "agent", "rank": 775, "previous_rank": 771, "rank_delta": -4, "stars": 43, "stars_fmt": "43", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 12, "commits_low_confidence": false, "score": 51.2, "description": "An MCP App for playing and inspecting local audio files in an MCP host.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 418, "npm_package": "@counterpoint-studio/audio-file-mcp-app", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 37, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.041, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:58:44Z", "slug": "audio-file-mcp-app", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@counterpoint-studio/audio-file-mcp-app' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@counterpoint-studio/audio-file-mcp-app", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:57Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "ISC", "license_type": "open", "license_override": "", "trust_score": 56.1, "trust_score_v2": 56.1, "rank_v2": 775, "rank_v2_delta": 282, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 12.7, "maintenance": 16.2, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Probe Kit", "repo": "mybolide/mcp-probe-kit", "display_repo": "", "url": "https://github.com/mybolide/mcp-probe-kit", "listing_class": "agent", "rank": 776, "previous_rank": 772, "rank_delta": -4, "stars": 39, "stars_fmt": "39", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 11, "commits_low_confidence": false, "score": 51.1, "description": "Spec-driven dev workflow MCP for Cursor & AI agents — start_feature/bugfix orchestration, auto Skill+AGENTS bootstrap, memory, GitNexus. npx -y mcp-probe-kit@latest", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 419, "npm_package": "mcp-probe-kit", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 680, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:07:46Z", "slug": "mcp-probe-kit", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://mcp-probe-kit.bytezonex.com/", "homepage_icon": "/site-icons/cea8600a9ac9abfa.png", "homepage_icon_for": "https://mcp-probe-kit.bytezonex.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Qdrant" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Qdrant credential/config marker 'QDRANT_API_KEY'", "README/docs also mention Qdrant" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-probe-kit' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-probe-kit", "version": "4.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:05Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.1, "trust_score_v2": 56.1, "rank_v2": 776, "rank_v2_delta": 333, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.8, "maintenance": 16.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Power Bi Agentic Development", "repo": "data-goblin/power-bi-agentic-development", "display_repo": "", "url": "https://github.com/data-goblin/power-bi-agentic-development", "listing_class": "skill", "rank": 150, "previous_rank": 147, "rank_delta": -3, "stars": 1037, "stars_fmt": "1.0k", "forks": 149, "forks_fmt": "149", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 113, "commits_low_confidence": false, "score": 78.1, "description": "Power BI AI skills and Power BI agents for Claude Code and GitHub Copilot: a plugin marketplace of Power BI skills, subagents, and hooks for semantic models, DAX, TMDL, reports, and AI dashboards. Includes Microsoft Fabric skills and Fabric agents. Weekly updates.", "language": "C#", "open_issues": 0, "category": "Agent Skills", "category_rank": 150, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 6, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:33:49Z", "slug": "power-bi-agentic-development", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "https://data-goblins.com", "homepage_icon": "/site-icons/0db38990f4b37617.png", "homepage_icon_for": "https://data-goblins.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/custom-visuals/skills/powerbi-custom-visuals/references/mcp-server.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/custom-visuals/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 56.1, "trust_score_v2": 56.1, "rank_v2": 150, "rank_v2_delta": 803, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.7, "maintenance": 19.9, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Skills for Context Engineering", "repo": "muratcankoylan/Agent-Skills-for-Context-Engineering", "display_repo": "", "url": "https://github.com/muratcankoylan/Agent-Skills-for-Context-Engineering", "listing_class": "skill", "rank": 151, "previous_rank": 174, "rank_delta": 23, "stars": 18112, "stars_fmt": "18.1k", "forks": 1498, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 11, "commits_low_confidence": false, "score": 78.8, "description": "A comprehensive collection of Agent Skills for context engineering, multi-agent architectures, and production agent systems. Use when building, optimizing, or debugging agent systems that require effective context management.", "language": "Python", "open_issues": 17, "category": "Agent Skills", "category_rank": 151, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.7, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T23:04:21Z", "slug": "agent-skills-for-context-engineering", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in examples/llm-as-judge-skills/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in examples/llm-as-judge-skills/package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.1, "trust_score_v2": 56.1, "rank_v2": 151, "rank_v2_delta": 702, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 11.6, "maintenance": 16.3, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Qiushi Skill", "repo": "HughYau/qiushi-skill", "display_repo": "", "url": "https://github.com/HughYau/qiushi-skill", "listing_class": "skill", "rank": 152, "previous_rank": 150, "rank_delta": -2, "stars": 3814, "stars_fmt": "3.8k", "forks": 287, "forks_fmt": "287", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 3, "commits_low_confidence": false, "score": 63.9, "description": "Qiushi-Skill: Build agents that investigate first, focus on the main contradiction, validate in practice, and keep pushing until the work is actually done. 求是Skill——从经典唯物辩证法与实践哲学中提炼出一条总原则和九大方法论工具武装AI大脑。", "language": "JavaScript", "open_issues": 20, "category": "Agent Skills", "category_rank": 152, "npm_package": "qiushi-skill", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 36, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.265, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:58:56Z", "slug": "qiushi-skill", "full_fetched_at": "2026-10-12T16:02:26Z", "source_note": "", "github_homepage": "http://hughyau.com/qiushi-skill/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'qiushi-skill' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "qiushi-skill", "version": "2.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:26Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.1, "trust_score_v2": 56.1, "rank_v2": 152, "rank_v2_delta": 886, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.5, "maintenance": 13.7, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenSTAAD MCP Server", "repo": "BentleySystems/openstaad-mcp", "display_repo": "", "url": "https://github.com/BentleySystems/openstaad-mcp", "listing_class": "agent", "rank": 777, "previous_rank": 773, "rank_delta": -4, "stars": 50, "stars_fmt": "50", "forks": 13, "forks_fmt": "13", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 5, "commits_low_confidence": true, "score": 49.6, "description": "openstaad-mcp is an MCP Server enabling AI Agents to interact with STAAD.Pro", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 420, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.963, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T16:56:19Z", "slug": "openstaad-mcp-server", "full_fetched_at": "2026-10-12T12:02:41Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.0, "trust_score_v2": 56.0, "rank_v2": 777, "rank_v2_delta": 192, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.3, "identity": 10.8, "transparency": 13.6, "maintenance": 13.2, "adoption": 4.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Arr", "repo": "aplaceforallmystuff/mcp-arr", "display_repo": "", "url": "https://github.com/aplaceforallmystuff/mcp-arr", "listing_class": "agent", "rank": 778, "previous_rank": 777, "rank_delta": -1, "stars": 224, "stars_fmt": "224", "forks": 41, "forks_fmt": "41", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.8, "description": "MCP server for *arr media management suite", "language": "JavaScript", "open_issues": 10, "category": "MCP Servers", "category_rank": 421, "npm_package": "mcp-arr-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 503, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.094, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T23:30:55Z", "slug": "mcp-arr", "full_fetched_at": "2026-10-12T08:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SONARR_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-arr-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-arr-server", "version": "1.7.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:43Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.0, "trust_score_v2": 56.0, "rank_v2": 778, "rank_v2_delta": 338, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 12.9, "maintenance": 11.1, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Code Hooks", "repo": "karanb192/claude-code-hooks", "display_repo": "", "url": "https://github.com/karanb192/claude-code-hooks", "listing_class": "skill", "rank": 153, "previous_rank": 148, "rank_delta": -5, "stars": 542, "stars_fmt": "542", "forks": 40, "forks_fmt": "40", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 11, "commits_low_confidence": false, "score": 61.3, "description": "🪝 Claude Code hooks + an installable plugin marketplace: safety, cost, observability, productivity.", "language": "JavaScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 153, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 0, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.862, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:37:50Z", "slug": "claude-code-hooks", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "https://hooks.karanbansal.in", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/auto-stage/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.0, "trust_score_v2": 56.0, "rank_v2": 153, "rank_v2_delta": 731, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.7, "maintenance": 15.8, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ref Tools MCP", "repo": "ref-tools/ref-tools-mcp", "display_repo": "", "url": "https://github.com/ref-tools/ref-tools-mcp", "listing_class": "agent", "rank": 779, "previous_rank": 782, "rank_delta": 3, "stars": 1180, "stars_fmt": "1.2k", "forks": 71, "forks_fmt": "71", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 4, "commits_low_confidence": false, "score": 59.3, "description": "Helping coding agents never make mistakes working with public or private libraries without wasting the context window.", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 422, "npm_package": "ref-tools-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1010, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.279, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 3, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T11:47:32Z", "slug": "ref-tools-mcp", "full_fetched_at": "2026-10-12T00:01:55Z", "source_note": "", "github_homepage": "http://ref.tools", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'REF_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'ref-tools-mcp' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ref-tools-mcp", "version": "3.0.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:55Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.0, "trust_score_v2": 56.0, "rank_v2": 779, "rank_v2_delta": 154, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.1, "maintenance": 14.1, "adoption": 11.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "waku-agent", "repo": "ShenSeanChen/waku-agent", "display_repo": "", "url": "https://github.com/ShenSeanChen/waku-agent", "listing_class": "agent", "rank": 780, "previous_rank": 784, "rank_delta": 4, "stars": 1990, "stars_fmt": "2.0k", "forks": 398, "forks_fmt": "398", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 124, "commits_low_confidence": false, "score": 81.9, "description": "Waku Waku! Waku Agent is a local-first AI agent harness you actually own, including loop, memory, eval, all in code built to stay legible as it grows.", "language": "Python", "open_issues": 17, "category": "Agent Frameworks", "category_rank": 74, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.72, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:12:03Z", "slug": "waku-agent", "full_fetched_at": "2026-10-12T00:02:09Z", "source_note": "", "github_homepage": "https://waku.one", "homepage_icon": "/site-icons/9c1cca881e041e70.png", "homepage_icon_for": "https://waku.one", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Supabase dependency 'supabase' in pyproject.toml", "README/docs also mention Supabase" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: lab/pi-agent/pokedex/extensions/pokemon-battle.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 56.0, "trust_score_v2": 56.0, "rank_v2": 780, "rank_v2_delta": 45, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 11.3, "maintenance": 19.9, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Virustotal", "repo": "w0h1v/mcp-virustotal", "display_repo": "", "url": "https://github.com/w0h1v/mcp-virustotal", "listing_class": "agent", "rank": 781, "previous_rank": 798, "rank_delta": 17, "stars": 151, "stars_fmt": "151", "forks": 23, "forks_fmt": "23", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 13, "commits_low_confidence": false, "score": 58.8, "description": "MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 423, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.289, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:47:32Z", "slug": "mcp-virustotal", "full_fetched_at": "2026-10-12T00:02:36Z", "source_note": "", "github_homepage": "https://w0h1v.github.io/mcp-virustotal/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VIRUSTOTAL_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 781, "rank_v2_delta": 154, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 13.5, "maintenance": 16.6, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PentAGI", "repo": "vxcontrol/pentagi", "display_repo": "", "url": "https://github.com/vxcontrol/pentagi", "listing_class": "agent", "rank": 782, "previous_rank": 776, "rank_delta": -6, "stars": 26202, "stars_fmt": "26.2k", "forks": 3556, "forks_fmt": "3.6k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 9, "commits_low_confidence": true, "score": 80.2, "description": "Fully autonomous AI Agents system capable of performing complex penetration testing tasks", "language": "Go", "open_issues": 12, "category": "Security & Guardrails", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:25:49Z", "slug": "pentagi", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "https://pentagi.com", "homepage_icon": "/site-icons/47d2374a865078fa.png", "homepage_icon_for": "https://pentagi.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Firecrawl", "Google Gemini", "Mistral AI", "Perplexity", "Postgres", "Tavily", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini", "Found Mistral AI credential/config marker 'MISTRAL_API_KEY'", "README/docs also mention Mistral AI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: examples/neo4j/plugins/LICENSE.txt", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 782, "rank_v2_delta": -82, "trust_v2_adjustment": -4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 13.2, "maintenance": 13.8, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Astron Agent", "repo": "iflytek/astron-agent", "display_repo": "", "url": "https://github.com/iflytek/astron-agent", "listing_class": "agent", "rank": 783, "previous_rank": 793, "rank_delta": 10, "stars": 8893, "stars_fmt": "8.9k", "forks": 895, "forks_fmt": "895", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 20, "commits_low_confidence": false, "score": 78.6, "description": "Enterprise-grade, commercial-friendly agentic workflow platform for building next-generation SuperAgents.", "language": "Java", "open_issues": 36, "category": "Workflow Platforms", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.48, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 2, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:34:45Z", "slug": "astron-agent", "full_fetched_at": "2026-10-12T04:02:46Z", "source_note": "", "github_homepage": "http://astron.ai/", "homepage_icon": "/site-icons/7a40fbf9d183c5b9.png", "homepage_icon_for": "http://astron.ai/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: console/backend/hub/src/main/resources/db/migration/V1.37__add_bot_mcp_server_urls.sql", "Found MCP-related server path: console/backend/toolkit/src/main/resources/mcp-server/iat.json", "Found MCP-related server test path: console/backend/toolkit/src/test/resources/mcp-servers/test-server-1.json", "Found MCP-related server test path: core/plugin/link/tests/unit/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "E2B", "Google Gemini", "OpenAI", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in core/agent/pyproject.toml", "Found Anthropic dependency 'anthropic' in core/workflow/pyproject.toml", "Found Google Gemini dependency 'google-genai' in core/workflow/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in core/agent/pyproject.toml", "Found E2B dependency 'e2b' in core/agent/pyproject.toml", "Found Redis dependency 'redis' in core/agent/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: console/frontend/src/assets/imgs/chat/plugin/code.svg", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'redis' in core/agent/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 783, "rank_v2_delta": -29, "trust_v2_adjustment": -3.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 12.8, "maintenance": 17.1, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Steel Browser", "repo": "steel-dev/steel-browser", "display_repo": "", "url": "https://github.com/steel-dev/steel-browser", "listing_class": "agent", "rank": 784, "previous_rank": 780, "rank_delta": -4, "stars": 7789, "stars_fmt": "7.8k", "forks": 994, "forks_fmt": "994", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 5, "commits_low_confidence": true, "score": 71.6, "description": "🔥 Open Source Browser API for AI Agents & Apps. Steel Browser is a batteries-included browser sandbox that lets you automate the web without worrying about infrastructure.", "language": "TypeScript", "open_issues": 39, "category": "Browser & Computer Use", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T23:50:09Z", "slug": "steel-browser", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "https://steel.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found extension-based path: api/extensions/recorder/.gitignore", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'puppeteer' in api/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 784, "rank_v2_delta": 78, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 12.5, "maintenance": 13.4, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Vibe Check MCP Server", "repo": "PV-Bhat/vibe-check-mcp-server", "display_repo": "", "url": "https://github.com/PV-Bhat/vibe-check-mcp-server", "listing_class": "agent", "rank": 785, "previous_rank": 778, "rank_delta": -7, "stars": 502, "stars_fmt": "502", "forks": 66, "forks_fmt": "66", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 0, "commits_low_confidence": false, "score": 48.0, "description": "Vibe Check is a tool that provides mentor-like feedback to AI Agents, preventing tunnel-vision, over-engineering and reasoning lock-in for complex and long-horizon agent workflows. KISS your over-eager AI Agents goodbye! Effective for: Coding, Ambiguous Tasks, High-Risk tasks", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 424, "npm_package": "@pv-bhat/vibe-check-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 109, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.73, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:48:35Z", "slug": "vibe-check-mcp-server", "full_fetched_at": "2026-10-12T00:02:03Z", "source_note": "", "github_homepage": "https://pruthvibhat.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found shell dependency 'execa' in package.json", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@pv-bhat/vibe-check-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@pv-bhat/vibe-check-mcp", "version": "2.7.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:03Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 785, "rank_v2_delta": 242, "trust_v2_adjustment": 3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 12.3, "maintenance": 11.1, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Imagenate", "repo": "mimo-3/mcp-imagenate", "display_repo": "", "url": "https://github.com/mimo-3/mcp-imagenate", "listing_class": "agent", "rank": 786, "previous_rank": 742, "rank_delta": -44, "stars": 15, "stars_fmt": "15", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 7, "commits_low_confidence": false, "score": 45.0, "description": "An MCP server for image generation with Gemini, OpenAI gpt-image, BFL FLUX, and Reve", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 425, "npm_package": "mcp-imagenate", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 334, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.31, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-02T06:52:29Z", "slug": "mcp-imagenate", "full_fetched_at": "2026-10-11T20:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency '@google/genai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-imagenate' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-imagenate", "version": "0.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 786, "rank_v2_delta": 306, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.2, "maintenance": 15.2, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pm Skills", "repo": "phuryn/pm-skills", "display_repo": "", "url": "https://github.com/phuryn/pm-skills", "listing_class": "skill", "rank": 154, "previous_rank": 151, "rank_delta": -3, "stars": 26918, "stars_fmt": "26.9k", "forks": 2845, "forks_fmt": "2.8k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 18, "commits_low_confidence": false, "score": 83.3, "description": "PM Skills Marketplace: 100+ agentic skills, commands, and plugins — from discovery to strategy, execution, launch, and growth.", "language": "", "open_issues": 26, "category": "Agent Skills", "category_rank": 154, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.425, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T20:53:12Z", "slug": "pm-skills", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "https://www.productcompass.pm/p/pm-skills-2-red-team-ship", "homepage_icon": "/site-icons/bf5b8602bc877e54.png", "homepage_icon_for": "https://www.productcompass.pm/p/pm-skills-2-red-team-ship", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (pm-ai-shipping/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 154, "rank_v2_delta": 733, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 11.4, "maintenance": 17.0, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fr24api MCP", "repo": "Flightradar24/fr24api-mcp", "display_repo": "", "url": "https://github.com/Flightradar24/fr24api-mcp", "listing_class": "agent", "rank": 787, "previous_rank": 788, "rank_delta": 1, "stars": 30, "stars_fmt": "30", "forks": 3, "forks_fmt": "3", "last_push": "2026-01-22", "days_ago": 263, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.7, "description": "Official Flightradar24 API MCP", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 426, "npm_package": "@flightradar24/fr24api-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1303, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.562, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:02:40Z", "slug": "fr24api-mcp", "full_fetched_at": "2026-10-12T16:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FR24_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@flightradar24/fr24api-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@flightradar24/fr24api-mcp", "version": "1.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:03Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.9, "trust_score_v2": 55.9, "rank_v2": 787, "rank_v2_delta": 334, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.1, "identity": 18.0, "transparency": 11.1, "maintenance": 0.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Glif", "repo": "glifxyz/glif-mcp-server", "display_repo": "", "url": "https://github.com/glifxyz/glif-mcp-server", "listing_class": "agent", "rank": 788, "previous_rank": 779, "rank_delta": -9, "stars": 213, "stars_fmt": "213", "forks": 31, "forks_fmt": "31", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 4, "commits_low_confidence": true, "score": 54.3, "description": "Glif's hosted MCP server, plugin and skills for creating images, video and audio. Works with Claude, ChatGPT, Codex, Cursor and more.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 427, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.918, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:41:31Z", "slug": "glif", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "https://glif.app/mcp", "homepage_icon": "/site-icons/9d14f6774b6efac2.png", "homepage_icon_for": "https://glif.app/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.8, "trust_score_v2": 55.8, "rank_v2": 788, "rank_v2_delta": 161, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.7, "identity": 10.8, "transparency": 13.3, "maintenance": 13.2, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Local Memory", "repo": "studiomeyer-io/local-memory-mcp", "display_repo": "", "url": "https://github.com/studiomeyer-io/local-memory-mcp", "listing_class": "agent", "rank": 789, "previous_rank": 802, "rank_delta": 13, "stars": 14, "stars_fmt": "14", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 48.5, "description": "Persistent local memory for Claude, Cursor & Codex. 21 MCP tools, hybrid retrieval (BM25 + vector RRF), bi-temporal queries, contradiction detection. SQLite + Knowledge Graph. No cloud, no API keys. npx @studiomeyer/local-memory-mcp", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 428, "npm_package": "@studiomeyer/local-memory-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 87, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.263, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T01:31:56Z", "slug": "local-memory", "full_fetched_at": "2026-10-12T00:02:28Z", "source_note": "", "github_homepage": "https://matthiasmeyer.tech/repos/local-memory-mcp", "homepage_icon": "/site-icons/20accf1c668b1e12.png", "homepage_icon_for": "https://matthiasmeyer.tech/repos/local-memory-mcp", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@studiomeyer/local-memory-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@studiomeyer/local-memory-mcp", "version": "2.4.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:28Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.8, "trust_score_v2": 55.8, "rank_v2": 789, "rank_v2_delta": 283, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 13.3, "maintenance": 14.0, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "JS Reverse MCP", "repo": "zhizhuodemao/js-reverse-mcp", "display_repo": "", "url": "https://github.com/zhizhuodemao/js-reverse-mcp", "listing_class": "agent", "rank": 790, "previous_rank": 781, "rank_delta": -9, "stars": 2937, "stars_fmt": "2.9k", "forks": 378, "forks_fmt": "378", "last_push": "2026-09-03", "days_ago": 39, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.4, "description": "AI Agent-first JS 逆向 MCP Server：有头 Chrome 调试、断点、网络/WebSocket 分析、Patchright 反检测，可选 CloakBrowser。", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 429, "npm_package": "js-reverse-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1134, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:06:35Z", "slug": "js-reverse-mcp", "full_fetched_at": "2026-10-12T04:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_ROUTING_EVAL_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'js-reverse-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "js-reverse-mcp", "version": "4.0.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:22Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.8, "trust_score_v2": 55.8, "rank_v2": 790, "rank_v2_delta": 335, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.4, "maintenance": 9.4, "adoption": 12.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SeedanceMCP", "repo": "AceDataCloud/SeedanceMCP", "display_repo": "", "url": "https://github.com/AceDataCloud/SeedanceMCP", "listing_class": "agent", "rank": 791, "previous_rank": 760, "rank_delta": -31, "stars": 20, "stars_fmt": "20", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 46.8, "description": "MCP server for ByteDance Seedance video generation via Ace Data Cloud.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 430, "npm_package": "", "crate_package": "", "pypi_package": "mcp-seedance", "docker_image": "", "vscode_extension": "", "weekly_downloads": 731, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.27, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T18:06:12Z", "slug": "seedancemcp", "full_fetched_at": "2026-10-12T08:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "Found credential/config marker 'ACEDATACLOUD_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-seedance' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-seedance", "version": "2026.10.12.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:23Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.8, "trust_score_v2": 55.8, "rank_v2": 791, "rank_v2_delta": 319, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 12.3, "maintenance": 14.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Xpert AI", "repo": "xpert-ai/xpert", "display_repo": "", "url": "https://github.com/xpert-ai/xpert", "listing_class": "agent", "rank": 792, "previous_rank": 786, "rank_delta": -6, "stars": 465, "stars_fmt": "465", "forks": 89, "forks_fmt": "89", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 608, "commits_low_confidence": false, "score": 75.1, "description": "XpertAI is an open-source platform for building, running, and evolving ai agents, providing extensible capabilities and infrastructure for diverse AI systems.", "language": "TypeScript", "open_issues": 74, "category": "Workflow Platforms", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 5, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:51:30Z", "slug": "xpert-ai", "full_fetched_at": "2026-10-12T16:02:15Z", "source_note": "", "github_homepage": "https://xpertai.cn/en/", "homepage_icon": "/site-icons/637ac90fb2580bda.png", "homepage_icon_for": "https://xpertai.cn/en/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: apps/cloud/src/app/@shared/mcp/server/server.component.html", "Found MCP-related server path: apps/cloud/src/app/@shared/mcp/server/server.component.scss", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in apps/cloud/package.json", "Found Postgres dependency 'pg' in package.json", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found marketplace path: apps/cloud/src/app/@core/state/marketplace/plugin-marketplace-cache.spec.ts", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'pg' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 55.8, "trust_score_v2": 55.8, "rank_v2": 792, "rank_v2_delta": 110, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.3, "maintenance": 20.0, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -1.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "FinRobot", "repo": "AI4Finance-Foundation/FinRobot", "display_repo": "", "url": "https://github.com/AI4Finance-Foundation/FinRobot", "listing_class": "agent", "rank": 793, "previous_rank": 787, "rank_delta": -6, "stars": 8202, "stars_fmt": "8.2k", "forks": 1386, "forks_fmt": "1.4k", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 19, "commits_low_confidence": false, "score": 77.4, "description": "FinRobot: An Open-Source AI Agent Platform for Financial Applications using Large Language Models", "language": "Python", "open_issues": 60, "category": "Research & Data", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.68, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:21:37Z", "slug": "finrobot", "full_fetched_at": "2026-10-12T04:02:45Z", "source_note": "", "github_homepage": "https://finrobot.ai", "homepage_icon": "/site-icons/1b1f5f56041b9843.png", "homepage_icon_for": "https://finrobot.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in finrobot_equity/requirements.txt", "README/docs also mention OpenAI", "Found Postgres dependency 'pg' in finrobot_equity/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in finrobot_equity/requirements.txt" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.8, "trust_score_v2": 55.8, "rank_v2": 793, "rank_v2_delta": 81, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 11.8, "maintenance": 16.3, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Browser Tools MCP", "repo": "AgentDeskAI/browser-tools-mcp", "display_repo": "", "url": "https://github.com/AgentDeskAI/browser-tools-mcp", "listing_class": "agent", "rank": 794, "previous_rank": 783, "rank_delta": -11, "stars": 7329, "stars_fmt": "7.3k", "forks": 535, "forks_fmt": "535", "last_push": "2026-08-12", "days_ago": 61, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.6, "description": "Monitor browser logs directly from Cursor and other MCP compatible IDEs.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 431, "npm_package": "@agentdeskai/browser-tools-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3024, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:16:23Z", "slug": "browser-tools-mcp", "full_fetched_at": "2026-10-12T08:02:40Z", "source_note": "", "github_homepage": "https://agentdesk.ai/", "homepage_icon": "/site-icons/0afb277d240e8059.png", "homepage_icon_for": "https://agentdesk.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: browser-tools-mcp/src/mcp/server.ts", "Found MCP-related server test path: browser-tools-mcp/test/integration/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in browser-tools-mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@agentdeskai/browser-tools-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@agentdeskai/browser-tools-mcp", "version": "2.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:40Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.8, "trust_score_v2": 55.8, "rank_v2": 794, "rank_v2_delta": 375, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.5, "maintenance": 7.9, "adoption": 13.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Blog", "repo": "AgriciDaniel/claude-blog", "display_repo": "", "url": "https://github.com/AgriciDaniel/claude-blog", "listing_class": "skill", "rank": 155, "previous_rank": 152, "rank_delta": -3, "stars": 2368, "stars_fmt": "2.4k", "forks": 402, "forks_fmt": "402", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 0, "commits_low_confidence": true, "score": 56.9, "description": "Claude Code blog skill suite: 30 sub-skills, 5 agents, 5-gate v1.9.0 Blog Delivery Contract, dual-optimized for Google rankings and AI citations. Active development at AI-Marketing-Hub/claude-blog (AI Marketing Hub Pro community); public releases ship here.", "language": "Python", "open_issues": 3, "category": "Agent Skills", "category_rank": 155, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.49, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:54:55Z", "slug": "claude-blog", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://claude-blog.md", "homepage_icon": "/site-icons/56ac4a2e79acbd06.png", "homepage_icon_for": "https://claude-blog.md", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.7, "trust_score_v2": 55.7, "rank_v2": 155, "rank_v2_delta": 797, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 13.7, "maintenance": 11.8, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Rails Upgrade Skill", "repo": "ombulabs/claude-code_rails-upgrade-skill", "display_repo": "", "url": "https://github.com/ombulabs/claude-code_rails-upgrade-skill", "listing_class": "skill", "rank": 156, "previous_rank": 154, "rank_delta": -2, "stars": 391, "stars_fmt": "391", "forks": 18, "forks_fmt": "18", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 203, "commits_low_confidence": false, "score": 70.0, "description": "🤖 The one and only Claude Code Skill to Upgrade Rails by FastRuby.io -- Based on 60,000 dev/hours of experience upgrading Rails from 2.3 all the way to 8.1. Dual boot your Rails application and gradually upgrade one minor version at a time. 🚀", "language": "Ruby", "open_issues": 9, "category": "Agent Skills", "category_rank": 156, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.11, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:11:05Z", "slug": "claude-code-rails-upgrade-skill", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "https://www.fastruby.io/blog/open-source-claude-code-skill-for-rails-upgrades.html", "homepage_icon": "/site-icons/c3c7faf87ecc3892.png", "homepage_icon_for": "https://www.fastruby.io/blog/open-source-claude-code-skill-for-rails-upgrades.html", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.7, "trust_score_v2": 55.7, "rank_v2": 156, "rank_v2_delta": 732, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.8, "maintenance": 19.3, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Hivemind", "repo": "activeloopai/hivemind", "display_repo": "", "url": "https://github.com/activeloopai/hivemind", "listing_class": "agent", "rank": 795, "previous_rank": 792, "rank_delta": -3, "stars": 1621, "stars_fmt": "1.6k", "forks": 113, "forks_fmt": "113", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 56, "commits_low_confidence": false, "score": 73.9, "description": "Hivemind turns your traces into reusable skills across agents", "language": "TypeScript", "open_issues": 73, "category": "Needs review", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-25T18:33:06Z", "slug": "hivemind", "full_fetched_at": "2026-10-12T04:02:07Z", "source_note": "", "github_homepage": "https://deeplake.ai/hivemind", "homepage_icon": "/site-icons/08e49b8b1f6f3764.png", "homepage_icon_for": "https://deeplake.ai/hivemind", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.ts", "Found MCP-related server test path: tests/claude-code/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found credential/config marker 'HIVEMIND_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.7, "trust_score_v2": 55.7, "rank_v2": 795, "rank_v2_delta": 134, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.3, "maintenance": 18.1, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Chatbox", "repo": "chatboxai/chatbox", "display_repo": "", "url": "https://github.com/chatboxai/chatbox", "listing_class": "skill", "rank": 157, "previous_rank": 153, "rank_delta": -4, "stars": 42001, "stars_fmt": "42.0k", "forks": 4272, "forks_fmt": "4.3k", "last_push": "2026-09-24", "days_ago": 18, "weekly_commits": 22, "commits_low_confidence": false, "score": 84.1, "description": "Powerful AI Client", "language": "TypeScript", "open_issues": 1211, "category": "Agent Skills", "category_rank": 157, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:52:29Z", "slug": "chatbox", "full_fetched_at": "2026-10-12T16:02:15Z", "source_note": "", "github_homepage": "https://chatboxai.app?utm_medium=github", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: src/renderer/components/settings/mcp/BuiltinServersSection.tsx", "Found MCP-related server path: src/renderer/components/settings/mcp/CustomServersSection.tsx", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in release/app/package.json", "Found Cohere dependency 'cohere-ai' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "filesystem" ], "confidence": "medium", "evidence": [ "Found filesystem dependency 'fs-extra' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 55.7, "trust_score_v2": 55.7, "rank_v2": 157, "rank_v2_delta": 793, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.6, "maintenance": 16.2, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Awesome Copilot MCP Server", "repo": "microsoft/mcp-dotnet-samples", "display_repo": "", "url": "https://github.com/microsoft/mcp-dotnet-samples", "listing_class": "agent", "rank": 796, "previous_rank": 789, "rank_delta": -7, "stars": 198, "stars_fmt": "198", "forks": 63, "forks_fmt": "63", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 11, "commits_low_confidence": false, "score": 60.3, "description": "A comprehensive set of samples of creating and using MCP servers and clients with .NET", "language": "C#", "open_issues": 1, "category": "MCP Servers", "category_rank": 432, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/microsoft/mcp-dotnet-samples/awesome-copilot:1.0.2026080605", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T17:53:25Z", "slug": "awesome-copilot-mcp-server", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://aka.ms/mcp/dotnet/samples", "homepage_icon": "/site-icons/f32e12cc8e0875ff.png", "homepage_icon_for": "https://aka.ms/mcp/dotnet/samples", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: markdown-to-html/src/McpSamples.MarkdownToHtml.HybridApp/Extensions/ServiceCollectionExtensions.cs", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.6, "trust_score_v2": 55.6, "rank_v2": 796, "rank_v2_delta": 163, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 13.8, "maintenance": 16.1, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Han", "repo": "testdouble/han", "display_repo": "", "url": "https://github.com/testdouble/han", "listing_class": "skill", "rank": 158, "previous_rank": 155, "rank_delta": -3, "stars": 281, "stars_fmt": "281", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 8, "commits_low_confidence": false, "score": 56.6, "description": "Han: AI skills and agents for \"Solo\" product engineers and small teams", "language": "Shell", "open_issues": 13, "category": "Agent Skills", "category_rank": 158, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 5.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T03:37:34Z", "slug": "han", "full_fetched_at": "2026-10-12T00:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (han-atlassian/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.6, "trust_score_v2": 55.6, "rank_v2": 158, "rank_v2_delta": 814, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 13.5, "maintenance": 15.1, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Devkit Server", "repo": "mapbox/mcp-devkit-server", "display_repo": "", "url": "https://github.com/mapbox/mcp-devkit-server", "listing_class": "agent", "rank": 797, "previous_rank": 790, "rank_delta": -7, "stars": 61, "stars_fmt": "61", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.2, "description": "Developer-focused Mapbox MCP Server", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 433, "npm_package": "@mapbox/mcp-devkit-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 710, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.57, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:40:50Z", "slug": "mcp-devkit-server", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/mcp_server_devkit.gif", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MAPBOX_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mapbox/mcp-devkit-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mapbox/mcp-devkit-server", "version": "0.8.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:55Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.6, "trust_score_v2": 55.6, "rank_v2": 797, "rank_v2_delta": 336, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 12.8, "maintenance": 9.8, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Container Use", "repo": "dagger/container-use", "display_repo": "", "url": "https://github.com/dagger/container-use", "listing_class": "agent", "rank": 798, "previous_rank": 791, "rank_delta": -7, "stars": 4069, "stars_fmt": "4.1k", "forks": 212, "forks_fmt": "212", "last_push": "2026-09-21", "days_ago": 21, "weekly_commits": 0, "commits_low_confidence": false, "score": 54.6, "description": "Development environments for coding agents. Enable multiple agents to work safely and independently with your preferred stack.", "language": "Go", "open_issues": 47, "category": "Sandboxes & Runtimes", "category_rank": 7, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:40:25Z", "slug": "container-use", "full_fetched_at": "2026-10-12T04:02:26Z", "source_note": "", "github_homepage": "https://container-use.com", "homepage_icon": "/site-icons/7e6ffcb2111cb25a.png", "homepage_icon_for": "https://container-use.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.6, "trust_score_v2": 55.6, "rank_v2": 798, "rank_v2_delta": 188, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 12.6, "maintenance": 10.6, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Abap Adt", "repo": "mario-andreschak/mcp-abap-adt", "display_repo": "", "url": "https://github.com/mario-andreschak/mcp-abap-adt", "listing_class": "agent", "rank": 799, "previous_rank": 794, "rank_delta": -5, "stars": 199, "stars_fmt": "199", "forks": 71, "forks_fmt": "71", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 1, "commits_low_confidence": false, "score": 47.7, "description": "", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 434, "npm_package": "mcp-abap-adt", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 277, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.373, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T17:28:11Z", "slug": "mcp-abap-adt", "full_fetched_at": "2026-10-11T20:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-abap-adt' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-abap-adt", "version": "1.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:54Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.6, "trust_score_v2": 55.6, "rank_v2": 799, "rank_v2_delta": 380, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 11.8, "maintenance": 11.5, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Plateau Creative MCP", "repo": "pixelx-jp/plateau-creative-mcp", "display_repo": "", "url": "https://github.com/pixelx-jp/plateau-creative-mcp", "listing_class": "agent", "rank": 800, "previous_rank": 797, "rank_delta": -3, "stars": 33, "stars_fmt": "33", "forks": 6, "forks_fmt": "6", "last_push": "2026-05-31", "days_ago": 134, "weekly_commits": 0, "commits_low_confidence": false, "score": 19.5, "description": "MCP server: Project PLATEAU 3D city data as scene-editing and glTF export tools for creative LLM agents.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 435, "npm_package": "@yodolabs/plateau-creative-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 74, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:58:43Z", "slug": "plateau-creative-mcp", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@yodolabs/plateau-creative-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@yodolabs/plateau-creative-mcp", "version": "0.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:10Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.6, "trust_score_v2": 55.6, "rank_v2": 800, "rank_v2_delta": 380, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 18.0, "transparency": 11.1, "maintenance": 3.1, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MemOS", "repo": "MemTensor/MemOS", "display_repo": "", "url": "https://github.com/MemTensor/MemOS", "listing_class": "agent", "rank": 801, "previous_rank": 799, "rank_delta": -2, "stars": 11830, "stars_fmt": "11.8k", "forks": 1074, "forks_fmt": "1.1k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 17, "commits_low_confidence": false, "score": 78.9, "description": "Self-evolving memory OS for LLM & AI Agents: ultra-persistent memory, hybrid-retrieval, and cross-task skill reuse, with 35.24% token savings and DeepSeek Harness support.", "language": "TypeScript", "open_issues": 62, "category": "Memory & Knowledge", "category_rank": 38, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:46:39Z", "slug": "memos", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "https://memos.openmem.net", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: examples/mem_mcp/simple_fastmcp_client.py", "Found MCP-related server path: examples/mem_mcp/simple_fastmcp_serve.py", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in docker/requirements.txt" ] }, "external_service_dependencies": { "providers": [ "DeepSeek", "OpenAI", "Postgres", "Qdrant", "Redis", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found DeepSeek dependency 'deepseek' in apps/memos-local-plugin/package.json", "README/docs also mention DeepSeek", "Found Qdrant dependency 'qdrant' in pyproject.toml", "README/docs also mention Qdrant", "Found Tavily dependency 'tavily' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found declared path: apps/MemOS-Cloud-OpenClaw-Plugin/.github/release-notes/README.md", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'puppeteer' in apps/memos-local-openclaw/package.json", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.5, "trust_score_v2": 55.5, "rank_v2": 801, "rank_v2_delta": -6, "trust_v2_adjustment": -2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 12.8, "maintenance": 16.9, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Makerskills", "repo": "coreyhaines31/makerskills", "display_repo": "", "url": "https://github.com/coreyhaines31/makerskills", "listing_class": "skill", "rank": 159, "previous_rank": 156, "rank_delta": -3, "stars": 855, "stars_fmt": "855", "forks": 71, "forks_fmt": "71", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 35, "commits_low_confidence": false, "score": 70.2, "description": "AI agent skills for the personal operator's craft — decisions, research, second-brain, content rotation, scenario modeling, and meta-skills to author more. Works with Claude Code, Codex, Cursor.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 159, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:40:04Z", "slug": "makerskills", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "https://maker-skills.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.5, "trust_score_v2": 55.5, "rank_v2": 159, "rank_v2_delta": 814, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 11.9, "maintenance": 17.9, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "openagent", "repo": "the-open-agent/openagent", "display_repo": "", "url": "https://github.com/the-open-agent/openagent", "listing_class": "agent", "rank": 802, "previous_rank": 801, "rank_delta": -1, "stars": 5686, "stars_fmt": "5.7k", "forks": 665, "forks_fmt": "665", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 51, "commits_low_confidence": false, "score": 81.9, "description": "⚡️next-generation personal AI assistant powered by LLM, RAG and agent loops, supporting computer-use, browser-use and coding agent, demo: https://demo.openagentai.org", "language": "Go", "open_issues": 49, "category": "Agent Frameworks", "category_rank": 75, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:10:27Z", "slug": "openagent", "full_fetched_at": "2026-10-12T00:02:31Z", "source_note": "", "github_homepage": "https://openagentai.org", "homepage_icon": "/site-icons/1be39f7e5e81adf1.png", "homepage_icon_for": "https://openagentai.org", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.5, "trust_score_v2": 55.5, "rank_v2": 802, "rank_v2_delta": 104, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 11.8, "maintenance": 18.8, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "agentacct", "repo": "mikehasa/agentacct", "display_repo": "", "url": "https://github.com/mikehasa/agentacct", "listing_class": "agent", "rank": 803, "previous_rank": 795, "rank_delta": -8, "stars": 766, "stars_fmt": "766", "forks": 82, "forks_fmt": "82", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 180, "commits_low_confidence": false, "score": 75.0, "description": "See what your coding agents did and what it cost. Breaks each task down into work steps — tools used, files changed, tests run, time and tokens spent. Local-first dashboard for Claude Code, Codex, OpenCode, and more. No login, no telemetry.", "language": "Python", "open_issues": 36, "category": "Observability & Evaluation", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:54:28Z", "slug": "agentacct", "full_fetched_at": "2026-10-11T20:01:56Z", "source_note": "", "github_homepage": "https://trytofu.ai", "homepage_icon": "/site-icons/a86d0a87bb5184e5.png", "homepage_icon_for": "https://trytofu.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.5, "trust_score_v2": 55.5, "rank_v2": 803, "rank_v2_delta": 106, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 11.5, "maintenance": 19.4, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Evolver", "repo": "EvoMap/evolver", "display_repo": "", "url": "https://github.com/EvoMap/evolver", "listing_class": "skill", "rank": 160, "previous_rank": 158, "rank_delta": -2, "stars": 9145, "stars_fmt": "9.1k", "forks": 848, "forks_fmt": "848", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 0, "commits_low_confidence": false, "score": 60.9, "description": "The GEP-powered self-evolving engine for AI agents. Auditable evolution with Genes, Capsules, and Events. | evomap.ai", "language": "JavaScript", "open_issues": 26, "category": "Agent Skills", "category_rank": 160, "npm_package": "@evomap/evolver", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2889, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.16, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:46:14Z", "slug": "evolver", "full_fetched_at": "2026-10-12T16:02:02Z", "source_note": "", "github_homepage": "https://evomap.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: src/proxy/extensions/dmHandler.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@evomap/evolver' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@evomap/evolver", "version": "2.0.42" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 55.5, "trust_score_v2": 55.5, "rank_v2": 160, "rank_v2_delta": 895, "trust_v2_adjustment": 3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.2, "maintenance": 11.2, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Brooks Lint", "repo": "hyhmrright/brooks-lint", "display_repo": "", "url": "https://github.com/hyhmrright/brooks-lint", "listing_class": "skill", "rank": 161, "previous_rank": 168, "rank_delta": 7, "stars": 1514, "stars_fmt": "1.5k", "forks": 69, "forks_fmt": "69", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 18, "commits_low_confidence": false, "score": 68.6, "description": "AI code reviews grounded in 12 classic engineering books — decay risk diagnostics with book citations, severity labels, and 6 analysis modes including full-sweep auto-fix", "language": "HTML", "open_issues": 0, "category": "Agent Skills", "category_rank": 161, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T01:46:21Z", "slug": "brooks-lint", "full_fetched_at": "2026-10-12T16:02:22Z", "source_note": "", "github_homepage": "https://hyhmrright.github.io/brooks-lint/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 161, "rank_v2_delta": 680, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 13.7, "maintenance": 17.1, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Apollo.io", "repo": "apolloio/apollo-mcp-plugin", "display_repo": "", "url": "https://github.com/apolloio/apollo-mcp-plugin", "listing_class": "agent", "rank": 804, "previous_rank": 803, "rank_delta": -1, "stars": 28, "stars_fmt": "28", "forks": 10, "forks_fmt": "10", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 1, "commits_low_confidence": false, "score": 38.9, "description": "Connect Claude Code + Cowork to Apollo MCP via this plugin", "language": "", "open_issues": 4, "category": "MCP Servers", "category_rank": 436, "npm_package": "@apolloio/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 30, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.417, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T23:01:11Z", "slug": "apollo-io", "full_fetched_at": "2026-10-12T08:02:44Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@apolloio/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@apolloio/mcp", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:44Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 804, "rank_v2_delta": 371, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 13.1, "maintenance": 11.5, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ARTEMIS", "repo": "google/artemis", "display_repo": "", "url": "https://github.com/google/artemis", "listing_class": "agent", "rank": 805, "previous_rank": 747, "rank_delta": -58, "stars": 11418, "stars_fmt": "11.4k", "forks": 1175, "forks_fmt": "1.2k", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 2, "commits_low_confidence": false, "score": 68.2, "description": "ARTEMIS turns natural-language instructions into reliable Android automation. It automates end-to-end workflows, captures logs, and integrates seamlessly with AI coding assistants such as Antigravity, Codex, and Claude Code. It also achieves 99%+ success rate on AndroidWorld Benchmark.", "language": "Python", "open_issues": 46, "category": "Browser & Computer Use", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:21:35Z", "slug": "artemis", "full_fetched_at": "2026-10-12T16:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: artemis/mcp/action_server.py", "Found MCP-related server path: artemis/mcp/adb_server.py", "Found MCP-related server test path: tests/unit/mcp/test_action_server.py" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 805, "rank_v2_delta": 186, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 12.9, "maintenance": 13.2, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Reach", "repo": "Panniantong/Agent-Reach", "display_repo": "", "url": "https://github.com/Panniantong/Agent-Reach", "listing_class": "agent", "rank": 806, "previous_rank": 800, "rank_delta": -6, "stars": 96487, "stars_fmt": "96.5k", "forks": 8447, "forks_fmt": "8.4k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 5, "commits_low_confidence": true, "score": 82.3, "description": "Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.", "language": "Python", "open_issues": 91, "category": "Protocols & Tool Integration", "category_rank": 43, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 56, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:16:39Z", "slug": "agent-reach", "full_fetched_at": "2026-10-12T08:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: agent_reach/integrations/mcp_server.py", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'TWITTER_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 806, "rank_v2_delta": 61, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 12.7, "maintenance": 13.3, "adoption": 12.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Video Vision", "repo": "jordanrendric/claude-video-vision", "display_repo": "", "url": "https://github.com/jordanrendric/claude-video-vision", "listing_class": "skill", "rank": 162, "previous_rank": 161, "rank_delta": -1, "stars": 1356, "stars_fmt": "1.4k", "forks": 159, "forks_fmt": "159", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 16, "commits_low_confidence": false, "score": 68.6, "description": "Give Claude the ability to watch and understand videos — Claude Code plugin with frame extraction and multimodal audio analysis", "language": "TypeScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 162, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:47:25Z", "slug": "claude-video-vision", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server/package-lock.json", "Found MCP-related server path: mcp-server/package.json", "Found MCP-related server test path: mcp-server/tests/backends/gemini-api.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in mcp-server/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency '@google/genai' in mcp-server/package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 162, "rank_v2_delta": 738, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.6, "maintenance": 16.6, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Open Computer Use", "repo": "iFurySt/open-codex-computer-use", "display_repo": "", "url": "https://github.com/iFurySt/open-codex-computer-use", "listing_class": "agent", "rank": 807, "previous_rank": 810, "rank_delta": 3, "stars": 2399, "stars_fmt": "2.4k", "forks": 216, "forks_fmt": "216", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 21, "commits_low_confidence": false, "score": 72.9, "description": "👾 Open Computer Use – Open-Source Alternative to Codex Computer Use", "language": "Swift", "open_issues": 17, "category": "Browser & Computer Use", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 3, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:43:43Z", "slug": "open-computer-use", "full_fetched_at": "2026-10-12T04:02:41Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 807, "rank_v2_delta": 92, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.5, "maintenance": 17.4, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Victorialogs", "repo": "VictoriaMetrics/mcp-victorialogs", "display_repo": "", "url": "https://github.com/VictoriaMetrics/mcp-victorialogs", "listing_class": "agent", "rank": 808, "previous_rank": 804, "rank_delta": -4, "stars": 100, "stars_fmt": "100", "forks": 29, "forks_fmt": "29", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 15, "commits_low_confidence": false, "score": 58.3, "description": "The implementation of Model Context Protocol (MCP) server for VictoriaLogs.", "language": "Go", "open_issues": 5, "category": "MCP Servers", "category_rank": 437, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/victoriametrics/mcp-victorialogs:1.9.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:09:02Z", "slug": "mcp-victorialogs", "full_fetched_at": "2026-10-12T00:02:33Z", "source_note": "", "github_homepage": "https://victoriametrics.com/", "homepage_icon": "/site-icons/becba1707c67de35.png", "homepage_icon_for": "https://victoriametrics.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in web/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VL_INSTANCE_BEARER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 808, "rank_v2_delta": 146, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 12.1, "maintenance": 16.5, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Yao", "repo": "YaoApp/yao", "display_repo": "", "url": "https://github.com/YaoApp/yao", "listing_class": "agent", "rank": 809, "previous_rank": 806, "rank_delta": -3, "stars": 8118, "stars_fmt": "8.1k", "forks": 722, "forks_fmt": "722", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 45, "commits_low_confidence": false, "score": 81.9, "description": "✨ All your agents and workspaces in one place, on every device you own. Track tasks on a board, accessible from desktop, mobile, browser, or API. Self-hosted.", "language": "Go", "open_issues": 4, "category": "UI & App Builders", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:51:56Z", "slug": "yao", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "https://yaoagents.com", "homepage_icon": "/site-icons/4a0334a756204ac0.png", "homepage_icon_for": "https://yaoagents.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: dsl/mcp/server.go", "Found MCP-related server path: unit-test/agent/app/openapi/scopes/mcp/servers.yml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: plugin/README.md" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 809, "rank_v2_delta": 88, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.4, "maintenance": 18.4, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Terminal Browser", "repo": "zenbu-labs/terminal-browser", "display_repo": "", "url": "https://github.com/zenbu-labs/terminal-browser", "listing_class": "skill", "rank": 163, "previous_rank": 163, "rank_delta": 0, "stars": 3826, "stars_fmt": "3.8k", "forks": 184, "forks_fmt": "184", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 56, "commits_low_confidence": false, "score": 78.2, "description": "A browser inside your terminal", "language": "TypeScript", "open_issues": 48, "category": "Agent Skills", "category_rank": 163, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.44, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:37:15Z", "slug": "terminal-browser", "full_fetched_at": "2026-10-12T04:02:12Z", "source_note": "", "github_homepage": "https://terminal-browser.com", "homepage_icon": "/site-icons/672f18a668f43ef8.png", "homepage_icon_for": "https://terminal-browser.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (claude-code-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.4, "trust_score_v2": 55.4, "rank_v2": 163, "rank_v2_delta": 735, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 11.3, "maintenance": 18.7, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "FreeCAD MCP", "repo": "blwfish/freecad-mcp", "display_repo": "", "url": "https://github.com/blwfish/freecad-mcp", "listing_class": "agent", "rank": 810, "previous_rank": 820, "rank_delta": 10, "stars": 57, "stars_fmt": "57", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 76, "commits_low_confidence": false, "score": 63.5, "description": "MCP server for FreeCAD — 32 tools for AI-assisted 3D CAD modeling", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 438, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/blwfish/freecad-mcp:latest", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:14:25Z", "slug": "freecad-mcp", "full_fetched_at": "2026-10-12T12:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: freecad_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "LGPL-2.1", "license_type": "open", "license_override": "", "trust_score": 55.3, "trust_score_v2": 55.3, "rank_v2": 810, "rank_v2_delta": 190, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.7, "maintenance": 19.5, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SwiftUI Agent Skill", "repo": "AvdLee/SwiftUI-Agent-Skill", "display_repo": "", "url": "https://github.com/AvdLee/SwiftUI-Agent-Skill", "listing_class": "skill", "rank": 164, "previous_rank": 162, "rank_delta": -2, "stars": 3675, "stars_fmt": "3.7k", "forks": 172, "forks_fmt": "172", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 26, "commits_low_confidence": false, "score": 73.9, "description": "Add expert SwiftUI Best Practices guidance to your AI coding tool (Agent Skills open format).", "language": "Python", "open_issues": 3, "category": "Agent Skills", "category_rank": 164, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.39, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-01T16:02:05Z", "slug": "swiftui-agent-skill", "full_fetched_at": "2026-10-12T12:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.3, "trust_score_v2": 55.3, "rank_v2": 164, "rank_v2_delta": 739, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 11.9, "maintenance": 17.3, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sprite Gen", "repo": "aldegad/sprite-gen", "display_repo": "", "url": "https://github.com/aldegad/sprite-gen", "listing_class": "skill", "rank": 165, "previous_rank": 172, "rank_delta": 7, "stars": 2748, "stars_fmt": "2.7k", "forks": 292, "forks_fmt": "292", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 422, "commits_low_confidence": false, "score": 82.1, "description": "Generate clean 2D game sprites & animation atlases — component-row pipeline: state rows, alpha cleanup, frame extraction, runtime atlases. Codex/Claude skill.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 165, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:16:43Z", "slug": "sprite-gen", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found xAI Grok credential/config marker 'XAI_API_KEY'", "README/docs also mention xAI Grok" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.3, "trust_score_v2": 55.3, "rank_v2": 165, "rank_v2_delta": 718, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.8, "maintenance": 20.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ai Website Cloner Template", "repo": "JCodesMore/ai-website-cloner-template", "display_repo": "", "url": "https://github.com/JCodesMore/ai-website-cloner-template", "listing_class": "skill", "rank": 166, "previous_rank": 164, "rank_delta": -2, "stars": 36622, "stars_fmt": "36.6k", "forks": 5369, "forks_fmt": "5.4k", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 12, "commits_low_confidence": false, "score": 82.6, "description": "Clone any website with one command using AI coding agents", "language": "TypeScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 166, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.212, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:12:42Z", "slug": "ai-website-cloner-template", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "https://dsc.gg/jcodesmore", "homepage_icon": "/site-icons/ec8b937aa78c35a1.png", "homepage_icon_for": "https://dsc.gg/jcodesmore", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.3, "trust_score_v2": 55.3, "rank_v2": 166, "rank_v2_delta": 752, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.7, "maintenance": 16.0, "adoption": 11.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OrangePro", "repo": "OrangeproAI/orangepro-mcp", "display_repo": "", "url": "https://github.com/OrangeproAI/orangepro-mcp", "listing_class": "agent", "rank": 811, "previous_rank": 807, "rank_delta": -4, "stars": 18, "stars_fmt": "18", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 42, "commits_low_confidence": false, "score": 54.4, "description": "OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 439, "npm_package": "@orangepro/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 561, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T23:07:10Z", "slug": "orangepro", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mcp-server/README.md", "Found MCP-related server path: packages/mcp-server/bin/mcp-server.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@orangepro/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@orangepro/mcp-server", "version": "0.2.57" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:08Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.3, "trust_score_v2": 55.3, "rank_v2": 811, "rank_v2_delta": 297, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 11.2, "maintenance": 18.4, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Personal Corp Os", "repo": "serejaris/personal-corp-os", "display_repo": "", "url": "https://github.com/serejaris/personal-corp-os", "listing_class": "skill", "rank": 167, "previous_rank": 165, "rank_delta": -2, "stars": 229, "stars_fmt": "229", "forks": 26, "forks_fmt": "26", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 29, "commits_low_confidence": false, "score": 63.7, "description": "Personal Corp OS — управление личной компанией через AI-агентов: задачи вне головы, отделы вместо памяти, недельное ретро. Открытые скиллы для Claude Code и Codex", "language": "HTML", "open_issues": 4, "category": "Agent Skills", "category_rank": 167, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T17:03:18Z", "slug": "personal-corp-os", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.2, "trust_score_v2": 55.2, "rank_v2": 167, "rank_v2_delta": 745, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 13.7, "maintenance": 17.6, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tinybase", "repo": "tinyplex/tinybase", "display_repo": "", "url": "https://github.com/tinyplex/tinybase", "listing_class": "skill", "rank": 168, "previous_rank": 160, "rank_delta": -8, "stars": 5193, "stars_fmt": "5.2k", "forks": 137, "forks_fmt": "137", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 62, "commits_low_confidence": false, "score": 79.1, "description": "A reactive data store & sync engine.", "language": "TypeScript", "open_issues": 15, "category": "Agent Skills", "category_rank": 168, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:47:15Z", "slug": "tinybase", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "https://tinybase.org", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in package.json", "README/docs also mention Supabase", "Found Postgres dependency 'postgres' in package.json", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'postgres' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.2, "trust_score_v2": 55.2, "rank_v2": 168, "rank_v2_delta": 691, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.4, "maintenance": 18.9, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCPfinder - MCP Server Discovery", "repo": "mcpfinder/mcpfinder", "display_repo": "", "url": "https://github.com/mcpfinder/mcpfinder", "listing_class": "agent", "rank": 812, "previous_rank": 827, "rank_delta": 15, "stars": 13, "stars_fmt": "13", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 18, "commits_low_confidence": false, "score": 51.1, "description": "MCP server that finds MCP servers. Discovers, evaluates, and installs 25K+ MCP servers across Official Registry, Glama, and Smithery for any AI client (Claude, Cursor, Cline, Windsurf).", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 440, "npm_package": "@mcpfinder/server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 146, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:03:47Z", "slug": "mcpfinder-mcp-server-discovery", "full_fetched_at": "2026-10-11T20:01:58Z", "source_note": "", "github_homepage": "https://mcpfinder.dev", "homepage_icon": "/site-icons/071222ade42b9527.png", "homepage_icon_for": "https://mcpfinder.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: landing/public/best-mcp-servers-2026/index.html", "Found MCP-related server path: landing/public/best-mcp-servers/index.html", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/mcp-server/package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mcpfinder/server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mcpfinder/server", "version": "1.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:58Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 55.2, "trust_score_v2": 55.2, "rank_v2": 812, "rank_v2_delta": 340, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 11.6, "maintenance": 17.1, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Superagent", "repo": "superagent-ai/superagent", "display_repo": "", "url": "https://github.com/superagent-ai/superagent", "listing_class": "agent", "rank": 813, "previous_rank": 864, "rank_delta": 51, "stars": 6762, "stars_fmt": "6.8k", "forks": 961, "forks_fmt": "961", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 55.2, "description": "Superagent protects your AI applications against prompt injections, data leaks, and harmful outputs. Embed safety directly into your app and prove compliance to your customers.", "language": "TypeScript", "open_issues": 10, "category": "Workflow Platforms", "category_rank": 21, "npm_package": "safety-agent", "crate_package": "", "pypi_package": "superagent-py", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2354, "dl_source": "npm+pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 0.56, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:09:21Z", "slug": "superagent", "full_fetched_at": "2026-10-12T08:02:01Z", "source_note": "", "github_homepage": "https://superagent.sh", "homepage_icon": "/site-icons/16b780dad626e4b8.png", "homepage_icon_for": "https://superagent.sh", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/content/docs/sdk/examples/scan-mcp-servers.mdx", "Found MCP dependency '@modelcontextprotocol/sdk' in mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SUPERAGENT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'safety-agent' points to the tracked repo", "pypi package 'superagent-py' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "safety-agent", "version": "0.1.7" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:01Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.2, "trust_score_v2": 55.2, "rank_v2": 813, "rank_v2_delta": 236, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 11.6, "maintenance": 8.8, "adoption": 13.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "DSH Web UI", "repo": "zhu1090093659/dsh-web", "display_repo": "", "url": "https://github.com/zhu1090093659/dsh-web", "listing_class": "skill", "rank": 169, "previous_rank": 167, "rank_delta": -2, "stars": 8665, "stars_fmt": "8.7k", "forks": 568, "forks_fmt": "568", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 715, "commits_low_confidence": false, "score": 86.4, "description": "DeepSeek Harness (DSH) Web 插件聚合生态 · 万物皆插件，通过创意工坊分发｜｜DeepSeek Harness (DSH) Web Plugin Aggregation Ecosystem · Everything is a plugin, distributed via the Creative Workshop", "language": "TypeScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 169, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:11:05Z", "slug": "dsh-web-ui", "full_fetched_at": "2026-10-12T04:02:31Z", "source_note": "", "github_homepage": "https://dsh-market.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in market/shell/package.json", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: market/dist/tryon/plugins/@deepseek-ai/dsh-api-gateway/client.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.2, "trust_score_v2": 55.2, "rank_v2": 169, "rank_v2_delta": 736, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.1, "maintenance": 20.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Spring AI Alibaba", "repo": "alibaba/spring-ai-alibaba", "display_repo": "", "url": "https://github.com/alibaba/spring-ai-alibaba", "listing_class": "agent", "rank": 814, "previous_rank": 808, "rank_delta": -6, "stars": 11002, "stars_fmt": "11.0k", "forks": 2441, "forks_fmt": "2.4k", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 2, "commits_low_confidence": true, "score": 70.3, "description": "Agentic AI Framework for Java Developers", "language": "Java", "open_issues": 78, "category": "Agent Frameworks", "category_rank": 76, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:51:34Z", "slug": "spring-ai-alibaba", "full_fetched_at": "2026-10-12T04:02:23Z", "source_note": "", "github_homepage": "https://java2ai.com", "homepage_icon": "/site-icons/dbf4cc2c8d7743ca.png", "homepage_icon_for": "https://java2ai.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: spring-ai-alibaba-admin/spring-ai-alibaba-admin-server-runtime/src/main/java/com/alibaba/cloud/ai/studio/runtime/domain/mcp/McpServerCallToolRequest.java", "Found MCP-related server path: spring-ai-alibaba-admin/spring-ai-alibaba-admin-server-runtime/src/main/java/com/alibaba/cloud/ai/studio/runtime/domain/mcp/McpServerCallToolResponse.java" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AI_DASHSCOPE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: spring-ai-alibaba-admin/frontend/packages/main/src/pages/App/AssistantAppEdit/components/SparkChat/components/Steps/Plugin/index.module.less", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.1, "trust_score_v2": 55.1, "rank_v2": 814, "rank_v2_delta": 67, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 12.5, "maintenance": 12.6, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skillgrade", "repo": "mgechev/skillgrade", "display_repo": "", "url": "https://github.com/mgechev/skillgrade", "listing_class": "skill", "rank": 170, "previous_rank": 185, "rank_delta": 15, "stars": 722, "stars_fmt": "722", "forks": 49, "forks_fmt": "49", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 4, "commits_low_confidence": true, "score": 58.8, "description": "\"Unit tests\" for your agent skills", "language": "TypeScript", "open_issues": 3, "category": "Agent Skills", "category_rank": 170, "npm_package": "skillgrade", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 553, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.221, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:12:05Z", "slug": "skillgrade", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "https://blog.mgechev.com/2026/03/14/skillgrade/", "homepage_icon": "/site-icons/7a1b31e8a4b7be2a.png", "homepage_icon_for": "https://blog.mgechev.com/2026/03/14/skillgrade/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "filesystem" ], "confidence": "medium", "evidence": [ "Found filesystem dependency 'fs-extra' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'skillgrade' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "skillgrade", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:57Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.1, "trust_score_v2": 55.1, "rank_v2": 170, "rank_v2_delta": 824, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.2, "maintenance": 13.3, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Nutrition MCP", "repo": "akutishevsky/nutrition-mcp", "display_repo": "", "url": "https://github.com/akutishevsky/nutrition-mcp", "listing_class": "agent", "rank": 815, "previous_rank": 814, "rank_delta": -1, "stars": 78, "stars_fmt": "78", "forks": 29, "forks_fmt": "29", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 286, "commits_low_confidence": false, "score": 68.2, "description": "A remote MCP server for personal nutrition tracking — log meals, track macros, and review nutrition history through conversation.", "language": "TypeScript", "open_issues": 13, "category": "MCP Servers", "category_rank": 441, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.28, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-25T22:04:52Z", "slug": "nutrition-mcp", "full_fetched_at": "2026-10-12T08:02:34Z", "source_note": "", "github_homepage": "https://nutrition-mcp.com", "homepage_icon": "/site-icons/210b176a5110cb7b.png", "homepage_icon_for": "https://nutrition-mcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Supabase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in package.json", "Found Supabase credential/config marker 'SUPABASE_URL'", "README/docs also mention Supabase" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.1, "trust_score_v2": 55.1, "rank_v2": 815, "rank_v2_delta": 147, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 12.1, "maintenance": 19.9, "adoption": 4.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cumora", "repo": "yetone/cumora", "display_repo": "", "url": "https://github.com/yetone/cumora", "listing_class": "agent", "rank": 816, "previous_rank": 809, "rank_delta": -7, "stars": 3971, "stars_fmt": "4.0k", "forks": 519, "forks_fmt": "519", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 53, "commits_low_confidence": false, "score": 80.0, "description": "Where agent teams gather. Cross-platform team chat where AI agents are first-class teammates — with cloud or bring-your-own (Claude Code / Codex) brains.", "language": "TypeScript", "open_issues": 12, "category": "Multi-Agent Systems", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.69, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:43:38Z", "slug": "cumora", "full_fetched_at": "2026-10-12T16:02:11Z", "source_note": "", "github_homepage": "https://cumora.ai", "homepage_icon": "/site-icons/bc900064bcc31741.png", "homepage_icon_for": "https://cumora.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Postgres dependency 'pg' in package.json", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pg' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.1, "trust_score_v2": 55.1, "rank_v2": 816, "rank_v2_delta": 17, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 11.6, "maintenance": 18.5, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenMontage", "repo": "calesthio/OpenMontage", "display_repo": "", "url": "https://github.com/calesthio/OpenMontage", "listing_class": "agent", "rank": 817, "previous_rank": 858, "rank_delta": 41, "stars": 67398, "stars_fmt": "67.4k", "forks": 8599, "forks_fmt": "8.6k", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 4, "commits_low_confidence": false, "score": 79.9, "description": "World's first open-source, agentic video production system. 12 production pipelines, 100+ tools, 700+ agent skill and production-knowledge files. Turn your AI coding assistant into a full video production studio.", "language": "Python", "open_issues": 113, "category": "Multi-Agent Systems", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:37:59Z", "slug": "openmontage", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://www.openmontage.video/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "ElevenLabs", "Google Gemini", "OpenAI", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in setup.py", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in setup.py", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/gsap-plugins/SKILL.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 55.0, "trust_score_v2": 55.0, "rank_v2": 817, "rank_v2_delta": -6, "trust_v2_adjustment": -2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 12.8, "maintenance": 14.2, "adoption": 11.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Deepcode Cli", "repo": "lessweb/deepcode-cli", "display_repo": "", "url": "https://github.com/lessweb/deepcode-cli", "listing_class": "skill", "rank": 171, "previous_rank": 169, "rank_delta": -2, "stars": 2257, "stars_fmt": "2.3k", "forks": 221, "forks_fmt": "221", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 34, "commits_low_confidence": false, "score": 74.1, "description": "Deep Code 是专为 deepseek-v4 模型优化的终端 AI 编码助手，支持深度思考、推理强度控制以及 Agent Skills。", "language": "TypeScript", "open_issues": 90, "category": "Agent Skills", "category_rank": 171, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:44:30Z", "slug": "deepcode-cli", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "https://deepcode.vegamo.cn", "homepage_icon": "/site-icons/8778ddef0508c873.png", "homepage_icon_for": "https://deepcode.vegamo.cn", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/core/package.json", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .deepcode/plugins/cwd.mjs", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.0, "trust_score_v2": 55.0, "rank_v2": 171, "rank_v2_delta": 748, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.4, "maintenance": 17.6, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Bimwright", "repo": "bimwright/rvt-mcp", "display_repo": "", "url": "https://github.com/bimwright/rvt-mcp", "listing_class": "agent", "rank": 818, "previous_rank": 811, "rank_delta": -7, "stars": 74, "stars_fmt": "74", "forks": 19, "forks_fmt": "19", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 166, "commits_low_confidence": false, "score": 66.7, "description": "BIMwright — AI-native Revit MCP server (Revit 2022–2027)", "language": "C#", "open_issues": 5, "category": "MCP Servers", "category_rank": 442, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T02:22:01Z", "slug": "bimwright", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 55.0, "trust_score_v2": 55.0, "rank_v2": 818, "rank_v2_delta": 194, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.3, "maintenance": 19.7, "adoption": 4.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fireworks Tech Graph", "repo": "yizhiyanhua-ai/fireworks-tech-graph", "display_repo": "", "url": "https://github.com/yizhiyanhua-ai/fireworks-tech-graph", "listing_class": "skill", "rank": 172, "previous_rank": 171, "rank_delta": -1, "stars": 11670, "stars_fmt": "11.7k", "forks": 921, "forks_fmt": "921", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 58.1, "description": "Generate production-quality SVG+PNG technical diagrams from natural language. 7 styles, UML support, and AI/Agent workflow patterns.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 172, "npm_package": "@yizhiyanhua-ai/fireworks-tech-graph", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 14, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.347, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T09:57:42Z", "slug": "fireworks-tech-graph", "full_fetched_at": "2026-10-12T04:02:26Z", "source_note": "", "github_homepage": "https://yizhiyanhua-ai.github.io/fireworks-tech-graph/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@yizhiyanhua-ai/fireworks-tech-graph' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@yizhiyanhua-ai/fireworks-tech-graph", "version": "1.0.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:26Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 55.0, "trust_score_v2": 55.0, "rank_v2": 172, "rank_v2_delta": 941, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.2, "maintenance": 9.5, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Skales", "repo": "skalesapp/skales", "display_repo": "", "url": "https://github.com/skalesapp/skales", "listing_class": "agent", "rank": 819, "previous_rank": 842, "rank_delta": 23, "stars": 1985, "stars_fmt": "2.0k", "forks": 275, "forks_fmt": "275", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 19, "commits_low_confidence": false, "score": 72.4, "description": "Personal AI agent for macOS, Windows, Linux, Android & iOS. Set a goal, it works alone: coding (Skales Code), desktop + browser automation, autonomous scheduled Tasks. Teams of agents and humans across paired desktops. Agent2Agent, MCP, computer use, voice, local LLMs (Ollama), Agent Skills…", "language": "", "open_issues": 4, "category": "Agent Frameworks", "category_rank": 77, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:40:03Z", "slug": "skales", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://skales.app", "homepage_icon": "/site-icons/fa3f0d971e8431f4.png", "homepage_icon_for": "https://skales.app", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "proprietary", "license_override": "", "trust_score": 55.0, "trust_score_v2": 55.0, "rank_v2": 819, "rank_v2_delta": 191, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 12.0, "maintenance": 17.2, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Obsidian", "repo": "AgriciDaniel/claude-obsidian", "display_repo": "", "url": "https://github.com/AgriciDaniel/claude-obsidian", "listing_class": "skill", "rank": 173, "previous_rank": 173, "rank_delta": 0, "stars": 15480, "stars_fmt": "15.5k", "forks": 1539, "forks_fmt": "1.5k", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 60.6, "description": "Self-organizing AI second brain for Obsidian + Claude Code. Drop any source and Claude reads, links, and files it into one connected knowledge graph of plain Markdown you own. AI note-taking, personal knowledge management (PKM), and an open-source Notion alternative. Based on Karpathy's LLM Wiki…", "language": "Python", "open_issues": 21, "category": "Agent Skills", "category_rank": 173, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.65, "scorecard_score": 6.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:07:19Z", "slug": "claude-obsidian", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://skool.com/ai-marketing-hub-pro", "homepage_icon": "/site-icons/67a14a239191bf13.png", "homepage_icon_for": "https://skool.com/ai-marketing-hub-pro", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.9, "trust_score_v2": 54.9, "rank_v2": 173, "rank_v2_delta": 750, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 13.6, "maintenance": 9.9, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Feishu Docx", "repo": "leemysw/feishu-docx", "display_repo": "", "url": "https://github.com/leemysw/feishu-docx", "listing_class": "skill", "rank": 174, "previous_rank": 170, "rank_delta": -4, "stars": 267, "stars_fmt": "267", "forks": 42, "forks_fmt": "42", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 2, "commits_low_confidence": false, "score": 50.6, "description": "🚀 Feishu/Lark Docs、Sheet、Bitable <-> Markdown | AI Agent-friendly knowledge base exporter and writer with OAuth 2.0, CLI, TUI & Claude Skills support - 飞书文档 <写入/导出> Markdown | AI Agent 友好型导出-写入工具", "language": "Python", "open_issues": 3, "category": "Agent Skills", "category_rank": 174, "npm_package": "", "crate_package": "", "pypi_package": "feishu-docx", "docker_image": "", "vscode_extension": "", "weekly_downloads": 121, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.25, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:15:31Z", "slug": "feishu-docx", "full_fetched_at": "2026-10-11T16:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'feishu-docx' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "feishu-docx", "version": "0.2.8" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:22Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.9, "trust_score_v2": 54.9, "rank_v2": 174, "rank_v2_delta": 923, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.3, "maintenance": 12.6, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Distilly", "repo": "titanwings/distilly", "display_repo": "", "url": "https://github.com/titanwings/distilly", "listing_class": "skill", "rank": 175, "previous_rank": 241, "rank_delta": 66, "stars": 25524, "stars_fmt": "25.5k", "forks": 2190, "forks_fmt": "2.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 11, "commits_low_confidence": false, "score": 80.4, "description": "Distilly — Distill how they think into reusable Skills for any Agent or Bot. Formerly Colleague Skill（原同事 Skill）.", "language": "Python", "open_issues": 21, "category": "Agent Skills", "category_rank": 175, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:36:02Z", "slug": "distilly", "full_fetched_at": "2026-10-12T12:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in requirements.txt" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.9, "trust_score_v2": 54.9, "rank_v2": 175, "rank_v2_delta": 747, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.8, "maintenance": 16.3, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Logic Pro MCP", "repo": "MongLong0214/logic-pro-mcp", "display_repo": "", "url": "https://github.com/MongLong0214/logic-pro-mcp", "listing_class": "agent", "rank": 820, "previous_rank": 817, "rank_delta": -3, "stars": 125, "stars_fmt": "125", "forks": 26, "forks_fmt": "26", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 934, "commits_low_confidence": false, "score": 69.3, "description": "Local MCP server for stateful, fail-closed Logic Pro control and live project readback.", "language": "Swift", "open_issues": 25, "category": "MCP Servers", "category_rank": 443, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T22:34:23Z", "slug": "logic-pro-mcp", "full_fetched_at": "2026-10-11T20:02:14Z", "source_note": "", "github_homepage": "https://logicpromcp.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: Scripts/verify/live/tests/fake_mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: Sources/LogicProMCP/Plugins/ChannelEQBandCatalog.swift", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.9, "trust_score_v2": 54.9, "rank_v2": 820, "rank_v2_delta": 182, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.8, "maintenance": 20.0, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wc26 MCP", "repo": "jordanlyall/wc26-mcp", "display_repo": "", "url": "https://github.com/jordanlyall/wc26-mcp", "listing_class": "agent", "rank": 821, "previous_rank": 796, "rank_delta": -25, "stars": 34, "stars_fmt": "34", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 29, "commits_low_confidence": false, "score": 57.3, "description": "AI companion for FIFA World Cup 2026 — 18 tools covering matches, teams, venues, city guides, fan zones, visa info, head-to-head records, and more. Works with Claude, ChatGPT, Cursor, and Telegram.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 444, "npm_package": "wc26-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 161, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:50:19Z", "slug": "wc26-mcp", "full_fetched_at": "2026-10-12T16:02:34Z", "source_note": "", "github_homepage": "https://wc26.ai", "homepage_icon": "/site-icons/a9a1954e1aad3ddd.png", "homepage_icon_for": "https://wc26.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'wc26-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "wc26-mcp", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:34Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.9, "trust_score_v2": 54.9, "rank_v2": 821, "rank_v2_delta": 298, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 17.8, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CLI Anything WEB", "repo": "ItamarZand88/CLI-Anything-WEB", "display_repo": "", "url": "https://github.com/ItamarZand88/CLI-Anything-WEB", "listing_class": "skill", "rank": 176, "previous_rank": 175, "rank_delta": -1, "stars": 231, "stars_fmt": "231", "forks": 49, "forks_fmt": "49", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.6, "description": "Claude Code plugin that generates production-grade Python CLIs for any web app. 20 CLIs and counting.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 176, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.79, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:40:17Z", "slug": "cli-anything-web", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "https://itamarzand88.github.io/CLI-Anything-WEB/registry/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: airbnb/agent-harness/cli_web/airbnb/utils/mcp_server.py", "Found MCP-related server path: amazon/agent-harness/cli_web/amazon/utils/mcp_server.py", "Found MCP-related server test path: cli-web-core/tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (cli-anything-web-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.8, "trust_score_v2": 54.8, "rank_v2": 176, "rank_v2_delta": 833, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.6, "identity": 10.8, "transparency": 13.7, "maintenance": 11.3, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Miro", "repo": "olgasafonova/miro-mcp-server", "display_repo": "", "url": "https://github.com/olgasafonova/miro-mcp-server", "listing_class": "agent", "rank": 822, "previous_rank": 819, "rank_delta": -3, "stars": 28, "stars_fmt": "28", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 42, "commits_low_confidence": false, "score": 58.2, "description": "MCP server for controlling Miro whiteboards with AI assistants", "language": "Go", "open_issues": 1, "category": "MCP Servers", "category_rank": 445, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/olgasafonova/miro-mcp-server:1.22.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:21:57Z", "slug": "miro", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MIRO_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.8, "trust_score_v2": 54.8, "rank_v2": 822, "rank_v2_delta": 143, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 13.4, "maintenance": 18.1, "adoption": 3.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Paper Distill MCP", "repo": "Eclipse-Cj/paper-distill-mcp", "display_repo": "", "url": "https://github.com/Eclipse-Cj/paper-distill-mcp", "listing_class": "agent", "rank": 823, "previous_rank": 815, "rank_delta": -8, "stars": 67, "stars_fmt": "67", "forks": 4, "forks_fmt": "4", "last_push": "2026-03-24", "days_ago": 202, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.3, "description": "MCP server for academic paper search, curation, and multi-platform push", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 446, "npm_package": "", "crate_package": "", "pypi_package": "paper-distill-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 32, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:25:05Z", "slug": "paper-distill-mcp", "full_fetched_at": "2026-10-12T16:01:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp_server/__init__.py", "Found MCP-related server path: mcp_server/config.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "DeepSeek", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'paper-distill-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "paper-distill-mcp", "version": "0.2.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:50Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 54.8, "trust_score_v2": 54.8, "rank_v2": 823, "rank_v2_delta": 323, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.4, "identity": 18.0, "transparency": 12.5, "maintenance": 0.0, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Tradingview MCP", "repo": "atilaahmettaner/tradingview-mcp", "display_repo": "", "url": "https://github.com/atilaahmettaner/tradingview-mcp", "listing_class": "agent", "rank": 824, "previous_rank": 822, "rank_delta": -2, "stars": 5033, "stars_fmt": "5.0k", "forks": 1000, "forks_fmt": "1.0k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 8, "commits_low_confidence": true, "score": 73.1, "description": "TradingView MCP server — real-time market data, technical analysis, screeners & backtesting for Claude, ChatGPT, Cursor & any MCP client. Stocks, crypto, forex & futures across global exchanges. Hosted or self-host.", "language": "Python", "open_issues": 5, "category": "MCP Servers", "category_rank": 447, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:18:01Z", "slug": "tradingview-mcp", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "https://tradingmcp.ai", "homepage_icon": "/site-icons/2012d993161b9e19.png", "homepage_icon_for": "https://tradingmcp.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MARKETAUX_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .codex-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.8, "trust_score_v2": 54.8, "rank_v2": 824, "rank_v2_delta": 137, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 12.2, "maintenance": 13.8, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "open-kritt", "repo": "Kritt-ai/open-kritt", "display_repo": "", "url": "https://github.com/Kritt-ai/open-kritt", "listing_class": "agent", "rank": 825, "previous_rank": 823, "rank_delta": -2, "stars": 2271, "stars_fmt": "2.3k", "forks": 390, "forks_fmt": "390", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 11, "commits_low_confidence": false, "score": 69.7, "description": "Open-source, self-hosted AI vulnerability research tool that orchestrates agents to find and validate security issues in code.", "language": "JavaScript", "open_issues": 20, "category": "Security & Guardrails", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.51, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-10T19:12:39Z", "slug": "open-kritt", "full_fetched_at": "2026-10-12T16:02:40Z", "source_note": "", "github_homepage": "https://kritt.ai/", "homepage_icon": "/site-icons/3c08321d3eb7ff4e.png", "homepage_icon_for": "https://kritt.ai/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 54.8, "trust_score_v2": 54.8, "rank_v2": 825, "rank_v2_delta": 112, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 12.2, "maintenance": 15.8, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AEC Model Bridge", "repo": "Sam-AEC/aec-model-bridge", "display_repo": "", "url": "https://github.com/Sam-AEC/aec-model-bridge", "listing_class": "agent", "rank": 826, "previous_rank": 824, "rank_delta": -2, "stars": 68, "stars_fmt": "68", "forks": 22, "forks_fmt": "22", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 107, "commits_low_confidence": false, "score": 67.2, "description": "Open-source Revit MCP server: let Claude and other AI assistants read and edit BIM models, with human approval on every change.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 448, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:33:58Z", "slug": "aec-model-bridge", "full_fetched_at": "2026-10-12T00:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server path: packages/mcp-server-revit/LICENSE", "Found MCP-related server test path: packages/mcp-server-revit/tests/conftest.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in packages/mcp-server-revit/pyproject.toml", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: extensions/vscode/.gitignore", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 54.8, "trust_score_v2": 54.8, "rank_v2": 826, "rank_v2_delta": 166, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 11.6, "maintenance": 19.9, "adoption": 4.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Kibana", "repo": "TocharianOU/mcp-server-kibana", "display_repo": "", "url": "https://github.com/TocharianOU/mcp-server-kibana", "listing_class": "agent", "rank": 827, "previous_rank": 818, "rank_delta": -9, "stars": 84, "stars_fmt": "84", "forks": 28, "forks_fmt": "28", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 8, "commits_low_confidence": true, "score": 55.2, "description": "MCP server for Kibana, Access search and manage Kibana in MCP Client.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 449, "npm_package": "@tocharianou/mcp-server-kibana", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1448, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.095, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-11T03:46:06Z", "slug": "kibana", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'KIBANA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@tocharianou/mcp-server-kibana' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@tocharianou/mcp-server-kibana", "version": "0.11.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:26Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.8, "trust_score_v2": 54.8, "rank_v2": 827, "rank_v2_delta": 341, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.5, "maintenance": 13.8, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Licinexus MCP", "repo": "Licinexus/licinexus-mcp", "display_repo": "", "url": "https://github.com/Licinexus/licinexus-mcp", "listing_class": "agent", "rank": 828, "previous_rank": 812, "rank_delta": -16, "stars": 79, "stars_fmt": "79", "forks": 40, "forks_fmt": "40", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.2, "description": "MCP server for Brazilian public procurement data (PNCP + Receita Federal). Maintained by Licinexus.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 450, "npm_package": "@licinexusbr/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 41, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.326, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:10:57Z", "slug": "licinexus-mcp", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "https://licinexus.com.br", "homepage_icon": "/site-icons/251fadc63f3a6fd4.png", "homepage_icon_for": "https://licinexus.com.br", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@licinexusbr/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@licinexusbr/mcp", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:57Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.7, "trust_score_v2": 54.7, "rank_v2": 828, "rank_v2_delta": 378, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 13.1, "maintenance": 9.7, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Dev Latam", "repo": "codespar/mcp-dev-latam", "display_repo": "", "url": "https://github.com/codespar/mcp-dev-latam", "listing_class": "agent", "rank": 829, "previous_rank": 821, "rank_delta": -8, "stars": 273, "stars_fmt": "273", "forks": 50, "forks_fmt": "50", "last_push": "2026-09-27", "days_ago": 15, "weekly_commits": 1, "commits_low_confidence": false, "score": 49.2, "description": "Open-source MCP servers for Latin American commerce — Pix, NF-e, banking, fiscal, logistics, and messaging across Brazil, Mexico, Argentina, Colombia, Chile, and Peru. MIT, on npm.", "language": "TypeScript", "open_issues": 13, "category": "MCP Servers", "category_rank": 451, "npm_package": "@codespar/mcp-adyen", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 31, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:41:49Z", "slug": "mcp-dev-latam", "full_fetched_at": "2026-10-12T12:02:59Z", "source_note": "", "github_homepage": "https://codespar.dev/servers", "homepage_icon": "/site-icons/8a253ae31a9c9a48.png", "homepage_icon_for": "https://codespar.dev/servers", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/shared/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in examples/managed-agents-test/package.json", "Found credential/config marker 'STRIPE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@codespar/mcp-adyen' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.7, "trust_score_v2": 54.7, "rank_v2": 829, "rank_v2_delta": 153, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.4, "maintenance": 12.2, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "brag", "repo": "latent-spaces/brag", "display_repo": "", "url": "https://github.com/latent-spaces/brag", "listing_class": "skill", "rank": 177, "previous_rank": 363, "rank_delta": 186, "stars": 15413, "stars_fmt": "15.4k", "forks": 1130, "forks_fmt": "1.1k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 17, "commits_low_confidence": false, "score": 79.6, "description": "You built it. Now brag. Turn the project you just created into a short, shareable launch video with one command.", "language": "Python", "open_issues": 8, "category": "Agent Skills", "category_rank": 177, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-11T20:44:37Z", "slug": "brag", "full_fetched_at": "2026-10-12T12:02:34Z", "source_note": "", "github_homepage": "https://latent-spaces.github.io/brag/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.7, "trust_score_v2": 54.7, "rank_v2": 177, "rank_v2_delta": 750, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.9, "maintenance": 16.8, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Oxylabs MCP", "repo": "oxylabs/oxylabs-mcp", "display_repo": "", "url": "https://github.com/oxylabs/oxylabs-mcp", "listing_class": "agent", "rank": 830, "previous_rank": 826, "rank_delta": -4, "stars": 104, "stars_fmt": "104", "forks": 26, "forks_fmt": "26", "last_push": "2026-09-07", "days_ago": 35, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.9, "description": "Official Oxylabs MCP integration", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 452, "npm_package": "", "crate_package": "", "pypi_package": "oxylabs-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 866, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.739, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T10:30:23Z", "slug": "oxylabs-mcp", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "https://oxylabs.io", "homepage_icon": "/site-icons/12e216a491fbeada.png", "homepage_icon_for": "https://oxylabs.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OXYLABS_AI_STUDIO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'oxylabs-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "oxylabs-mcp", "version": "0.9.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:09Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "oxylabs/oxylabs-mcp", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.7, "trust_score_v2": 54.7, "rank_v2": 830, "rank_v2_delta": 344, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 11.8, "maintenance": 9.7, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Howto", "repo": "luongnv89/claude-howto", "display_repo": "", "url": "https://github.com/luongnv89/claude-howto", "listing_class": "skill", "rank": 178, "previous_rank": 176, "rank_delta": -2, "stars": 41817, "stars_fmt": "41.8k", "forks": 5129, "forks_fmt": "5.1k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 5, "commits_low_confidence": true, "score": 79.6, "description": "A visual, example-driven guide to Claude Code — from basic concepts to advanced agents, with copy-paste templates that bring immediate value.", "language": "Python", "open_issues": 15, "category": "Agent Skills", "category_rank": 178, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.59, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T23:38:55Z", "slug": "claude-howto", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "http://luongnv.com/claude-howto/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (07-plugins/devops-automation/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: 07-plugins/README.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.7, "trust_score_v2": 54.7, "rank_v2": 178, "rank_v2_delta": 773, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 11.6, "maintenance": 13.4, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tugcantopaloglu Godot MCP", "repo": "tugcantopaloglu/godot-mcp", "display_repo": "", "url": "https://github.com/tugcantopaloglu/godot-mcp", "listing_class": "agent", "rank": 831, "previous_rank": 825, "rank_delta": -6, "stars": 481, "stars_fmt": "481", "forks": 73, "forks_fmt": "73", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 4, "commits_low_confidence": true, "score": 58.2, "description": "MCP server for full Godot 4.x engine control: 157 tools for AI-driven game development (GDScript and C#/.NET). Tested with Godot 4.7.", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 453, "npm_package": "@tugcantopaloglu/godot-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 119, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.189, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 3, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:52:07Z", "slug": "tugcantopaloglu-godot-mcp", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "filesystem" ], "confidence": "high", "evidence": [ "Found filesystem dependency 'fs-extra' in package.json", "README/docs also mention filesystem capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@tugcantopaloglu/godot-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@tugcantopaloglu/godot-mcp", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:29Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.7, "trust_score_v2": 54.7, "rank_v2": 831, "rank_v2_delta": 365, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.1, "maintenance": 13.2, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pgedge Postgres MCP", "repo": "pgEdge/pgedge-postgres-mcp", "display_repo": "", "url": "https://github.com/pgEdge/pgedge-postgres-mcp", "listing_class": "agent", "rank": 832, "previous_rank": 828, "rank_delta": -4, "stars": 234, "stars_fmt": "234", "forks": 22, "forks_fmt": "22", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 4, "commits_low_confidence": false, "score": 52.3, "description": "pgEdge MCP Server. A PostgreSQL MCP server with a Natural Language Agent CLI and Web UI.", "language": "Go", "open_issues": 5, "category": "MCP Servers", "category_rank": 454, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/pgedge/postgres-mcp:latest", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:48:41Z", "slug": "pgedge-postgres-mcp", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://docs.pgedge.com/pgedge-postgres-mcp-server", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .claude/agents/mcp-server-expert.md", "Found MCP-related server path: internal/mcp/http_server.go" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in examples/stdio-anthropic-chatbot/requirements.txt", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .cursor-plugin/plugin.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "PostgreSQL", "license_type": "open", "license_override": "", "trust_score": 54.6, "trust_score_v2": 54.6, "rank_v2": 832, "rank_v2_delta": 190, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 12.8, "maintenance": 13.9, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Headcount", "repo": "cbrock84/headcount", "display_repo": "", "url": "https://github.com/cbrock84/headcount", "listing_class": "skill", "rank": 179, "previous_rank": 178, "rank_delta": -1, "stars": 2034, "stars_fmt": "2.0k", "forks": 316, "forks_fmt": "316", "last_push": "2026-09-17", "days_ago": 25, "weekly_commits": 15, "commits_low_confidence": false, "score": 68.2, "description": "An agent organization structured as a company — 15+ departments, 125+ skills, each independently installable, citing the standards and regulators that settle the question. Runs in Claude Code and ChatGPT.", "language": "Markdown", "open_issues": 2, "category": "Agent Skills", "category_rank": 179, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.713, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:15:37Z", "slug": "headcount", "full_fetched_at": "2026-10-12T12:02:48Z", "source_note": "", "github_homepage": "https://cbrock84.github.io/headcount/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/corporate-strategy/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.6, "trust_score_v2": 54.6, "rank_v2": 179, "rank_v2_delta": 755, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 12.2, "maintenance": 15.1, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "agentos", "repo": "framerslab/agentos", "display_repo": "", "url": "https://github.com/framerslab/agentos", "listing_class": "agent", "rank": 833, "previous_rank": 830, "rank_delta": -3, "stars": 677, "stars_fmt": "677", "forks": 100, "forks_fmt": "100", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 389, "commits_low_confidence": false, "score": 76.3, "description": "TypeScript AI agent framework: cognitive memory, runtime tool forging, multi-agent orchestration, 11 LLM providers.", "language": "TypeScript", "open_issues": 15, "category": "Agent Frameworks", "category_rank": 78, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.61, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:44:28Z", "slug": "agentos", "full_fetched_at": "2026-10-12T16:02:09Z", "source_note": "", "github_homepage": "https://docs.agentos.sh", "homepage_icon": "/site-icons/f18b4f2fb05458b0.png", "homepage_icon_for": "https://docs.agentos.sh", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Postgres dependency 'pg' in package.json", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database", "shell" ], "confidence": "high", "evidence": [ "Found extension-based path: docs/extensions/CAPABILITY_DISCOVERY.md", "README/docs also mention a extension-based plugin/integration surface", "Found shell dependency 'execa' in package.json", "Found database dependency 'pg' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.6, "trust_score_v2": 54.6, "rank_v2": 833, "rank_v2_delta": -20, "trust_v2_adjustment": -3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.0, "maintenance": 20.0, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Paparats – Local Semantic Code Search MCP", "repo": "IBazylchuk/paparats-mcp", "display_repo": "", "url": "https://github.com/IBazylchuk/paparats-mcp", "listing_class": "agent", "rank": 834, "previous_rank": 835, "rank_delta": 1, "stars": 11, "stars_fmt": "11", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 6, "commits_low_confidence": true, "score": 42.8, "description": "Local‑first MCP server for multi‑repository semantic code search with Qdrant and llama. Turns your entire workspace into private context for AI coding assistants like Claude Code, Codex, Cursor, Copilot, Antigravity and Windsurf.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 455, "npm_package": "@paparats/cli", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 342, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-10T15:02:15Z", "slug": "paparats-local-semantic-code-search-mcp", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/server/package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Qdrant" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Qdrant dependency 'qdrant' in packages/server/package.json", "Found Qdrant credential/config marker 'QDRANT_API_KEY'", "README/docs also mention Qdrant" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'qdrant' in packages/server/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@paparats/cli' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@paparats/cli", "version": "2.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:24Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.5, "trust_score_v2": 54.5, "rank_v2": 834, "rank_v2_delta": 311, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 13.1, "maintenance": 13.4, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qdrant MCP Server", "repo": "qdrant/mcp-server-qdrant", "display_repo": "", "url": "https://github.com/qdrant/mcp-server-qdrant", "listing_class": "agent", "rank": 835, "previous_rank": 832, "rank_delta": -3, "stars": 1548, "stars_fmt": "1.5k", "forks": 305, "forks_fmt": "305", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 50.4, "description": "An official Qdrant Model Context Protocol (MCP) server implementation", "language": "Python", "open_issues": 29, "category": "MCP Servers", "category_rank": 456, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-qdrant", "docker_image": "", "vscode_extension": "", "weekly_downloads": 8806, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.641, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:14:22Z", "slug": "qdrant-mcp-server", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "https://qdrant.tech", "homepage_icon": "/site-icons/eac0e9fb637c0931.png", "homepage_icon_for": "https://qdrant.tech", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: kiro-power/mcp.json", "Found MCP-related server path: src/mcp_server_qdrant/__init__.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Qdrant" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Qdrant dependency 'qdrant' in pyproject.toml", "Found Qdrant credential/config marker 'QDRANT_API_KEY'", "README/docs also mention Qdrant" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'qdrant' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-server-qdrant' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-qdrant", "version": "0.8.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:19Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.5, "trust_score_v2": 54.5, "rank_v2": 835, "rank_v2_delta": 143, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.5, "identity": 10.8, "transparency": 12.1, "maintenance": 9.5, "adoption": 12.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SunoMCP", "repo": "AceDataCloud/SunoMCP", "display_repo": "", "url": "https://github.com/AceDataCloud/SunoMCP", "listing_class": "agent", "rank": 836, "previous_rank": 816, "rank_delta": -20, "stars": 65, "stars_fmt": "65", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 12, "commits_low_confidence": false, "score": 55.4, "description": "MCP server for Suno AI music generation, lyrics, and cover workflows via Ace Data Cloud.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 457, "npm_package": "", "crate_package": "", "pypi_package": "mcp-suno", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1420, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.18, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:25:51Z", "slug": "sunomcp", "full_fetched_at": "2026-10-12T08:02:33Z", "source_note": "", "github_homepage": "https://platform.acedata.cloud", "homepage_icon": "/site-icons/a8c495fb507116f4.png", "homepage_icon_for": "https://platform.acedata.cloud", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: CONTRIBUTING_TO_MCP_SERVERS.md" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "Found credential/config marker 'ACEDATACLOUD_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-suno' points to acedatacloud/mcp-suno (same owner as acedatacloud/sunomcp, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-suno", "version": "2026.10.12.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:33Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.5, "trust_score_v2": 54.5, "rank_v2": 836, "rank_v2_delta": 140, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.0, "maintenance": 16.4, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MySQL MCP Server", "repo": "designcomputer/mysql_mcp_server", "display_repo": "", "url": "https://github.com/designcomputer/mysql_mcp_server", "listing_class": "agent", "rank": 837, "previous_rank": 833, "rank_delta": -4, "stars": 1397, "stars_fmt": "1.4k", "forks": 261, "forks_fmt": "261", "last_push": "2026-08-02", "days_ago": 71, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.2, "description": "A Model Context Protocol (MCP) server that enables secure interaction with MySQL databases", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 458, "npm_package": "", "crate_package": "", "pypi_package": "mysql-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9376, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.44, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:19:27Z", "slug": "mysql-mcp-server", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "https://designcomputer.com", "homepage_icon": "/site-icons/e9451821972930fe.png", "homepage_icon_for": "https://designcomputer.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mysql-mcp-server.mcpb", "Found MCP-related server path: src/mysql_mcp_server/__init__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mysql-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mysql-mcp-server", "version": "0.4.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.5, "trust_score_v2": 54.5, "rank_v2": 837, "rank_v2_delta": 380, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 11.3, "maintenance": 7.3, "adoption": 12.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Memmy", "repo": "MemTensor/memmy-agent", "display_repo": "", "url": "https://github.com/MemTensor/memmy-agent", "listing_class": "agent", "rank": 838, "previous_rank": 837, "rank_delta": -1, "stars": 2091, "stars_fmt": "2.1k", "forks": 202, "forks_fmt": "202", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 430, "commits_low_confidence": false, "score": 80.6, "description": "🍙 A personal AI agent & local memory hub for all AI agents, gives every AI one shared, fully controlled memory and persistent context — all AI remember the same you. Now supports Claude Code, Codex, OpenClaw and Hermes Agent etc.", "language": "TypeScript", "open_issues": 21, "category": "Memory & Knowledge", "category_rank": 39, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.46, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:32:02Z", "slug": "memmy", "full_fetched_at": "2026-10-12T12:02:36Z", "source_note": "", "github_homepage": "https://memmy.bot", "homepage_icon": "/site-icons/5cb328ce9faa9cbe.png", "homepage_icon_for": "https://memmy.bot", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.5, "trust_score_v2": 54.5, "rank_v2": 838, "rank_v2_delta": 69, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 10.9, "maintenance": 20.0, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Md2Wechat Skill", "repo": "geekjourneyx/md2wechat-skill", "display_repo": "", "url": "https://github.com/geekjourneyx/md2wechat-skill", "listing_class": "skill", "rank": 180, "previous_rank": 166, "rank_delta": -14, "stars": 3692, "stars_fmt": "3.7k", "forks": 413, "forks_fmt": "413", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8, "commits_low_confidence": true, "score": 70.5, "description": "面向 AI Agent 的微信公众号创作与发布 CLI：Markdown 排版、AI 配图、预览与草稿创建；支持由浏览器 Agent 保存知乎、CSDN、头条未发布草稿。", "language": "Go", "open_issues": 1, "category": "Agent Skills", "category_rank": 180, "npm_package": "@geekjourneyx/md2wechat", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 92, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T23:01:41Z", "slug": "md2wechat-skill", "full_fetched_at": "2026-10-12T16:02:16Z", "source_note": "", "github_homepage": "https://md2wechat.cn", "homepage_icon": "/site-icons/806d08008e9a5699.png", "homepage_icon_for": "https://md2wechat.cn", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'IMAGE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@geekjourneyx/md2wechat' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@geekjourneyx/md2wechat", "version": "3.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:16Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 54.4, "trust_score_v2": 54.4, "rank_v2": 180, "rank_v2_delta": 897, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 11.3, "maintenance": 13.9, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AgentPhone", "repo": "AgentPhone-AI/agentphone-mcp", "display_repo": "", "url": "https://github.com/AgentPhone-AI/agentphone-mcp", "listing_class": "agent", "rank": 839, "previous_rank": 834, "rank_delta": -5, "stars": 125, "stars_fmt": "125", "forks": 21, "forks_fmt": "21", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 4, "commits_low_confidence": true, "score": 51.8, "description": "", "language": "TypeScript", "open_issues": 18, "category": "MCP Servers", "category_rank": 459, "npm_package": "agentphone-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 255, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.538, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T01:16:28Z", "slug": "agentphone", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AGENTPHONE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'agentphone-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "agentphone-mcp", "version": "0.7.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:31Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.4, "trust_score_v2": 54.4, "rank_v2": 839, "rank_v2_delta": 346, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 11.0, "maintenance": 13.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "webclaw", "repo": "0xMassi/webclaw", "display_repo": "", "url": "https://github.com/0xMassi/webclaw", "listing_class": "agent", "rank": 840, "previous_rank": 813, "rank_delta": -27, "stars": 2373, "stars_fmt": "2.4k", "forks": 235, "forks_fmt": "235", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 8, "commits_low_confidence": false, "score": 65.6, "description": "Fast, local-first web content extraction for LLMs. Scrape, crawl, extract structured data — all from Rust. CLI, REST API, and MCP server.", "language": "Rust", "open_issues": 2, "category": "MCP Servers", "category_rank": 460, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-11T20:46:55Z", "slug": "webclaw", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "https://webclaw.io", "homepage_icon": "/site-icons/3c9fc577983d284a.png", "homepage_icon_for": "https://webclaw.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 54.3, "trust_score_v2": 54.3, "rank_v2": 840, "rank_v2_delta": 134, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.8, "maintenance": 14.5, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Lineai MCP Server", "repo": "lineai-intelligence/lineai-mcp-server", "display_repo": "", "url": "https://github.com/lineai-intelligence/lineai-mcp-server", "listing_class": "agent", "rank": 841, "previous_rank": 836, "rank_delta": -5, "stars": 37, "stars_fmt": "37", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 13, "commits_low_confidence": false, "score": 53.6, "description": "An MCP Server to utilize Lineai's rich software dependency data in your AI programming assistant.", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 461, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:39:03Z", "slug": "lineai-mcp-server", "full_fetched_at": "2026-10-11T20:01:48Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/rules/mcp-server-pattern.mdc", "Found MCP-related server path: src/lineai_mcp_server/__init__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MPL-2.0", "license_type": "open", "license_override": "", "trust_score": 54.3, "trust_score_v2": 54.3, "rank_v2": 841, "rank_v2_delta": 202, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 12.7, "maintenance": 16.1, "adoption": 3.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Apideck Libraries MCP", "repo": "apideck-libraries/mcp", "display_repo": "", "url": "https://github.com/apideck-libraries/mcp", "listing_class": "agent", "rank": 842, "previous_rank": 859, "rank_delta": 17, "stars": 20, "stars_fmt": "20", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 5, "commits_low_confidence": true, "score": 45.9, "description": "MCP server for Apideck Unified APIs — Accounting, File Storage, HRIS, Vault, Proxy", "language": "Dockerfile", "open_issues": 1, "category": "MCP Servers", "category_rank": 462, "npm_package": "@apideck/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 450, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:30:01Z", "slug": "apideck-libraries-mcp", "full_fetched_at": "2026-10-12T12:02:43Z", "source_note": "", "github_homepage": "https://mcp.apideck.dev/mcp", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'APIDECK_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@apideck/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@apideck/mcp", "version": "0.23.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:43Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.3, "trust_score_v2": 54.3, "rank_v2": 842, "rank_v2_delta": 346, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.4, "maintenance": 13.6, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Aws Agent Skills", "repo": "itsmostafa/aws-agent-skills", "display_repo": "", "url": "https://github.com/itsmostafa/aws-agent-skills", "listing_class": "skill", "rank": 181, "previous_rank": 179, "rank_delta": -2, "stars": 1162, "stars_fmt": "1.2k", "forks": 445, "forks_fmt": "445", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 21, "commits_low_confidence": false, "score": 71.6, "description": "AWS Skills for Agents", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 181, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:36:52Z", "slug": "aws-agent-skills", "full_fetched_at": "2026-10-12T16:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.3, "trust_score_v2": 54.3, "rank_v2": 181, "rank_v2_delta": 766, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.3, "maintenance": 16.9, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cc Wf Studio", "repo": "breaking-brake/cc-wf-studio", "display_repo": "", "url": "https://github.com/breaking-brake/cc-wf-studio", "listing_class": "skill", "rank": 182, "previous_rank": 180, "rank_delta": -2, "stars": 5395, "stars_fmt": "5.4k", "forks": 568, "forks_fmt": "568", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 0, "commits_low_confidence": true, "score": 59.5, "description": "CC Workflow Studio", "language": "TypeScript", "open_issues": 40, "category": "Agent Skills", "category_rank": 182, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.42, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:37:19Z", "slug": "cc-wf-studio", "full_fetched_at": "2026-10-12T12:02:45Z", "source_note": "", "github_homepage": "https://open-vsx.org/extension/breaking-brake/cc-wf-studio", "homepage_icon": "/site-icons/a2b251d483daf0b3.png", "homepage_icon_for": "https://open-vsx.org/extension/breaking-brake/cc-wf-studio", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .roo/mcp.json", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/cli/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 54.2, "trust_score_v2": 54.2, "rank_v2": 182, "rank_v2_delta": 866, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 12.6, "maintenance": 11.7, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Victoriatraces", "repo": "VictoriaMetrics/mcp-victoriatraces", "display_repo": "", "url": "https://github.com/VictoriaMetrics/mcp-victoriatraces", "listing_class": "agent", "rank": 843, "previous_rank": 839, "rank_delta": -4, "stars": 17, "stars_fmt": "17", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 19, "commits_low_confidence": false, "score": 51.6, "description": "The implementation of Model Context Protocol (MCP) server for VictoriaTraces", "language": "Go", "open_issues": 2, "category": "MCP Servers", "category_rank": 463, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-09-28T23:51:07Z", "slug": "mcp-victoriatraces", "full_fetched_at": "2026-10-12T00:02:33Z", "source_note": "", "github_homepage": "https://victoriametrics.com", "homepage_icon": "/site-icons/becba1707c67de35.png", "homepage_icon_for": "https://victoriametrics.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VT_INSTANCE_BEARER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.2, "trust_score_v2": 54.2, "rank_v2": 843, "rank_v2_delta": 161, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.2, "maintenance": 16.8, "adoption": 3.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mistral MCP", "repo": "Swih/mistral-mcp", "display_repo": "", "url": "https://github.com/Swih/mistral-mcp", "listing_class": "agent", "rank": 844, "previous_rank": 840, "rank_delta": -4, "stars": 15, "stars_fmt": "15", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 13, "commits_low_confidence": false, "score": 46.9, "description": "Mistral MCP server for document extraction: invoices, contracts and typed JSON from text, Markdown or OCR. Six-tool core, chat, vision, audio, stdio and Streamable HTTP.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 464, "npm_package": "mistral-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 225, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.12, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:12:03Z", "slug": "mistral-mcp", "full_fetched_at": "2026-10-12T00:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Mistral AI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Mistral AI dependency 'mistralai' in package.json", "Found Mistral AI credential/config marker 'MISTRAL_API_KEY'", "README/docs also mention Mistral AI", "Ships a Claude Code plugin manifest (claude-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mistral-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mistral-mcp", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:19Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.2, "trust_score_v2": 54.2, "rank_v2": 844, "rank_v2_delta": 317, "trust_v2_adjustment": 4.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.9, "maintenance": 15.7, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "oh-my-agent", "repo": "first-fluke/oh-my-agent", "display_repo": "", "url": "https://github.com/first-fluke/oh-my-agent", "listing_class": "agent", "rank": 845, "previous_rank": 845, "rank_delta": 0, "stars": 1340, "stars_fmt": "1.3k", "forks": 150, "forks_fmt": "150", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 436, "commits_low_confidence": false, "score": 78.9, "description": "Mechanical verification for AI coding agents — skills pack or full harness (stop-hook gates, artifact checks, independent judges).", "language": "TypeScript", "open_issues": 0, "category": "Multi-Agent Systems", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:36:17Z", "slug": "oh-my-agent", "full_fetched_at": "2026-10-12T16:02:04Z", "source_note": "", "github_homepage": "https://firstfluke.com/oh-my-agent/", "homepage_icon": "/site-icons/0da9d6d4bd26895e.png", "homepage_icon_for": "https://firstfluke.com/oh-my-agent/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .agents/mcp.json", "Found MCP-related server path: .github/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'puppeteer' in cli/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.2, "trust_score_v2": 54.2, "rank_v2": 845, "rank_v2_delta": 91, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.2, "maintenance": 20.0, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SharePoint MCP Server", "repo": "ravikant1918/sharepoint-mcp", "display_repo": "", "url": "https://github.com/ravikant1918/sharepoint-mcp", "listing_class": "agent", "rank": 846, "previous_rank": 847, "rank_delta": 1, "stars": 12, "stars_fmt": "12", "forks": 4, "forks_fmt": "4", "last_push": "2026-03-15", "days_ago": 211, "weekly_commits": 0, "commits_low_confidence": false, "score": 10.0, "description": "Production-grade MCP Server for Microsoft SharePoint — give your AI agent (Claude, Cursor, Continue) live access to read, write, and manage SharePoint files and folders.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 465, "npm_package": "", "crate_package": "", "pypi_package": "sharepoint-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 78, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.264, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:13:18Z", "slug": "sharepoint-mcp-server", "full_fetched_at": "2026-10-11T20:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'sharepoint-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sharepoint-mcp", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:13Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.1, "trust_score_v2": 54.1, "rank_v2": 846, "rank_v2_delta": 387, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.3, "identity": 18.0, "transparency": 11.6, "maintenance": 0.0, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "RedAmon", "repo": "samugit83/redamon", "display_repo": "", "url": "https://github.com/samugit83/redamon", "listing_class": "agent", "rank": 847, "previous_rank": 843, "rank_delta": -4, "stars": 2998, "stars_fmt": "3.0k", "forks": 617, "forks_fmt": "617", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 359, "commits_low_confidence": false, "score": 83.5, "description": "Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both ways: plug in any MCP server as a tool, or drive RedAmon from Claude Code or your…", "language": "Python", "open_issues": 15, "category": "Security & Guardrails", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T14:59:15Z", "slug": "redamon", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "https://www.redamon.org", "homepage_icon": "/site-icons/c01975ef78fb282a.png", "homepage_icon_for": "https://www.redamon.org", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: skills/mcp-server-tools/SKILL.md", "Found MCP-related server path: webapp/src/app/api/mcp-server/route.ts", "Found MCP-related server test path: tests/mcp_server_live.sh" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in agentic/requirements.txt", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in agentic/requirements.txt", "README/docs also mention Amazon Bedrock", "Found Postgres dependency 'psycopg' in agentic/requirements.txt", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "code" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in mcp/requirements.txt", "README/docs also mention browser capabilities", "Found code dependency 'gitpython' in agentic/requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.1, "trust_score_v2": 54.1, "rank_v2": 847, "rank_v2_delta": 93, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 11.5, "maintenance": 19.7, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Baepsae", "repo": "oozoofrog/mcp-baepsae", "display_repo": "", "url": "https://github.com/oozoofrog/mcp-baepsae", "listing_class": "agent", "rank": 848, "previous_rank": 849, "rank_delta": 1, "stars": 26, "stars_fmt": "26", "forks": 2, "forks_fmt": "2", "last_push": "2026-03-31", "days_ago": 195, "weekly_commits": 0, "commits_low_confidence": false, "score": 10.8, "description": "MCP server with direct iOS simulator implementation", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 466, "npm_package": "mcp-baepsae", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 41, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:52:33Z", "slug": "mcp-baepsae", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-baepsae' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-baepsae", "version": "6.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.1, "trust_score_v2": 54.1, "rank_v2": 848, "rank_v2_delta": 384, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.3, "identity": 18.0, "transparency": 11.2, "maintenance": 0.0, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Titen", "repo": "RamaAditya49/titen", "display_repo": "", "url": "https://github.com/RamaAditya49/titen", "listing_class": "agent", "rank": 849, "previous_rank": 841, "rank_delta": -8, "stars": 16, "stars_fmt": "16", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 24, "commits_low_confidence": false, "score": 51.3, "description": "Agent memory that needs no API key, no LLM, and no embedding provider. One command on Bun and it is serving MCP over stdio against a local SQLite store. Drop-in for the MCP reference memory server. Every memory keeps its source, who may read it, and the evidence that contradicts it.", "language": "TypeScript", "open_issues": 0, "category": "Memory & Knowledge", "category_rank": 40, "npm_package": "titen-memory", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 551, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:04:51Z", "slug": "titen", "full_fetched_at": "2026-10-12T00:01:55Z", "source_note": "", "github_homepage": "https://titen.dev", "homepage_icon": "/site-icons/fa6fefe41f3c11cf.png", "homepage_icon_for": "https://titen.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/cursor/titen-memory/mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude/titen-memory/.claude-plugin/plugin.json)", "Found credential/config marker 'TITEN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'titen-memory' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "titen-memory", "version": "0.10.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:55Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.1, "trust_score_v2": 54.1, "rank_v2": 849, "rank_v2_delta": 337, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.7, "maintenance": 17.2, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Stitch Skills", "repo": "google-labs-code/stitch-skills", "display_repo": "", "url": "https://github.com/google-labs-code/stitch-skills", "listing_class": "skill", "rank": 183, "previous_rank": 182, "rank_delta": -1, "stars": 8477, "stars_fmt": "8.5k", "forks": 1108, "forks_fmt": "1.1k", "last_push": "2026-08-17", "days_ago": 56, "weekly_commits": 0, "commits_low_confidence": false, "score": 55.2, "description": "A library of Agent Skills designed to work with the Stitch MCP server. Each skill follows the Agent Skills open standard, for compatibility with coding agents such as Antigravity, Gemini CLI, Claude Code, Cursor.", "language": "TypeScript", "open_issues": 10, "category": "Agent Skills", "category_rank": 183, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.388, "scorecard_score": 6.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 2, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:43:40Z", "slug": "stitch-skills", "full_fetched_at": "2026-10-12T16:02:08Z", "source_note": "", "github_homepage": "https://stitch.withgoogle.com/docs/mcp/setup", "homepage_icon": "/site-icons/7bb3fa968c830e4c.png", "homepage_icon_for": "https://stitch.withgoogle.com/docs/mcp/setup", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.0, "trust_score_v2": 54.0, "rank_v2": 183, "rank_v2_delta": 859, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 13.9, "maintenance": 8.3, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "GPU MCP Server", "repo": "pmady/gpu-mcp-server", "display_repo": "", "url": "https://github.com/pmady/gpu-mcp-server", "listing_class": "agent", "rank": 850, "previous_rank": 846, "rank_delta": -4, "stars": 15, "stars_fmt": "15", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 5, "commits_low_confidence": true, "score": 47.0, "description": "MCP server for NVIDIA GPU metrics give AI agents real-time access to GPU utilization, memory, temperature, and power", "language": "HCL", "open_issues": 11, "category": "MCP Servers", "category_rank": 467, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/pmady/gpu-mcp-server:v0.1.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.724, "scorecard_score": 6.1, "scorecard_checks": { "Dependency-Update-Tool": 10, "Code-Review": 5, "Token-Permissions": 0, "Maintained": 10, "Security-Policy": 4, "Dangerous-Workflow": 10, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Pinned-Dependencies": 1, "Signed-Releases": 0, "Fuzzing": 0, "Branch-Protection": -1, "License": 10, "Vulnerabilities": 6, "SAST": 10, "Packaging": 10, "Contributors": 3, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-11T20:04:03Z", "slug": "gpu-mcp-server", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "https://gpu-mcp-server.readthedocs.io/en/latest/", "homepage_icon": "/site-icons/73e2a0efb77a7353.png", "homepage_icon_for": "https://gpu-mcp-server.readthedocs.io/en/latest/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cmd/gpu-mcp-server/main.go", "Found MCP-related server path: deploy/helm/gpu-mcp-server/.helmignore", "Found MCP-related server test path: deploy/helm/gpu-mcp-server/templates/tests/connection-test.yaml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.0, "trust_score_v2": 54.0, "rank_v2": 850, "rank_v2_delta": 215, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 13.7, "maintenance": 13.4, "adoption": 2.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Googleworkspace Cli", "repo": "googleworkspace/cli", "display_repo": "", "url": "https://github.com/googleworkspace/cli", "listing_class": "skill", "rank": 184, "previous_rank": 181, "rank_delta": -3, "stars": 31399, "stars_fmt": "31.4k", "forks": 1876, "forks_fmt": "1.9k", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 66.5, "description": "Google Workspace CLI — one command-line tool for Drive, Gmail, Calendar, Sheets, Docs, Chat, Admin, and more. Dynamically built from Google Discovery Service. Includes AI agent skills.", "language": "Rust", "open_issues": 133, "category": "Agent Skills", "category_rank": 184, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.89, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:50:42Z", "slug": "googleworkspace-cli", "full_fetched_at": "2026-10-12T16:02:10Z", "source_note": "", "github_homepage": "https://developers.google.com/workspace", "homepage_icon": "/site-icons/a7b2579da4d01429.png", "homepage_icon_for": "https://developers.google.com/workspace", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'GOOGLE_WORKSPACE_CLI_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.0, "trust_score_v2": 54.0, "rank_v2": 184, "rank_v2_delta": 746, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 12.1, "maintenance": 11.6, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Figma Context MCP", "repo": "GLips/Figma-Context-MCP", "display_repo": "", "url": "https://github.com/GLips/Figma-Context-MCP", "listing_class": "agent", "rank": 851, "previous_rank": 853, "rank_delta": 2, "stars": 15975, "stars_fmt": "16.0k", "forks": 1263, "forks_fmt": "1.3k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 0, "commits_low_confidence": true, "score": 64.3, "description": "MCP server to provide Figma layout information to AI coding agents like Cursor", "language": "TypeScript", "open_issues": 7, "category": "Protocols & Tool Integration", "category_rank": 44, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.82, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:19:18Z", "slug": "figma-context-mcp", "full_fetched_at": "2026-10-12T04:02:37Z", "source_note": "", "github_homepage": "https://www.framelink.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FIGMA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.0, "trust_score_v2": 54.0, "rank_v2": 851, "rank_v2_delta": 164, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 11.6, "maintenance": 11.9, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Symphony", "repo": "openai/symphony", "display_repo": "", "url": "https://github.com/openai/symphony", "listing_class": "agent", "rank": 852, "previous_rank": 848, "rank_delta": -4, "stars": 27647, "stars_fmt": "27.6k", "forks": 2876, "forks_fmt": "2.9k", "last_push": "2026-09-15", "days_ago": 27, "weekly_commits": 2, "commits_low_confidence": false, "score": 70.1, "description": "Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.", "language": "Elixir", "open_issues": 0, "category": "Coding Agents", "category_rank": 51, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.957, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:59:59Z", "slug": "symphony", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "https://openai.com/index/open-source-codex-orchestration-symphony/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.0, "trust_score_v2": 54.0, "rank_v2": 852, "rank_v2_delta": 115, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 11.4, "maintenance": 12.1, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DeLive", "repo": "XimilalaXiang/DeLive", "display_repo": "", "url": "https://github.com/XimilalaXiang/DeLive", "listing_class": "skill", "rank": 185, "previous_rank": 186, "rank_delta": 1, "stars": 271, "stars_fmt": "271", "forks": 18, "forks_fmt": "18", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 34, "commits_low_confidence": false, "score": 64.7, "description": "System audio capture + multi-provider ASR + local-first AI review workspace. Floating live captions, 12 ASR backends, 60+ languages, AI summary/chat/mindmap, Open API, MCP server, and Agent Skill.", "language": "TypeScript", "open_issues": 4, "category": "Agent Skills", "category_rank": 185, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:50:07Z", "slug": "delive", "full_fetched_at": "2026-10-12T04:02:04Z", "source_note": "", "github_homepage": "https://delive.me", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp/delive-mcp-server.js", "Found MCP dependency '@modelcontextprotocol/sdk' in mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 54.0, "trust_score_v2": 54.0, "rank_v2": 185, "rank_v2_delta": 875, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 11.3, "maintenance": 18.1, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Bexio MCP Server", "repo": "PromptPartner/bexio-mcp-server", "display_repo": "", "url": "https://github.com/PromptPartner/bexio-mcp-server", "listing_class": "agent", "rank": 853, "previous_rank": 855, "rank_delta": 2, "stars": 36, "stars_fmt": "36", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 35, "commits_low_confidence": false, "score": 56.9, "description": "Complete Swiss accounting integration for Bexio via MCP. Works with Claude Desktop, n8n, and any MCP client. 310 tools for invoices, contacts, projects & more. Created by Lukas Hertig.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 468, "npm_package": "@promptpartner/bexio-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 242, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T04:08:28Z", "slug": "bexio-mcp-server", "full_fetched_at": "2026-10-12T00:01:56Z", "source_note": "", "github_homepage": "https://promptpartner.ai", "homepage_icon": "/site-icons/456b3c41f6395462.png", "homepage_icon_for": "https://promptpartner.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in src/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BEXIO_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@promptpartner/bexio-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@promptpartner/bexio-mcp-server", "version": "2.6.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:56Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 54.0, "trust_score_v2": 54.0, "rank_v2": 853, "rank_v2_delta": 344, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.5, "maintenance": 17.3, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Lumino MCP Server", "repo": "spre-sre/lumino-mcp-server", "display_repo": "", "url": "https://github.com/spre-sre/lumino-mcp-server", "listing_class": "agent", "rank": 854, "previous_rank": 850, "rank_delta": -4, "stars": 11, "stars_fmt": "11", "forks": 17, "forks_fmt": "17", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.0, "description": "AI/ML-powered diagnostic engine for SRE Observability on Konflux and OpenShift. It uses the Model Context Protocol (MCP) and 40+ tools to analyze logs, metrics, and traces, enabling automated RCA and predictive analysis.", "language": "Python", "open_issues": 91, "category": "MCP Servers", "category_rank": 469, "npm_package": "", "crate_package": "", "pypi_package": "lumino-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 33, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.54, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:59:32Z", "slug": "lumino-mcp-server", "full_fetched_at": "2026-10-12T00:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PROMETHEUS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'lumino-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "lumino-mcp-server", "version": "0.9.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:16Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.9, "trust_score_v2": 53.9, "rank_v2": 854, "rank_v2_delta": 346, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.3, "identity": 10.8, "transparency": 13.7, "maintenance": 9.5, "adoption": 4.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Okf Skills", "repo": "scaccogatto/okf-skills", "display_repo": "", "url": "https://github.com/scaccogatto/okf-skills", "listing_class": "skill", "rank": 186, "previous_rank": 183, "rank_delta": -3, "stars": 409, "stars_fmt": "409", "forks": 36, "forks_fmt": "36", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 4, "commits_low_confidence": false, "score": 54.9, "description": "The OKF toolkit for Claude Code — author, maintain, validate & visualize Open Knowledge Format bundles. Plugin, agent skills, and a GitHub Action.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 186, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.227, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T00:41:52Z", "slug": "okf-skills", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "https://scaccogatto.github.io/okf-skills/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .okf/components/mcp-server.md", "Found MCP-related server path: .okf/decisions/mcp-server.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.9, "trust_score_v2": 53.9, "rank_v2": 186, "rank_v2_delta": 864, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 13.2, "maintenance": 13.9, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Daytona", "repo": "daytonaio/daytona", "display_repo": "", "url": "https://github.com/daytonaio/daytona", "listing_class": "agent", "rank": 855, "previous_rank": 856, "rank_delta": 1, "stars": 71560, "stars_fmt": "71.6k", "forks": 5646, "forks_fmt": "5.6k", "last_push": "2026-07-24", "days_ago": 80, "weekly_commits": 0, "commits_low_confidence": false, "score": 60.4, "description": "Daytona is a Secure and Elastic Infrastructure for Running AI-Generated Code", "language": "", "open_issues": 326, "category": "Sandboxes & Runtimes", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "daytona-sdk", "docker_image": "", "vscode_extension": "", "weekly_downloads": 329828, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.99, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 0, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T09:59:40Z", "slug": "daytona", "full_fetched_at": "2026-10-12T04:02:25Z", "source_note": "", "github_homepage": "https://daytona.io", "homepage_icon": "/site-icons/a5e088ccad736b06.png", "homepage_icon_for": "https://daytona.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'daytona-sdk' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "daytonaio/daytona", "criterion": "5.1", "detail": "repository is archived" }, { "repo": "daytonaio/daytona", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "unlicensed", "license_override": "", "trust_score": 53.9, "trust_score_v2": 53.9, "rank_v2": 855, "rank_v2_delta": 212, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.2, "identity": 10.8, "transparency": 4.2, "maintenance": 6.7, "adoption": 19.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Gmc MCP", "repo": "kiwoongeom/gmc-mcp", "display_repo": "", "url": "https://github.com/kiwoongeom/gmc-mcp", "listing_class": "agent", "rank": 856, "previous_rank": 844, "rank_delta": -12, "stars": 17, "stars_fmt": "17", "forks": 3, "forks_fmt": "3", "last_push": "2026-05-02", "days_ago": 163, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.8, "description": "The first free, open-source, self-hosted MCP server for Google Merchant Center (GMC). 126 tools over Merchant API v1 — products, inventory, reports, promotions, returns, account config, audit log + rollback, dry-run. Free alternative to paid SaaS (Adzviser, Catchr, Windsor.ai, Pipedream).", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 470, "npm_package": "", "crate_package": "", "pypi_package": "gmc-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 530, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-01T02:03:22Z", "slug": "gmc-mcp", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GMC_OAUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'gmc-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "gmc-mcp", "version": "0.2.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:38Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.9, "trust_score_v2": 53.9, "rank_v2": 856, "rank_v2_delta": 345, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.8, "identity": 18.0, "transparency": 11.4, "maintenance": 1.1, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CyberStrike", "repo": "CyberStrikeus/CyberStrike", "display_repo": "", "url": "https://github.com/CyberStrikeus/CyberStrike", "listing_class": "agent", "rank": 857, "previous_rank": 854, "rank_delta": -3, "stars": 3117, "stars_fmt": "3.1k", "forks": 501, "forks_fmt": "501", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 39, "commits_low_confidence": false, "score": 78.6, "description": "Open-source AI-powered offensive security harness for automated penetration testing.", "language": "TypeScript", "open_issues": 28, "category": "Security & Guardrails", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:54:44Z", "slug": "cyberstrike", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "https://cyberstrike.io", "homepage_icon": "/site-icons/cf5759e9e873e961.png", "homepage_icon_for": "https://cyberstrike.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "code" ], "confidence": "high", "evidence": [ "Found extension-based path: .cyberstrike/skill/mitre_attack/TA0003_persistence/T1176.001_browser-extensions/SKILL.md", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json", "Found code dependency '@octokit' in github/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 53.9, "trust_score_v2": 53.9, "rank_v2": 857, "rank_v2_delta": 149, "trust_v2_adjustment": 0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 11.2, "maintenance": 18.3, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cc Thingz", "repo": "umputun/cc-thingz", "display_repo": "", "url": "https://github.com/umputun/cc-thingz", "listing_class": "skill", "rank": 187, "previous_rank": 184, "rank_delta": -3, "stars": 486, "stars_fmt": "486", "forks": 54, "forks_fmt": "54", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 2, "commits_low_confidence": true, "score": 54.4, "description": "various things for claude code", "language": "Shell", "open_issues": 1, "category": "Agent Skills", "category_rank": 187, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.84, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:51:49Z", "slug": "cc-thingz", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/brainstorm/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.8, "trust_score_v2": 53.8, "rank_v2": 187, "rank_v2_delta": 779, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 13.2, "maintenance": 12.5, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Council Of High Intelligence", "repo": "0xNyk/council-of-high-intelligence", "display_repo": "", "url": "https://github.com/0xNyk/council-of-high-intelligence", "listing_class": "skill", "rank": 188, "previous_rank": 192, "rank_delta": 4, "stars": 4617, "stars_fmt": "4.6k", "forks": 433, "forks_fmt": "433", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 5, "commits_low_confidence": true, "score": 69.0, "description": "Structured multi-perspective deliberation for hard decisions. Run full councils, focused triads, or duo debates across Claude Code, Codex, Gemini CLI, and OpenCode.", "language": "Shell", "open_issues": 10, "category": "Agent Skills", "category_rank": 188, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.571, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:39:34Z", "slug": "council-of-high-intelligence", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://www.nyk.dev/oss/council-of-high-intelligence", "homepage_icon": "/site-icons/1f9d69f8518e06f2.png", "homepage_icon_for": "https://www.nyk.dev/oss/council-of-high-intelligence", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'NVIDIA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.8, "trust_score_v2": 53.8, "rank_v2": 188, "rank_v2_delta": 737, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 12.8, "maintenance": 13.6, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ego Lite", "repo": "citrolabs/ego-lite", "display_repo": "", "url": "https://github.com/citrolabs/ego-lite", "listing_class": "skill", "rank": 189, "previous_rank": 188, "rank_delta": -1, "stars": 17188, "stars_fmt": "17.2k", "forks": 922, "forks_fmt": "922", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 8, "commits_low_confidence": true, "score": 76.1, "description": "The fastest browser for AI agents to run browser automation, built for sharing your logged-in browser state with your AI agents, like Codex or Claude Code, without disturbing you. Zero cost, zero config.", "language": "JavaScript", "open_issues": 147, "category": "Agent Skills", "category_rank": 189, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:17:18Z", "slug": "ego-lite", "full_fetched_at": "2026-10-12T12:02:49Z", "source_note": "", "github_homepage": "https://lite.ego.app", "homepage_icon": "/site-icons/422b9d47da611e48.png", "homepage_icon_for": "https://lite.ego.app", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.8, "trust_score_v2": 53.8, "rank_v2": 189, "rank_v2_delta": 771, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.3, "maintenance": 13.9, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenBiliClaw", "repo": "whiteguo233/OpenBiliClaw", "display_repo": "", "url": "https://github.com/whiteguo233/OpenBiliClaw", "listing_class": "skill", "rank": 190, "previous_rank": 187, "rank_delta": -3, "stars": 3416, "stars_fmt": "3.4k", "forks": 184, "forks_fmt": "184", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 165, "commits_low_confidence": false, "score": 81.7, "description": "本地私有、开源的自进化跨平台 AI 内容发现 Agent：先理解你，再主动从 B站、小红书、抖音、YouTube、X、知乎、Reddit、微博等平台与开放 Web 寻找内容。（支持 deepseek harness 插件） | Local-first open-source cross-platform AI content discovery agent: understands you, then proactively finds content across Bilibili, Xiaohongshu, Douyin, YouTube, X, Zhihu, Reddit…", "language": "Python", "open_issues": 20, "category": "Agent Skills", "category_rank": 190, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:48:58Z", "slug": "openbiliclaw", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "https://whiteguo233.github.io/OpenBiliClaw/", "homepage_icon": "/site-icons/afed60de44e185e1.png", "homepage_icon_for": "https://whiteguo233.github.io/OpenBiliClaw/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.8, "trust_score_v2": 53.8, "rank_v2": 190, "rank_v2_delta": 734, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 11.3, "maintenance": 20.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ConnectWise Manage", "repo": "WYRE-AI/connectwise-manage-mcp", "display_repo": "", "url": "https://github.com/WYRE-AI/connectwise-manage-mcp", "listing_class": "agent", "rank": 858, "previous_rank": 857, "rank_delta": -1, "stars": 27, "stars_fmt": "27", "forks": 43, "forks_fmt": "43", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 15, "commits_low_confidence": false, "score": 56.0, "description": "MCP server for ConnectWise Manage (PSA) — tickets, companies, contacts, projects, and time entry tools for AI assistants", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 471, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/wyre-technology/connectwise-manage-mcp:v1.8.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.63, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:21:51Z", "slug": "connectwise-manage", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "https://conduit.wyre.ai/plugins/connectwise-psa", "homepage_icon": "/site-icons/18b15c594eb8d445.png", "homepage_icon_for": "https://conduit.wyre.ai/plugins/connectwise-psa", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'NODE_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.7, "trust_score_v2": 53.7, "rank_v2": 858, "rank_v2_delta": 168, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 12.6, "maintenance": 16.6, "adoption": 3.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ragas", "repo": "vibrantlabsai/ragas", "display_repo": "", "url": "https://github.com/vibrantlabsai/ragas", "listing_class": "agent", "rank": 859, "previous_rank": 861, "rank_delta": 2, "stars": 16002, "stars_fmt": "16.0k", "forks": 1755, "forks_fmt": "1.8k", "last_push": "2026-02-24", "days_ago": 230, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.3, "description": "Supercharge Your LLM Application Evaluations 🚀", "language": "Python", "open_issues": 384, "category": "Observability & Evaluation", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "ragas", "docker_image": "", "vscode_extension": "", "weekly_downloads": 331559, "dl_source": "pypi", "hn_mentions_30d": 8, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 7, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:29:39Z", "slug": "ragas", "full_fetched_at": "2026-10-12T04:02:46Z", "source_note": "", "github_homepage": "https://docs.ragas.io", "homepage_icon": "/site-icons/e1028bb6da50c3f2.png", "homepage_icon_for": "https://docs.ragas.io", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ragas' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ragas", "version": "0.4.3" } ], "found": [ { "id": "GHSA-95ww-475f-pr4f", "aliases": [ "CVE-2026-6587", "PYSEC-2026-3046" ], "summary": "RAGAS has SSRF via Multi-Modal Faithfulness Collections Module", "severity": "LOW", "published": "2026-04-20", "package": "ragas", "version": "0.4.3" } ], "worst": "LOW", "checked_at": "2026-10-12T04:02:46Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.7, "trust_score_v2": 53.7, "rank_v2": 859, "rank_v2_delta": 258, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 12.2, "maintenance": 0.0, "adoption": 17.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cc Sdd", "repo": "gotalab/cc-sdd", "display_repo": "", "url": "https://github.com/gotalab/cc-sdd", "listing_class": "skill", "rank": 191, "previous_rank": 190, "rank_delta": -1, "stars": 3710, "stars_fmt": "3.7k", "forks": 290, "forks_fmt": "290", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 25, "commits_low_confidence": false, "score": 72.9, "description": "Turn approved specs into long-running autonomous implementation. A minimal, adaptable SDD harness with Agent Skills for Claude Code, Codex, Cursor, Copilot, Windsurf, OpenCode, Gemini CLI, and Antigravity.", "language": "TypeScript", "open_issues": 12, "category": "Agent Skills", "category_rank": 191, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-19T01:07:06Z", "slug": "cc-sdd", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.6, "trust_score_v2": 53.6, "rank_v2": 191, "rank_v2_delta": 794, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 11.8, "maintenance": 16.4, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Figma MCP Rust", "repo": "alvinindra/figma-mcp-rust", "display_repo": "", "url": "https://github.com/alvinindra/figma-mcp-rust", "listing_class": "agent", "rank": 860, "previous_rank": 980, "rank_delta": 120, "stars": 63, "stars_fmt": "63", "forks": 24, "forks_fmt": "24", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 3, "commits_low_confidence": false, "score": 49.8, "description": "Figma MCP build with Rust, server with full read/write access via plugin (no REST API, no rate limits, 73 tools)", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 472, "npm_package": "@alvinindra/figma-mcp-rust", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 113, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:42:59Z", "slug": "figma-mcp-rust", "full_fetched_at": "2026-10-12T08:02:44Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@alvinindra/figma-mcp-rust' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@alvinindra/figma-mcp-rust", "version": "0.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:44Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.6, "trust_score_v2": 53.6, "rank_v2": 860, "rank_v2_delta": 380, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 14.4, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bhived MCP", "repo": "ArtKeyAi/bhived-mcp", "display_repo": "", "url": "https://github.com/ArtKeyAi/bhived-mcp", "listing_class": "agent", "rank": 861, "previous_rank": 865, "rank_delta": 4, "stars": 35, "stars_fmt": "35", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 15, "commits_low_confidence": false, "score": 50.8, "description": "bhived is an MCP server that gives AI agents shared memory, skills, and tool discovery. install once, works in Claude Code, Cursor, and 15+ other agents.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 473, "npm_package": "bhived-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 318, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:16:58Z", "slug": "bhived-mcp", "full_fetched_at": "2026-10-12T16:02:13Z", "source_note": "", "github_homepage": "https://bhived.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BRAVE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'bhived-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "bhived-mcp", "version": "1.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:13Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.6, "trust_score_v2": 53.6, "rank_v2": 861, "rank_v2_delta": 350, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.4, "identity": 10.8, "transparency": 10.8, "maintenance": 16.5, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": ".NET MCP Server", "repo": "jongalloway/dotnet-mcp", "display_repo": "", "url": "https://github.com/jongalloway/dotnet-mcp", "listing_class": "agent", "rank": 862, "previous_rank": 866, "rank_delta": 4, "stars": 36, "stars_fmt": "36", "forks": 4, "forks_fmt": "4", "last_push": "2026-09-21", "days_ago": 21, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.8, "description": "MCP wrapper for the .NET SDK", "language": "C#", "open_issues": 22, "category": "MCP Servers", "category_rank": 474, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 9, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 7, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:41:32Z", "slug": "net-mcp-server", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.5, "trust_score_v2": 53.5, "rank_v2": 862, "rank_v2_delta": 227, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.7, "maintenance": 10.6, "adoption": 3.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Elasticsearch MCP Server", "repo": "elastic/mcp-server-elasticsearch", "display_repo": "", "url": "https://github.com/elastic/mcp-server-elasticsearch", "listing_class": "agent", "rank": 863, "previous_rank": 860, "rank_delta": -3, "stars": 718, "stars_fmt": "718", "forks": 158, "forks_fmt": "158", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 0, "commits_low_confidence": true, "score": 52.2, "description": "", "language": "Rust", "open_issues": 10, "category": "MCP Servers", "category_rank": 475, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:08:46Z", "slug": "elasticsearch-mcp-server", "full_fetched_at": "2026-10-12T04:02:26Z", "source_note": "", "github_homepage": "https://www.elastic.co/elasticsearch", "homepage_icon": "/site-icons/49914b5134672791.png", "homepage_icon_for": "https://www.elastic.co/elasticsearch", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/bin/elasticsearch-core-mcp-server.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ES_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.5, "trust_score_v2": 53.5, "rank_v2": 863, "rank_v2_delta": 172, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 11.9, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Skills Journalism", "repo": "jamditis/claude-skills-journalism", "display_repo": "", "url": "https://github.com/jamditis/claude-skills-journalism", "listing_class": "skill", "rank": 192, "previous_rank": 189, "rank_delta": -3, "stars": 417, "stars_fmt": "417", "forks": 67, "forks_fmt": "67", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 18, "commits_low_confidence": false, "score": 64.1, "description": "Claude Code skills for journalism, media, and academia - verification, FOIA, data journalism, academic writing, and more", "language": "Python", "open_issues": 21, "category": "Agent Skills", "category_rank": 192, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:49:06Z", "slug": "claude-skills-journalism", "full_fetched_at": "2026-10-12T16:02:31Z", "source_note": "", "github_homepage": "https://skills.amditis.tech/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (autocontext/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.5, "trust_score_v2": 53.5, "rank_v2": 192, "rank_v2_delta": 771, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.2, "maintenance": 16.6, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "dao-code", "repo": "tigicion/dao-code", "display_repo": "", "url": "https://github.com/tigicion/dao-code", "listing_class": "agent", "rank": 864, "previous_rank": 862, "rank_delta": -2, "stars": 1082, "stars_fmt": "1.1k", "forks": 43, "forks_fmt": "43", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 25, "commits_low_confidence": false, "score": 65.6, "description": "Open-source TypeScript terminal coding agent for DeepSeek-V4 — builds on DeepSeek's strong price-performance and ultra-cheap cache pricing, engineering byte-stable prefixes and cache-reusing forks so cross-session memory and a continuous self-correction layer add almost no token cost; 1M context…", "language": "TypeScript", "open_issues": 4, "category": "Coding Agents", "category_rank": 52, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:51:01Z", "slug": "dao-code", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: src/mcp/__fixtures__/fake-mcp-server.mjs", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.5, "trust_score_v2": 53.5, "rank_v2": 864, "rank_v2_delta": 221, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 12.0, "maintenance": 16.3, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Stealth Browser MCP", "repo": "vibheksoni/stealth-browser-mcp", "display_repo": "", "url": "https://github.com/vibheksoni/stealth-browser-mcp", "listing_class": "agent", "rank": 865, "previous_rank": 881, "rank_delta": 16, "stars": 2221, "stars_fmt": "2.2k", "forks": 302, "forks_fmt": "302", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 21, "commits_low_confidence": false, "score": 73.3, "description": "Stealth browser automation for AI agents over MCP and the Chrome DevTools Protocol: navigation, network hooks, DOM extraction, and pixel-accurate UI cloning.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 476, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.013, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:49:04Z", "slug": "stealth-browser-mcp", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'STEALTH_BROWSER_MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.5, "trust_score_v2": 53.5, "rank_v2": 865, "rank_v2_delta": 166, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.6, "maintenance": 17.4, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Stats Compass", "repo": "oogunbiyi21/stats-compass-mcp", "display_repo": "", "url": "https://github.com/oogunbiyi21/stats-compass-mcp", "listing_class": "agent", "rank": 866, "previous_rank": 863, "rank_delta": -3, "stars": 17, "stars_fmt": "17", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 43, "commits_low_confidence": false, "score": 56.3, "description": "Stats Compass MCP server and utils", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 477, "npm_package": "", "crate_package": "", "pypi_package": "stats-compass-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1049, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.02, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:48:08Z", "slug": "stats-compass", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found credential/config marker 'STATS_COMPASS_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'stats-compass-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "stats-compass-mcp", "version": "0.3.33" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.5, "trust_score_v2": 53.5, "rank_v2": 866, "rank_v2_delta": 167, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.6, "maintenance": 18.5, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Doom MCP", "repo": "gunnargrosch/doom-mcp", "display_repo": "", "url": "https://github.com/gunnargrosch/doom-mcp", "listing_class": "agent", "rank": 867, "previous_rank": 869, "rank_delta": 2, "stars": 13, "stars_fmt": "13", "forks": 5, "forks_fmt": "5", "last_push": "2026-03-13", "days_ago": 213, "weekly_commits": 0, "commits_low_confidence": false, "score": 10.5, "description": "Play DOOM via MCP - works with Claude Code, Cursor, and any MCP client", "language": "Rust", "open_issues": 0, "category": "MCP Servers", "category_rank": 478, "npm_package": "doom-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.263, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:25:34Z", "slug": "doom-mcp", "full_fetched_at": "2026-10-12T16:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'doom-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "doom-mcp", "version": "0.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:13Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.5, "trust_score_v2": 53.5, "rank_v2": 867, "rank_v2_delta": 395, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.1, "identity": 18.0, "transparency": 11.4, "maintenance": 0.0, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ocm MCP Server", "repo": "sandeepbazar/ocm-mcp-server", "display_repo": "", "url": "https://github.com/sandeepbazar/ocm-mcp-server", "listing_class": "agent", "rank": 868, "previous_rank": 870, "rank_delta": 2, "stars": 10, "stars_fmt": "10", "forks": 1, "forks_fmt": "1", "last_push": "2026-08-29", "days_ago": 44, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.9, "description": "Moved to github.com/ocm-mcp-server/ocm-mcp-server — this repository is a signpost only.", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 479, "npm_package": "", "crate_package": "", "pypi_package": "ocm-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.5, "scorecard_score": 7.9, "scorecard_checks": { "Code-Review": 0, "Dependency-Update-Tool": 10, "Maintained": 0, "Binary-Artifacts": 10, "Dangerous-Workflow": 10, "Security-Policy": 10, "Token-Permissions": 10, "Pinned-Dependencies": 8, "Vulnerabilities": 10, "CII-Best-Practices": 2, "Signed-Releases": 10, "Packaging": 10, "License": 10, "Fuzzing": 10, "SAST": 10, "Branch-Protection": 8, "Contributors": 0, "CI-Tests": 10 }, "scorecard_scanned_at": "2026-10-09T00:05:33Z", "slug": "ocm-mcp-server", "full_fetched_at": "2026-10-09T00:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "warning", "confidence": "high", "summary": "1 package source mismatch detected", "evidence": [ "pypi package 'ocm-mcp-server' points to ocm-mcp-server/ocm-mcp-server, not sandeepbazar/ocm-mcp-server" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "sandeepbazar/ocm-mcp-server", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "unlicensed", "license_override": "", "trust_score": 53.4, "trust_score_v2": 53.4, "rank_v2": 868, "rank_v2_delta": -79, "trust_v2_adjustment": -5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 19.9, "identity": 18.0, "transparency": 6.7, "maintenance": 9.1, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": -5.0 }, "pending_signals": false }, { "name": "Opencage Geocoding MCP", "repo": "OpenCageData/opencage-geocoding-mcp", "display_repo": "", "url": "https://github.com/OpenCageData/opencage-geocoding-mcp", "listing_class": "agent", "rank": 869, "previous_rank": 868, "rank_delta": -1, "stars": 19, "stars_fmt": "19", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 39.3, "description": "MCP server for querying the OpenCage geocoding API from within LLMs", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 480, "npm_package": "@opencage/mcp-opencage-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 20, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": -1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-09T03:02:10Z", "slug": "opencage-geocoding-mcp", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OPENCAGE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@opencage/mcp-opencage-server' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.4, "trust_score_v2": 53.4, "rank_v2": 869, "rank_v2_delta": 171, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 10.8, "transparency": 12.8, "maintenance": 13.0, "adoption": 4.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ros2 MCP", "repo": "wise-vision/ros2_mcp", "display_repo": "", "url": "https://github.com/wise-vision/ros2_mcp", "listing_class": "agent", "rank": 870, "previous_rank": 873, "rank_delta": 3, "stars": 90, "stars_fmt": "90", "forks": 15, "forks_fmt": "15", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 10, "commits_low_confidence": false, "score": 53.7, "description": "ROS2 MCP: the MCP server that lets AI agents see, understand and operate ROS 2 robots. MPL-2.0.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 481, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.765, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:49:19Z", "slug": "ros2-mcp", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MPL-2.0", "license_type": "open", "license_override": "", "trust_score": 53.4, "trust_score_v2": 53.4, "rank_v2": 870, "rank_v2_delta": 221, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 11.8, "maintenance": 15.4, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LazyLLM", "repo": "LazyAGI/LazyLLM", "display_repo": "", "url": "https://github.com/LazyAGI/LazyLLM", "listing_class": "agent", "rank": 871, "previous_rank": 927, "rank_delta": 56, "stars": 3888, "stars_fmt": "3.9k", "forks": 425, "forks_fmt": "425", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 18, "commits_low_confidence": false, "score": 74.6, "description": "Easiest and laziest way for building multi-agent LLMs applications.", "language": "Python", "open_issues": 34, "category": "Agent Frameworks", "category_rank": 79, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:34:53Z", "slug": "lazyllm", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "https://docs.lazyllm.ai/", "homepage_icon": "/site-icons/022eb1cbcf10f94e.png", "homepage_icon_for": "https://docs.lazyllm.ai/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI", "Postgres", "Qdrant", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Qdrant dependency 'qdrant' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.4, "trust_score_v2": 53.4, "rank_v2": 871, "rank_v2_delta": -3, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 11.2, "maintenance": 17.1, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LLM Guard", "repo": "protectai/llm-guard", "display_repo": "", "url": "https://github.com/protectai/llm-guard", "listing_class": "agent", "rank": 872, "previous_rank": 867, "rank_delta": -5, "stars": 3218, "stars_fmt": "3.2k", "forks": 464, "forks_fmt": "464", "last_push": "2026-07-08", "days_ago": 96, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.2, "description": "The Security Toolkit for LLM Interactions", "language": "Python", "open_issues": 12, "category": "Security & Guardrails", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "llm-guard", "docker_image": "", "vscode_extension": "", "weekly_downloads": 28022, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.6, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:12:01Z", "slug": "llm-guard", "full_fetched_at": "2026-10-12T08:02:18Z", "source_note": "", "github_homepage": "https://protectai.github.io/llm-guard/", "homepage_icon": "/site-icons/c3172578d4a3a199.png", "homepage_icon_for": "https://protectai.github.io/llm-guard/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: llm_guard/input_scanners/secrets_plugins/__init__.py", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'llm-guard' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "llm-guard", "version": "0.3.16" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:18Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "protectai/llm-guard", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.3, "trust_score_v2": 53.3, "rank_v2": 872, "rank_v2_delta": 115, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 13.1, "maintenance": 5.6, "adoption": 14.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ai Memory MCP", "repo": "alphaonedev/ai-memory-mcp", "display_repo": "", "url": "https://github.com/alphaonedev/ai-memory-mcp", "listing_class": "agent", "rank": 873, "previous_rank": 871, "rank_delta": -2, "stars": 54, "stars_fmt": "54", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 13, "commits_low_confidence": false, "score": 54.0, "description": "Persistent memory for any AI — MCP server, HTTP API, CLI. Works with Claude, ChatGPT, Grok, Gemini, Codex, Cursor, OpenClaw, and any MCP client. One Rust binary; SQLite or PostgreSQL + Apache AGE + pgvector; rust-a2a wake plane. Apache-2.0.", "language": "Rust", "open_issues": 898, "category": "MCP Servers", "category_rank": 482, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/alphaonedev/ai-memory:0.5.1", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:59:43Z", "slug": "ai-memory-mcp", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "https://alphaonedev.github.io/ai-memory-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server_identity.rs" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "OpenAI", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.3, "trust_score_v2": 53.3, "rank_v2": 873, "rank_v2_delta": 84, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 12.3, "maintenance": 16.4, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zotero MCP (kujenga)", "repo": "kujenga/zotero-mcp", "display_repo": "", "url": "https://github.com/kujenga/zotero-mcp", "listing_class": "agent", "rank": 874, "previous_rank": 872, "rank_delta": -2, "stars": 162, "stars_fmt": "162", "forks": 26, "forks_fmt": "26", "last_push": "2026-08-07", "days_ago": 66, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.8, "description": "Lightweight Model Context Protocol (MCP) server for the Zotero API, in Python", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 483, "npm_package": "", "crate_package": "", "pypi_package": "zotero-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 907, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.747, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:45:30Z", "slug": "zotero-mcp-kujenga", "full_fetched_at": "2026-10-11T16:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ZOTERO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'zotero-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "zotero-mcp", "version": "0.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:20Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.3, "trust_score_v2": 53.3, "rank_v2": 874, "rank_v2_delta": 348, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 11.9, "maintenance": 7.6, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Hexis", "repo": "Bevel-Software/Hexis", "display_repo": "", "url": "https://github.com/Bevel-Software/Hexis", "listing_class": "agent", "rank": 875, "previous_rank": 884, "rank_delta": 9, "stars": 102, "stars_fmt": "102", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1433, "commits_low_confidence": false, "score": 67.1, "description": "Centrally manage AI-agent skills, tools, context, permissions, and identity across your entire org. Self-hosted, Git-backed and MCP-native.", "language": "TypeScript", "open_issues": 0, "category": "Protocols & Tool Integration", "category_rank": 45, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:53:32Z", "slug": "hexis", "full_fetched_at": "2026-10-12T12:02:45Z", "source_note": "", "github_homepage": "https://demo.bevel.software/", "homepage_icon": "/site-icons/b28abaf2f14f6b06.png", "homepage_icon_for": "https://demo.bevel.software/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/core-backend/src/modules/tool-manuals/mcp-server-edit.service.ts", "Found MCP-related server test path: packages/core-backend/src/modules/mcp/__tests__/fake-downstream-mcp-server.ts", "Found MCP-related server test path: packages/core-backend/src/modules/tool-manuals/__tests__/mcp-server-edit.service.test.ts" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/core-backend/kb-template/Plugins/.gitkeep", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.3, "trust_score_v2": 53.3, "rank_v2": 875, "rank_v2_delta": 154, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.6, "maintenance": 20.0, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "nuwax", "repo": "nuwax-ai/nuwax", "display_repo": "", "url": "https://github.com/nuwax-ai/nuwax", "listing_class": "agent", "rank": 876, "previous_rank": 882, "rank_delta": 6, "stars": 892, "stars_fmt": "892", "forks": 181, "forks_fmt": "181", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1171, "commits_low_confidence": false, "score": 78.2, "description": "Nuwax Agent OS - An enterprise-grade AI Agent Development and Operation Platform - Providing a complete solution for agent creation and distribution, knowledge base management, model proxy, memory system, and plugin ecosystem.", "language": "TypeScript", "open_issues": 13, "category": "Agent Frameworks", "category_rank": 80, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T22:32:38Z", "slug": "nuwax", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "https://nuwax.com", "homepage_icon": "/site-icons/112ff8197cfbf3e0.png", "homepage_icon_for": "https://nuwax.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/components/CreateNewPlugin/index.tsx", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.3, "trust_score_v2": 53.3, "rank_v2": 876, "rank_v2_delta": 107, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 11.4, "maintenance": 20.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Shuohao Skills", "repo": "eternityspring/shuohao-skills", "display_repo": "", "url": "https://github.com/eternityspring/shuohao-skills", "listing_class": "skill", "rank": 193, "previous_rank": 191, "rank_delta": -2, "stars": 4451, "stars_fmt": "4.5k", "forks": 608, "forks_fmt": "608", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 36, "commits_low_confidence": false, "score": 78.8, "description": "AI 短剧制作的 skill 集合：拆角色、排大纲、出场景与道具设定、写剧本、切分镜 | Agent skills for AI short-drama production — character bibles, adaptation outlines, art bibles, screenplays, storyboards. Runs in Claude Code & codex.", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 193, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:50:19Z", "slug": "shuohao-skills", "full_fetched_at": "2026-10-12T16:02:03Z", "source_note": "", "github_homepage": "https://studio.reelbenchai.com", "homepage_icon": "/site-icons/48f0ff99bc39354d.png", "homepage_icon_for": "https://studio.reelbenchai.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.3, "trust_score_v2": 53.3, "rank_v2": 193, "rank_v2_delta": 805, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.1, "maintenance": 18.0, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Local FAISS MCP Server", "repo": "nonatofabio/local_faiss_mcp", "display_repo": "", "url": "https://github.com/nonatofabio/local_faiss_mcp", "listing_class": "agent", "rank": 877, "previous_rank": 875, "rank_delta": -2, "stars": 36, "stars_fmt": "36", "forks": 13, "forks_fmt": "13", "last_push": "2026-04-24", "days_ago": 171, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.1, "description": "Local FAISS vector store as an MCP server – Agent Memory, drop-in local semantic search for Claude / Copilot / Agents.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 484, "npm_package": "", "crate_package": "", "pypi_package": "local-faiss-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 21, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.189, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:50:43Z", "slug": "local-faiss-mcp-server", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'local-faiss-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "local-faiss-mcp", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.3, "trust_score_v2": 53.3, "rank_v2": 877, "rank_v2_delta": 399, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.1, "identity": 18.0, "transparency": 11.0, "maintenance": 0.6, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent Infra Sandbox", "repo": "agent-infra/sandbox", "display_repo": "", "url": "https://github.com/agent-infra/sandbox", "listing_class": "agent", "rank": 878, "previous_rank": 876, "rank_delta": -2, "stars": 6145, "stars_fmt": "6.1k", "forks": 554, "forks_fmt": "554", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 2, "commits_low_confidence": false, "score": 62.6, "description": "All-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container.", "language": "Python", "open_issues": 53, "category": "Sandboxes & Runtimes", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:21:12Z", "slug": "agent-infra-sandbox", "full_fetched_at": "2026-10-12T04:02:07Z", "source_note": "", "github_homepage": "https://sandbox.agent-infra.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: sdk/js/src/api/resources/mcp/client/listMcpServers.ts", "Found MCP-related server path: sdk/js/src/api/resources/mcp/client/requests/ListMcpServersV1McpServersGetRequest.ts" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in evaluation/pyproject.toml", "README/docs also mention OpenAI", "Found credential/config marker 'SANDBOX_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.2, "trust_score_v2": 53.2, "rank_v2": 878, "rank_v2_delta": 80, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 12.4, "maintenance": 12.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Skills Zh", "repo": "laolaoshiren/claude-code-skills-zh", "display_repo": "", "url": "https://github.com/laolaoshiren/claude-code-skills-zh", "listing_class": "skill", "rank": 194, "previous_rank": 202, "rank_delta": 8, "stars": 881, "stars_fmt": "881", "forks": 98, "forks_fmt": "98", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 14, "commits_low_confidence": false, "score": 66.7, "description": "面向中文开发者的 Claude Code Skills / Agents / Plugins 精选与原创技能库｜按场景分类｜复制即装｜持续更新", "language": "Python", "open_issues": 3, "category": "Agent Skills", "category_rank": 194, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:06:17Z", "slug": "claude-code-skills-zh", "full_fetched_at": "2026-10-11T20:01:48Z", "source_note": "", "github_homepage": "https://claude-skills.bt199.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CUE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in scripts/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.2, "trust_score_v2": 53.2, "rank_v2": 194, "rank_v2_delta": 838, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.2, "maintenance": 16.7, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Clio MCP", "repo": "oktopeak/clio-mcp", "display_repo": "", "url": "https://github.com/oktopeak/clio-mcp", "listing_class": "agent", "rank": 879, "previous_rank": 877, "rank_delta": -2, "stars": 25, "stars_fmt": "25", "forks": 15, "forks_fmt": "15", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 3, "commits_low_confidence": true, "score": 46.0, "description": "Open-source MCP server connecting Claude to Clio practice management. Built by Oktopeak.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 485, "npm_package": "@oktopeak/clio-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 128, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:25:27Z", "slug": "clio-mcp", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "https://oktopeak.com/industries/legal-tech/", "homepage_icon": "/site-icons/dbd5ed4980863f56.png", "homepage_icon_for": "https://oktopeak.com/industries/legal-tech/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@oktopeak/clio-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@oktopeak/clio-mcp", "version": "2.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:06Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.2, "trust_score_v2": 53.2, "rank_v2": 879, "rank_v2_delta": 348, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 12.0, "maintenance": 12.9, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Slides Maker", "repo": "addsumtech/slides_maker", "display_repo": "", "url": "https://github.com/addsumtech/slides_maker", "listing_class": "skill", "rank": 195, "previous_rank": 194, "rank_delta": -1, "stars": 555, "stars_fmt": "555", "forks": 50, "forks_fmt": "50", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 209, "commits_low_confidence": false, "score": 74.1, "description": "Turn papers, code, and docs into presentation-ready, natively editable PPTX in Codex / Claude Code. Native charts and equations, speaker notes, click-build animations, and an independent critic review before delivery.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 195, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T06:19:34Z", "slug": "slides-maker", "full_fetched_at": "2026-10-12T08:02:17Z", "source_note": "", "github_homepage": "https://slides.addsum.top", "homepage_icon": "/site-icons/598c939ae95ce713.png", "homepage_icon_for": "https://slides.addsum.top", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.2, "trust_score_v2": 53.2, "rank_v2": 195, "rank_v2_delta": 793, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.6, "maintenance": 19.9, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AgentOps", "repo": "agentops-ai/agentops", "display_repo": "", "url": "https://github.com/AgentOps-AI/agentops", "listing_class": "agent", "rank": 880, "previous_rank": 874, "rank_delta": -6, "stars": 5883, "stars_fmt": "5.9k", "forks": 643, "forks_fmt": "643", "last_push": "2026-06-25", "days_ago": 109, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.6, "description": "Python SDK for AI agent monitoring, LLM cost tracking, benchmarking, and more. Integrates with most LLMs and agent frameworks including CrewAI, Agno, OpenAI Agents SDK, Langchain, Autogen, AG2, and CamelAI", "language": "Python", "open_issues": 113, "category": "Observability & Evaluation", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "agentops", "docker_image": "", "vscode_extension": "", "weekly_downloads": 22374, "dl_source": "pypi", "hn_mentions_30d": 32, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-06-22T10:30:20Z", "slug": "agentops", "full_fetched_at": "2026-10-12T04:02:08Z", "source_note": "", "github_homepage": "https://agentops.ai", "homepage_icon": "/site-icons/0e73b599ebd0e435.png", "homepage_icon_for": "https://agentops.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: docs/v2/usage/mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Mistral AI", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Mistral AI credential/config marker 'MISTRAL_API_KEY'", "README/docs also mention Mistral AI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'agentops' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agentops", "version": "0.4.21" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:08Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.2, "trust_score_v2": 53.2, "rank_v2": 880, "rank_v2_delta": 220, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.4, "identity": 10.8, "transparency": 11.5, "maintenance": 4.7, "adoption": 14.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Neo4j", "repo": "neo4j-contrib/mcp-neo4j", "display_repo": "", "url": "https://github.com/neo4j-contrib/mcp-neo4j", "listing_class": "agent", "rank": 881, "previous_rank": 879, "rank_delta": -2, "stars": 988, "stars_fmt": "988", "forks": 262, "forks_fmt": "262", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 49.9, "description": "Neo4j Labs Model Context Protocol servers", "language": "Python", "open_issues": 17, "category": "MCP Servers", "category_rank": 486, "npm_package": "", "crate_package": "", "pypi_package": "mcp-neo4j-aura-manager", "docker_image": "", "vscode_extension": "", "weekly_downloads": 100, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.97, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 4, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:43:05Z", "slug": "mcp-neo4j", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://neo4j.com/developer/genai-ecosystem/model-context-protocol-mcp/", "homepage_icon": "/site-icons/3b2a056820964ac7.png", "homepage_icon_for": "https://neo4j.com/developer/genai-ecosystem/model-context-protocol-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in servers/mcp-neo4j-cypher/pyproject.toml", "Found MCP dependency 'fastmcp' in servers/mcp-neo4j-memory/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-neo4j-aura-manager' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.2, "trust_score_v2": 53.2, "rank_v2": 881, "rank_v2_delta": 217, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 11.5, "maintenance": 9.8, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Word MCP Live", "repo": "ykarapazar/word-mcp-live", "display_repo": "", "url": "https://github.com/ykarapazar/word-mcp-live", "listing_class": "agent", "rank": 882, "previous_rank": 880, "rank_delta": -2, "stars": 233, "stars_fmt": "233", "forks": 44, "forks_fmt": "44", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 1, "commits_low_confidence": true, "score": 49.9, "description": "The only MCP server that edits Word documents while they're open — 114 tools, live editing, tracked changes, per-action undo", "language": "Python", "open_issues": 11, "category": "MCP Servers", "category_rank": 487, "npm_package": "", "crate_package": "", "pypi_package": "word-mcp-live", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1179, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.21, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:09:35Z", "slug": "word-mcp-live", "full_fetched_at": "2026-10-12T04:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: office_word_mcp_server/__init__.py", "Found MCP-related server path: word_mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'word-mcp-live' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "word-mcp-live", "version": "1.6.21" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.2, "trust_score_v2": 53.2, "rank_v2": 882, "rank_v2_delta": 395, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 10.5, "maintenance": 12.2, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP 1c Platform Tools", "repo": "yellow-hammer/mcp-1c-platform-tools", "display_repo": "", "url": "https://github.com/yellow-hammer/mcp-1c-platform-tools", "listing_class": "agent", "rank": 883, "previous_rank": 886, "rank_delta": 3, "stars": 40, "stars_fmt": "40", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 37, "commits_low_confidence": false, "score": 58.6, "description": "MCP-сервер расширения 1C: Platform Tools для AI-агентов VS Code и Cursor: тесты, сборка, профили запуска и работа с базой в проектах конфигуратора, 1С:EDT и OneScript.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 488, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-07T17:29:46Z", "slug": "mcp-1c-platform-tools", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ONEC_IPC_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.1, "trust_score_v2": 53.1, "rank_v2": 883, "rank_v2_delta": 81, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.9, "maintenance": 18.3, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Digital Marketing Pro", "repo": "indranilbanerjee/digital-marketing-pro", "display_repo": "", "url": "https://github.com/indranilbanerjee/digital-marketing-pro", "listing_class": "skill", "rank": 196, "previous_rank": 195, "rank_delta": -1, "stars": 868, "stars_fmt": "868", "forks": 138, "forks_fmt": "138", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 31, "commits_low_confidence": false, "score": 71.4, "description": "An open-source AI marketing operating system for strategy, SEO, AEO/GEO, paid media, content, CRM, and analytics - grounded in brand context, human approval, and verifiable outputs.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 196, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-06T18:01:19Z", "slug": "digital-marketing-pro", "full_fetched_at": "2026-10-12T16:02:25Z", "source_note": "", "github_homepage": "https://indranil.in", "homepage_icon": "/site-icons/57c7dee7b1c50375.png", "homepage_icon_for": "https://indranil.in", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in scripts/setup.py", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in scripts/setup.py", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface", "Found shell dependency 'subprocess' in scripts/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.1, "trust_score_v2": 53.1, "rank_v2": 196, "rank_v2_delta": 784, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.2, "maintenance": 17.9, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Reflect", "repo": "BayramAnnakov/claude-reflect", "display_repo": "", "url": "https://github.com/BayramAnnakov/claude-reflect", "listing_class": "skill", "rank": 197, "previous_rank": 193, "rank_delta": -4, "stars": 1788, "stars_fmt": "1.8k", "forks": 159, "forks_fmt": "159", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 22, "commits_low_confidence": false, "score": 70.5, "description": "A self-learning system for Claude Code that captures corrections, positive feedback, and preferences — then syncs them to CLAUDE.md and AGENTS.md.", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 197, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.093, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T11:42:58Z", "slug": "claude-reflect", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.1, "trust_score_v2": 53.1, "rank_v2": 197, "rank_v2_delta": 793, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.2, "maintenance": 16.8, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Crabeye MCP Bridge", "repo": "crabeye-ai/crabeye-mcp-bridge", "display_repo": "", "url": "https://github.com/crabeye-ai/crabeye-mcp-bridge", "listing_class": "agent", "rank": 884, "previous_rank": 896, "rank_delta": 12, "stars": 15, "stars_fmt": "15", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 14, "commits_low_confidence": false, "score": 48.3, "description": "MCP bridge to other MCP tools, which includes search and allows potentially thousands of tools to be available without incurring in higher token usage.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 489, "npm_package": "@crabeye-ai/crabeye-mcp-bridge", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 30, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:39:31Z", "slug": "crabeye-mcp-bridge", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: test/_helpers/stub-mcp-server-bin.mjs", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@crabeye-ai/crabeye-mcp-bridge' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@crabeye-ai/crabeye-mcp-bridge", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:57Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.1, "trust_score_v2": 53.1, "rank_v2": 884, "rank_v2_delta": 382, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 16.7, "adoption": 4.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SharpLens", "repo": "pzalutski-pixel/sharplens-mcp", "display_repo": "", "url": "https://github.com/pzalutski-pixel/sharplens-mcp", "listing_class": "agent", "rank": 885, "previous_rank": 851, "rank_delta": -34, "stars": 37, "stars_fmt": "37", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 2, "commits_low_confidence": true, "score": 44.8, "description": "Roslyn-powered MCP server for AI-driven C# semantic analysis, refactoring, and code generation", "language": "C#", "open_issues": 3, "category": "MCP Servers", "category_rank": 490, "npm_package": "sharplens-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 70, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T23:06:20Z", "slug": "sharplens", "full_fetched_at": "2026-10-12T00:01:54Z", "source_note": "", "github_homepage": "https://www.nuget.org/packages/SharpLensMcp", "homepage_icon": "/site-icons/7aac1e789a87edec.png", "homepage_icon_for": "https://www.nuget.org/packages/SharpLensMcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'sharplens-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "sharplens-mcp", "version": "1.6.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:54Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.0, "trust_score_v2": 53.0, "rank_v2": 885, "rank_v2_delta": 398, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 12.0, "maintenance": 12.8, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SWE-AF", "repo": "Agent-Field/SWE-AF", "display_repo": "", "url": "https://github.com/Agent-Field/SWE-AF", "listing_class": "agent", "rank": 886, "previous_rank": 883, "rank_delta": -3, "stars": 1033, "stars_fmt": "1.0k", "forks": 181, "forks_fmt": "181", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 18, "commits_low_confidence": false, "score": 69.1, "description": "Autonomous software engineering fleet of AI agents for production-grade PRs on AgentField: plan, code, test, and ship.", "language": "Go", "open_issues": 3, "category": "Coding Agents", "category_rank": 53, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.76, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 2, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:07:39Z", "slug": "swe-af", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://agentfield.ai/", "homepage_icon": "/site-icons/286d667d0e946acd.png", "homepage_icon_for": "https://agentfield.ai/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'claude-agent-sdk' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 53.0, "trust_score_v2": 53.0, "rank_v2": 886, "rank_v2_delta": 24, "trust_v2_adjustment": -2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 11.9, "maintenance": 16.8, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Vaaya", "repo": "vaaya-ai/vaaya-mcp", "display_repo": "", "url": "https://github.com/vaaya-ai/vaaya-mcp", "listing_class": "agent", "rank": 887, "previous_rank": 878, "rank_delta": -9, "stars": 44, "stars_fmt": "44", "forks": 8, "forks_fmt": "8", "last_push": "2026-09-13", "days_ago": 29, "weekly_commits": 4, "commits_low_confidence": false, "score": 44.1, "description": "Paid APIs and supported tokenized shares for agents, funded with prepaid balance. Instinct Checkout guidance: https://vaaya.ai/llms.txt", "language": "JavaScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 491, "npm_package": "@vaaya/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 102, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.154, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T16:52:09Z", "slug": "vaaya", "full_fetched_at": "2026-10-12T00:02:34Z", "source_note": "", "github_homepage": "https://vaaya.ai", "homepage_icon": "/site-icons/d6c840acfea9b2b4.png", "homepage_icon_for": "https://vaaya.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/cursor/mcp.json", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in glama/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@vaaya/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@vaaya/mcp", "version": "0.6.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:34Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.0, "trust_score_v2": 53.0, "rank_v2": 887, "rank_v2_delta": 357, "trust_v2_adjustment": 5.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.8, "maintenance": 12.9, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Abap Abap Adt Api", "repo": "mario-andreschak/mcp-abap-abap-adt-api", "display_repo": "", "url": "https://github.com/mario-andreschak/mcp-abap-abap-adt-api", "listing_class": "agent", "rank": 888, "previous_rank": 852, "rank_delta": -36, "stars": 203, "stars_fmt": "203", "forks": 72, "forks_fmt": "72", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 1, "commits_low_confidence": false, "score": 47.9, "description": "MCP-Server for SAP ABAP wrapping abap-adt-api", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 492, "npm_package": "mcp-abap-abap-adt-api", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 211, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.237, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:14:38Z", "slug": "mcp-abap-abap-adt-api", "full_fetched_at": "2026-10-11T20:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SAP_BEARER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-abap-abap-adt-api' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-abap-abap-adt-api", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:56Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.0, "trust_score_v2": 53.0, "rank_v2": 888, "rank_v2_delta": 350, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.5, "maintenance": 11.5, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Serial MCP Server", "repo": "es617/serial-mcp-server", "display_repo": "", "url": "https://github.com/es617/serial-mcp-server", "listing_class": "agent", "rank": 889, "previous_rank": 890, "rank_delta": 1, "stars": 24, "stars_fmt": "24", "forks": 5, "forks_fmt": "5", "last_push": "2026-03-07", "days_ago": 219, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.0, "description": "Serial port MCP server for Claude Code and other MCP-compatible agents.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 493, "npm_package": "", "crate_package": "", "pypi_package": "serial-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 49, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.0, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:13:17Z", "slug": "serial-mcp-server", "full_fetched_at": "2026-10-12T16:01:53Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: serial_mcp_server/__init__.py", "Found MCP-related server path: serial_mcp_server/__main__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'serial-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "serial-mcp-server", "version": "0.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:53Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 53.0, "trust_score_v2": 53.0, "rank_v2": 889, "rank_v2_delta": 397, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.9, "identity": 18.0, "transparency": 11.5, "maintenance": 0.0, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MediaWiki", "repo": "olgasafonova/mediawiki-mcp-server", "display_repo": "", "url": "https://github.com/olgasafonova/mediawiki-mcp-server", "listing_class": "agent", "rank": 890, "previous_rank": 885, "rank_delta": -5, "stars": 19, "stars_fmt": "19", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 7, "commits_low_confidence": true, "score": 48.3, "description": "MCP server for MediaWiki wikis - search, read, and edit wiki content from AI assistants", "language": "Go", "open_issues": 0, "category": "MCP Servers", "category_rank": 494, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/olgasafonova/mediawiki-mcp-server:1.34.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.64, "scorecard_score": 5.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T09:58:58Z", "slug": "mediawiki", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/README.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.9, "trust_score_v2": 52.9, "rank_v2": 890, "rank_v2_delta": 209, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.3, "identity": 10.8, "transparency": 13.3, "maintenance": 13.7, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Joplin MCP Server", "repo": "alondmnt/joplin-mcp", "display_repo": "", "url": "https://github.com/alondmnt/joplin-mcp", "listing_class": "agent", "rank": 891, "previous_rank": 739, "rank_delta": -152, "stars": 173, "stars_fmt": "173", "forks": 18, "forks_fmt": "18", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.1, "description": "MCP server for the Joplin note taking app", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 495, "npm_package": "", "crate_package": "", "pypi_package": "joplin-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 164, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.05, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:32:35Z", "slug": "joplin-mcp-server", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/joplin_mcp/fastmcp_server.py", "Found MCP-related server test path: tests/test_fastmcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'JOPLIN_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'joplin-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "joplin-mcp", "version": "0.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:39Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.9, "trust_score_v2": 52.9, "rank_v2": 891, "rank_v2_delta": 337, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 12.7, "maintenance": 10.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "DMontgomery40 DeepSeek MCP Server", "repo": "DMontgomery40/deepseek-mcp-server", "display_repo": "", "url": "https://github.com/DMontgomery40/deepseek-mcp-server", "listing_class": "agent", "rank": 892, "previous_rank": 889, "rank_delta": -3, "stars": 352, "stars_fmt": "352", "forks": 56, "forks_fmt": "56", "last_push": "2026-09-11", "days_ago": 31, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.2, "description": "Model Context Protocol server for DeepSeek's advanced language models", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 496, "npm_package": "deepseek-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1154, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-08T23:01:01Z", "slug": "dmontgomery40-deepseek-mcp-server", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "https://buymeacoffee.com/dmontg", "homepage_icon": "/site-icons/ad23b3b1384a41d9.png", "homepage_icon_for": "https://buymeacoffee.com/dmontg", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP-related server test path: test/mcp-server.test.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'deepseek-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "deepseek-mcp-server", "version": "1.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:04Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.9, "trust_score_v2": 52.9, "rank_v2": 892, "rank_v2_delta": 349, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.5, "maintenance": 9.9, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Crypto Price", "repo": "truss44/mcp-crypto-price", "display_repo": "", "url": "https://github.com/truss44/mcp-crypto-price", "listing_class": "agent", "rank": 893, "previous_rank": 897, "rank_delta": 4, "stars": 39, "stars_fmt": "39", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 9, "commits_low_confidence": true, "score": 51.2, "description": "A Model Context Protocol (MCP) server that provides real-time cryptocurrency analysis via CoinCap's API. Enables Claude and other MCP clients to fetch crypto prices, analyze market trends, and track historical data.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 497, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.39, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:13:26Z", "slug": "mcp-crypto-price", "full_fetched_at": "2026-10-12T00:02:28Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'COINCAP_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 893, "rank_v2_delta": 178, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 13.7, "maintenance": 13.9, "adoption": 3.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Llama Guard", "repo": "meta-llama/PurpleLlama", "display_repo": "", "url": "https://github.com/meta-llama/PurpleLlama", "listing_class": "agent", "rank": 894, "previous_rank": 891, "rank_delta": -3, "stars": 4426, "stars_fmt": "4.4k", "forks": 779, "forks_fmt": "779", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 64.6, "description": "Set of tools to assess and improve LLM security.", "language": "Python", "open_issues": 41, "category": "Security & Guardrails", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 9, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:11:18Z", "slug": "llama-guard", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in LlamaFirewall/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in CybersecurityBenchmarks/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 894, "rank_v2_delta": 105, "trust_v2_adjustment": -0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 13.4, "maintenance": 13.0, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wesight", "repo": "freestylefly/wesight", "display_repo": "", "url": "https://github.com/freestylefly/wesight", "listing_class": "skill", "rank": 198, "previous_rank": 198, "rank_delta": 0, "stars": 947, "stars_fmt": "947", "forks": 208, "forks_fmt": "208", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 3, "commits_low_confidence": false, "score": 59.7, "description": "Open-source desktop AI agent workspace with one-click Claude Code, Codex, OpenClaw, Hermes Agent setup and custom LLM model routing.", "language": "TypeScript", "open_issues": 4, "category": "Agent Skills", "category_rank": 198, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-08T17:15:54Z", "slug": "wesight", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "https://wesight.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: src/renderer/components/mcp/McpServerFormModal.tsx", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found extension-based path: openclaw-extensions/ask-user-question/index.ts", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in SKILLs/pptx/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 198, "rank_v2_delta": 881, "trust_v2_adjustment": 1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 12.8, "maintenance": 13.7, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "2X Skills", "repo": "intercom/2x-skills", "display_repo": "", "url": "https://github.com/intercom/2x-skills", "listing_class": "skill", "rank": 199, "previous_rank": 196, "rank_delta": -3, "stars": 247, "stars_fmt": "247", "forks": 13, "forks_fmt": "13", "last_push": "2026-09-18", "days_ago": 24, "weekly_commits": 3, "commits_low_confidence": false, "score": 48.9, "description": "A collection of claude skills we think are generic enough to be useful to everyone", "language": "Shell", "open_issues": 0, "category": "Agent Skills", "category_rank": 199, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T17:26:03Z", "slug": "2x-skills", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/claude-code-tools/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 199, "rank_v2_delta": 809, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 12.8, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Orchestrator Supaconductor", "repo": "Ibrahim-3d/orchestrator-supaconductor", "display_repo": "", "url": "https://github.com/Ibrahim-3d/orchestrator-supaconductor", "listing_class": "skill", "rank": 200, "previous_rank": 200, "rank_delta": 0, "stars": 381, "stars_fmt": "381", "forks": 39, "forks_fmt": "39", "last_push": "2026-09-27", "days_ago": 15, "weekly_commits": 36, "commits_low_confidence": false, "score": 65.6, "description": "Multi-agent orchestration system for Claude Code with parallel execution, automated quality gates, Board of Directors, and bundled Superpowers skills", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 200, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.218, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:11:10Z", "slug": "orchestrator-supaconductor", "full_fetched_at": "2026-10-12T16:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 200, "rank_v2_delta": 807, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.2, "maintenance": 17.3, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Maven Tools MCP", "repo": "arvindand/maven-tools-mcp", "display_repo": "", "url": "https://github.com/arvindand/maven-tools-mcp", "listing_class": "agent", "rank": 895, "previous_rank": 928, "rank_delta": 33, "stars": 34, "stars_fmt": "34", "forks": 9, "forks_fmt": "9", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 2, "commits_low_confidence": false, "score": 43.9, "description": "MCP server providing AI assistants with Maven Central dependency intelligence for all JVM build tools (Maven, Gradle, SBT, Mill). Features Context7 integration for documentation support.", "language": "Java", "open_issues": 0, "category": "MCP Servers", "category_rank": 498, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/arvindand/maven-tools-mcp:latest", "vscode_extension": "", "weekly_downloads": 28858, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:38:36Z", "slug": "maven-tools-mcp", "full_fetched_at": "2026-10-12T12:02:25Z", "source_note": "", "github_homepage": "https://dev.to/arvindand/how-i-connected-claude-to-maven-central-and-why-you-should-too-2clo", "homepage_icon": "/site-icons/0ed0aea044e4e653.png", "homepage_icon_for": "https://dev.to/arvindand/how-i-connected-claude-to-maven-central-and-why-you-should-too-2clo", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/main/java/com/arvindand/mcp/maven/MavenMcpServerApplication.java", "Found MCP-related server path: src/main/java/com/arvindand/mcp/maven/config/SerializedStdioServerTransportProvider.java", "Found MCP-related server test path: src/test/java/com/arvindand/mcp/maven/MavenMcpServerIT.java" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CONTEXT7_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 895, "rank_v2_delta": 178, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.2, "maintenance": 13.4, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Html Anything", "repo": "nexu-io/html-anything", "display_repo": "", "url": "https://github.com/nexu-io/html-anything", "listing_class": "skill", "rank": 201, "previous_rank": 197, "rank_delta": -4, "stars": 9095, "stars_fmt": "9.1k", "forks": 875, "forks_fmt": "875", "last_push": "2026-09-15", "days_ago": 27, "weekly_commits": 1, "commits_low_confidence": false, "score": 62.5, "description": "✨ The agentic HTML editor — your local AI agent writes the HTML, you ship it. 🚀 75 Skills × 9 Surfaces (magazine · deck · poster · XHS / tweet · prototype · data report · Hyperframes) 🛡️ Sandboxed preview · 📤 1-click to WeChat / X / Zhihu / HTML / PNG 🔑 Zero API key — Claude Code / Cursor / Codex…", "language": "HTML", "open_issues": 32, "category": "Agent Skills", "category_rank": 201, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.952, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:43:15Z", "slug": "html-anything", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "https://open-design.ai/html-anything/", "homepage_icon": "/site-icons/d6ec534937d4b8ba.png", "homepage_icon_for": "https://open-design.ai/html-anything/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "high", "evidence": [ "Found marketplace path: next/src/app/api/marketplace/_lib/__tests__/host-guard.test.ts", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 201, "rank_v2_delta": 774, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 12.1, "maintenance": 11.4, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Bitrise", "repo": "bitrise-io/bitrise-mcp", "display_repo": "", "url": "https://github.com/bitrise-io/bitrise-mcp", "listing_class": "agent", "rank": 896, "previous_rank": 892, "rank_delta": -4, "stars": 42, "stars_fmt": "42", "forks": 18, "forks_fmt": "18", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 23, "commits_low_confidence": false, "score": 57.5, "description": "MCP Server for the Bitrise API, enabling app management, build operations, artifact management and more.", "language": "Go", "open_issues": 1, "category": "MCP Servers", "category_rank": 499, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:55:25Z", "slug": "bitrise", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "https://bitrise.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: kiro-powers/bitrise-ci/mcp.json", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 896, "rank_v2_delta": 210, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 12.0, "maintenance": 17.3, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Crabtalk", "repo": "crabtalk/crabtalk", "display_repo": "", "url": "https://github.com/crabtalk/crab-20261010", "listing_class": "agent", "rank": 897, "previous_rank": 894, "rank_delta": -3, "stars": 743, "stars_fmt": "743", "forks": 86, "forks_fmt": "86", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.5, "description": "The long-running embedded agent", "language": "Rust", "open_issues": 11, "category": "Agent Frameworks", "category_rank": 81, "npm_package": "", "crate_package": "crabtalk", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 17, "dl_source": "crates.io", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T00:43:48Z", "slug": "crabtalk", "full_fetched_at": "2026-10-12T12:02:59Z", "source_note": "", "github_homepage": "https://crabtalk.ai", "homepage_icon": "/site-icons/e05768ac93497f74.png", "homepage_icon_for": "https://crabtalk.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "crates.io package 'crabtalk' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "crates.io", "name": "crabtalk", "version": "0.0.24" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "crabtalk/crabtalk", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 897, "rank_v2_delta": 308, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 11.4, "maintenance": 8.8, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cucumberstudio MCP", "repo": "HeroSizy/cucumberstudio-mcp", "display_repo": "", "url": "https://github.com/HeroSizy/cucumberstudio-mcp", "listing_class": "agent", "rank": 898, "previous_rank": 895, "rank_delta": -3, "stars": 22, "stars_fmt": "22", "forks": 7, "forks_fmt": "7", "last_push": "2026-03-28", "days_ago": 198, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.4, "description": "MCP Server for Cucumber Studio", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 500, "npm_package": "cucumberstudio-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 35, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.324, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:38:15Z", "slug": "cucumberstudio-mcp", "full_fetched_at": "2026-10-12T16:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CUCUMBERSTUDIO_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'cucumberstudio-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "cucumberstudio-mcp", "version": "1.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:17Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 898, "rank_v2_delta": 349, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.2, "identity": 18.0, "transparency": 11.3, "maintenance": 0.0, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "p6xer MCP Server", "repo": "osama-ata/p6xer-mcp-server", "display_repo": "", "url": "https://github.com/osama-ata/p6xer-mcp-server", "listing_class": "agent", "rank": 899, "previous_rank": 900, "rank_delta": 1, "stars": 11, "stars_fmt": "11", "forks": 6, "forks_fmt": "6", "last_push": "2026-03-25", "days_ago": 201, "weekly_commits": 0, "commits_low_confidence": false, "score": 10.4, "description": "This is the Model Context Protocol (MCP) Server for P6 XER files, exposes machine-readable MCP manifests for PyP6XER's modules for use by AI models.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 501, "npm_package": "", "crate_package": "", "pypi_package": "p6xer-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 25, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.267, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:11:15Z", "slug": "p6xer-mcp-server", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server path: src/p6xer_mcp_server/__init__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'p6xer-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "p6xer-mcp-server", "version": "0.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:08Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.8, "trust_score_v2": 52.8, "rank_v2": 899, "rank_v2_delta": 392, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 13.0, "identity": 18.0, "transparency": 11.3, "maintenance": 0.0, "adoption": 4.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Akshare One MCP", "repo": "zwldarren/akshare-one-mcp", "display_repo": "", "url": "https://github.com/zwldarren/akshare-one-mcp", "listing_class": "agent", "rank": 900, "previous_rank": 898, "rank_delta": -2, "stars": 233, "stars_fmt": "233", "forks": 52, "forks_fmt": "52", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 4, "commits_low_confidence": true, "score": 55.3, "description": "MCP server that provides access to Chinese stock market data using akshare-one", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 502, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.448, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-03T23:32:43Z", "slug": "akshare-one-mcp", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.7, "trust_score_v2": 52.7, "rank_v2": 900, "rank_v2_delta": 228, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 12.7, "maintenance": 13.1, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Callstackincubator Agent Skills", "repo": "callstackincubator/agent-skills", "display_repo": "", "url": "https://github.com/callstackincubator/agent-skills", "listing_class": "skill", "rank": 202, "previous_rank": 199, "rank_delta": -3, "stars": 1667, "stars_fmt": "1.7k", "forks": 117, "forks_fmt": "117", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 2, "commits_low_confidence": true, "score": 59.5, "description": "A collection of agent-optimized React Native skills for AI coding assistants.", "language": "Shell", "open_issues": 6, "category": "Agent Skills", "category_rank": 202, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.81, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 6, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:54:11Z", "slug": "callstackincubator-agent-skills", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/building-react-native-apps/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.7, "trust_score_v2": 52.7, "rank_v2": 202, "rank_v2_delta": 814, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 12.2, "maintenance": 12.7, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Funplay Godot MCP", "repo": "FunplayAI/funplay-godot-mcp", "display_repo": "", "url": "https://github.com/FunplayAI/funplay-godot-mcp", "listing_class": "agent", "rank": 901, "previous_rank": 906, "rank_delta": 5, "stars": 43, "stars_fmt": "43", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 3, "commits_low_confidence": true, "score": 46.0, "description": "The Most Advanced MCP Server for Godot Editor with execute_code, prompts/resources, project maps, runtime inspection, asset workflows, and safe AI automation.", "language": "GDScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 503, "npm_package": "funplay-godot-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 364, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.059, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:36:08Z", "slug": "funplay-godot-mcp", "full_fetched_at": "2026-10-12T16:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: addons/funplay_mcp/core/funplay_mcp_server.gd" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FUNPLAY_GODOT_MCP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'funplay-godot-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "funplay-godot-mcp", "version": "0.10.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.7, "trust_score_v2": 52.7, "rank_v2": 901, "rank_v2_delta": 351, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.6, "maintenance": 13.1, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Rivet Agents", "repo": "rivet-dev/agents", "display_repo": "", "url": "https://github.com/rivet-dev/agents", "listing_class": "agent", "rank": 902, "previous_rank": 1364, "rank_delta": 462, "stars": 1605, "stars_fmt": "1.6k", "forks": 134, "forks_fmt": "134", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 41, "commits_low_confidence": false, "score": 74.3, "description": "A durable process per agent, with memory that survives restarts", "language": "TypeScript", "open_issues": 39, "category": "Sandboxes & Runtimes", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 5, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:09:44Z", "slug": "rivet-agents", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "https://rivet.dev/agents/docs", "homepage_icon": "/site-icons/d2d2212cef79344a.png", "homepage_icon_for": "https://rivet.dev/agents/docs", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: sandbox-agent/examples/mcp-custom-tool/src/mcp-server.ts" ] }, "external_service_dependencies": { "providers": [ "E2B" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found E2B dependency 'e2b' in examples/docs/package.json" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found extension-based path: examples/docs/extensions/audit.ts", "Found code dependency '@octokit' in examples/docs/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.7, "trust_score_v2": 52.7, "rank_v2": 902, "rank_v2_delta": 82, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.3, "maintenance": 18.5, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server Motherduck", "repo": "motherduckdb/mcp-server-motherduck", "display_repo": "", "url": "https://github.com/motherduckdb/mcp-server-motherduck", "listing_class": "agent", "rank": 903, "previous_rank": 904, "rank_delta": 1, "stars": 527, "stars_fmt": "527", "forks": 87, "forks_fmt": "87", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 6, "commits_low_confidence": true, "score": 60.1, "description": "Local MCP server for DuckDB and MotherDuck", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 504, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-motherduck", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6988, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.29, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T17:52:58Z", "slug": "mcp-server-motherduck", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp_server_motherduck/__init__.py", "Found MCP-related server path: src/mcp_server_motherduck/assets/duck_feet_square.png", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Amazon Bedrock credential/config marker 'AWS_ACCESS_KEY_ID'", "README/docs also mention Amazon Bedrock" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-server-motherduck' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-motherduck", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.7, "trust_score_v2": 52.7, "rank_v2": 903, "rank_v2_delta": 175, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 10.9, "maintenance": 13.4, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Smart Thinking", "repo": "Leghis/Smart-Thinking", "display_repo": "", "url": "https://github.com/Leghis/Smart-Thinking", "listing_class": "agent", "rank": 904, "previous_rank": 901, "rank_delta": -3, "stars": 33, "stars_fmt": "33", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 62, "commits_low_confidence": false, "score": 58.7, "description": "Smart-Thinking is a Model Context Protocol (MCP) server that delivers graph-based, multi-step reasoning without relying on external AI APIs. Everything happens locally: similarity search, heuristic-based scoring, verification tracking, memory, and visualization all run in a deterministic pipeline…", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 505, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:47:20Z", "slug": "smart-thinking", "full_fetched_at": "2026-10-11T16:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.6, "trust_score_v2": 52.6, "rank_v2": 904, "rank_v2_delta": 126, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 13.1, "maintenance": 17.7, "adoption": 3.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Anthropic Cybersecurity Skills", "repo": "mukul975/Anthropic-Cybersecurity-Skills", "display_repo": "", "url": "https://github.com/mukul975/Anthropic-Cybersecurity-Skills", "listing_class": "skill", "rank": 203, "previous_rank": 201, "rank_delta": -2, "stars": 34287, "stars_fmt": "34.3k", "forks": 4169, "forks_fmt": "4.2k", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 63.2, "description": "817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub Copilot, Codex CLI, Cursor, Gemini CLI & 20+ platforms · 29 security domains…", "language": "Python", "open_issues": 22, "category": "Agent Skills", "category_rank": 203, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:48:14Z", "slug": "anthropic-cybersecurity-skills", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://mahipal.engineer/Anthropic-Cybersecurity-Skills/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: skills/auditing-mcp-servers-for-tool-poisoning/LICENSE", "Found MCP-related server path: skills/auditing-mcp-servers-for-tool-poisoning/SKILL.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.6, "trust_score_v2": 52.6, "rank_v2": 203, "rank_v2_delta": 915, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.4, "maintenance": 9.2, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Terrashark", "repo": "LukasNiessen/terrashark", "display_repo": "", "url": "https://github.com/LukasNiessen/terrashark", "listing_class": "skill", "rank": 204, "previous_rank": 203, "rank_delta": -1, "stars": 715, "stars_fmt": "715", "forks": 27, "forks_fmt": "27", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 10, "commits_low_confidence": false, "score": 60.6, "description": "Terraform Skill for Claude Code and Codex. LLMs hallucinate a lot with Terraform - TerraShark fixes this. It eliminates hallucinations, is designed for modular and secure code and grounds your IaC in the official Hashicorp Terraform best practices.", "language": "", "open_issues": 0, "category": "Agent Skills", "category_rank": 204, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.463, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:14:32Z", "slug": "terrashark", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "https://terraformskill.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.6, "trust_score_v2": 52.6, "rank_v2": 204, "rank_v2_delta": 815, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.1, "maintenance": 15.5, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent-S", "repo": "simular-ai/Agent-S", "display_repo": "", "url": "https://github.com/simular-ai/Agent-S", "listing_class": "agent", "rank": 905, "previous_rank": 902, "rank_delta": -3, "stars": 12590, "stars_fmt": "12.6k", "forks": 1467, "forks_fmt": "1.5k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 2, "commits_low_confidence": true, "score": 69.9, "description": "Agent S: an open agentic framework that uses computers like a human", "language": "Python", "open_issues": 26, "category": "Browser & Computer Use", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.54, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-27T06:16:43Z", "slug": "agent-s", "full_fetched_at": "2026-10-12T08:02:21Z", "source_note": "", "github_homepage": "https://www.simular.ai", "homepage_icon": "/site-icons/a121287f0439fa90.png", "homepage_icon_for": "https://www.simular.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in setup.py", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in setup.py", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'selenium' in setup.py" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.6, "trust_score_v2": 52.6, "rank_v2": 905, "rank_v2_delta": 112, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 11.9, "maintenance": 12.7, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TourMind Booking Skills", "repo": "tourmind-com/Tourmind-Booking-Skills", "display_repo": "", "url": "https://github.com/tourmind-com/Tourmind-Booking-Skills", "listing_class": "skill", "rank": 205, "previous_rank": 204, "rank_delta": -1, "stars": 1908, "stars_fmt": "1.9k", "forks": 308, "forks_fmt": "308", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 13, "commits_low_confidence": false, "score": 70.3, "description": "AI agent skills for end-to-end hotel and flight booking—compare live hotel rates across leading OTAs and suppliers, search and verify real-time airfares worldwide, book stays and flights, and manage reservations, hotel cancellations, and payments via the TourMind API.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 205, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.127, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:50:00Z", "slug": "tourmind-booking-skills", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "https://tourmind.com/skills", "homepage_icon": "/site-icons/5341356eaa5fb661.png", "homepage_icon_for": "https://tourmind.com/skills", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.6, "trust_score_v2": 52.6, "rank_v2": 205, "rank_v2_delta": 823, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.9, "maintenance": 16.4, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Revolut MCP", "repo": "jeff-nasseri/revolut-mcp", "display_repo": "", "url": "https://github.com/fingentic/revolut-mcp", "listing_class": "agent", "rank": 906, "previous_rank": 903, "rank_delta": -3, "stars": 34, "stars_fmt": "34", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 2, "commits_low_confidence": true, "score": 43.7, "description": "This is the Revolut MCP server ", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 506, "npm_package": "@jeff-nasseri/revolut-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 79, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.053, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:11:06Z", "slug": "revolut-mcp", "full_fetched_at": "2026-10-12T16:02:40Z", "source_note": "", "github_homepage": "https://fingentic.github.io/revolut-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@jeff-nasseri/revolut-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@jeff-nasseri/revolut-mcp", "version": "0.1.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:40Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.6, "trust_score_v2": 52.6, "rank_v2": 906, "rank_v2_delta": 393, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.9, "maintenance": 12.4, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Brainstorm MCP", "repo": "spranab/brainstorm-mcp", "display_repo": "", "url": "https://github.com/spranab/brainstorm-mcp", "listing_class": "agent", "rank": 907, "previous_rank": 899, "rank_delta": -8, "stars": 71, "stars_fmt": "71", "forks": 8, "forks_fmt": "8", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 8, "commits_low_confidence": false, "score": 50.7, "description": "A single model's confident answer can still be wrong, so brainstorm-mcp runs multi-round debates between GPT, Gemini, DeepSeek, Claude, and local Ollama models and returns a structured synthesis, as an MCP server that needs no API keys in hosted mode.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 507, "npm_package": "brainstorm-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 146, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:01:02Z", "slug": "brainstorm-mcp", "full_fetched_at": "2026-10-12T00:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "OpenAI", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'brainstorm-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "brainstorm-mcp", "version": "1.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:16Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.6, "trust_score_v2": 52.6, "rank_v2": 907, "rank_v2_delta": 271, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.6, "maintenance": 14.9, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Portkey AI Gateway", "repo": "Portkey-AI/gateway", "display_repo": "", "url": "https://github.com/Portkey-AI/gateway", "listing_class": "agent", "rank": 908, "previous_rank": 907, "rank_delta": -1, "stars": 13172, "stars_fmt": "13.2k", "forks": 1338, "forks_fmt": "1.3k", "last_push": "2026-05-25", "days_ago": 140, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.8, "description": "A blazing fast AI Gateway with integrated guardrails. Route to 1,600+ LLMs, 50+ AI Guardrails with 1 fast & friendly API.", "language": "TypeScript", "open_issues": 131, "category": "LLM Gateways & Infra", "category_rank": 11, "npm_package": "portkey-ai", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 226895, "dl_source": "npm", "hn_mentions_30d": 34, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.74, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:23:18Z", "slug": "portkey-ai-gateway", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "https://portkey.ai/features/ai-gateway", "homepage_icon": "/site-icons/e673bd4a8b94b247.png", "homepage_icon_for": "https://portkey.ai/features/ai-gateway", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in cookbook/integrations/vercel/package.json", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/Contributing.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'portkey-ai' points to portkey-ai/portkey-node-sdk (same owner as portkey-ai/gateway, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "portkey-ai", "version": "3.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:16Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 908, "rank_v2_delta": 116, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 12.6, "maintenance": 2.7, "adoption": 17.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Webull OpenAPI", "repo": "webull-inc/webull-openapi-mcp", "display_repo": "", "url": "https://github.com/webull-inc/webull-openapi-mcp", "listing_class": "agent", "rank": 909, "previous_rank": 831, "rank_delta": -78, "stars": 28, "stars_fmt": "28", "forks": 4, "forks_fmt": "4", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.9, "description": "Webull OpenAPI MCP", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 508, "npm_package": "", "crate_package": "", "pypi_package": "webull-openapi-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 716, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:26:20Z", "slug": "webull-openapi", "full_fetched_at": "2026-10-12T00:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'webull-openapi-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "webull-openapi-mcp", "version": "1.2.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:37Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 909, "rank_v2_delta": 396, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 12.5, "maintenance": 10.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Equity Research", "repo": "quant-sentiment-ai/claude-equity-research", "display_repo": "", "url": "https://github.com/quant-sentiment-ai/claude-equity-research", "listing_class": "skill", "rank": 206, "previous_rank": 205, "rank_delta": -1, "stars": 729, "stars_fmt": "729", "forks": 88, "forks_fmt": "88", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 16, "commits_low_confidence": false, "score": 66.2, "description": "🔌 Claude Code Plugin for institutional-grade equity research. Install with /plugin marketplace add. Generates professional buy/sell recommendations with comprehensive fundamental analysis, technical indicators, and risk assessment. Educational use only - not financial advice.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 206, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.137, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-01T02:05:21Z", "slug": "claude-equity-research", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (commands/trading-ideas/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 206, "rank_v2_delta": 817, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 12.2, "maintenance": 16.7, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Offensive Claude", "repo": "hypnguyen1209/offensive-claude", "display_repo": "", "url": "https://github.com/hypnguyen1209/offensive-claude", "listing_class": "skill", "rank": 207, "previous_rank": 209, "rank_delta": 2, "stars": 389, "stars_fmt": "389", "forks": 67, "forks_fmt": "67", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 15, "commits_low_confidence": false, "score": 62.1, "description": "Offensive security toolkit for Claude Code covering red team, exploit dev, AD attacks, EDR bypass, mobile pentest", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 207, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.049, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T22:55:07Z", "slug": "offensive-claude", "full_fetched_at": "2026-10-12T16:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 207, "rank_v2_delta": 917, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.2, "maintenance": 15.9, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "tdmcp — TouchDesigner MCP server", "repo": "Pantani/tdmcp", "display_repo": "", "url": "https://github.com/Pantani/tdmcp", "listing_class": "agent", "rank": 910, "previous_rank": 887, "rank_delta": -23, "stars": 50, "stars_fmt": "50", "forks": 9, "forks_fmt": "9", "last_push": "2026-08-15", "days_ago": 58, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.0, "description": "TouchDesigner MCP server, describe a visual to Claude, Cursor or Codex and it builds a real, playable node network (audio-reactive, generative, particle, 3D, feedback) with live knobs + MIDI/OSC/DMX, then checks for errors and previews its own work.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 509, "npm_package": "@dpantani/tdmcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 112, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.91, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:54:24Z", "slug": "tdmcp-touchdesigner-mcp-server", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://pantani.github.io/tdmcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .claude/mcp.json", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'TDMCP_BRIDGE_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@dpantani/tdmcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@dpantani/tdmcp", "version": "0.13.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 910, "rank_v2_delta": 336, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 12.2, "maintenance": 8.1, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bgg MCP", "repo": "kkjdaniel/bgg-mcp", "display_repo": "", "url": "https://github.com/kkjdaniel/bgg-mcp", "listing_class": "agent", "rank": 911, "previous_rank": 905, "rank_delta": -6, "stars": 53, "stars_fmt": "53", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 4, "commits_low_confidence": true, "score": 48.6, "description": "BGG MCP provides access to BoardGameGeek and a variety of board game related data through the Model Context Protocol. Enabling retrieval and filtering of board game data, user collections, and profiles.", "language": "Go", "open_issues": 1, "category": "MCP Servers", "category_rank": 510, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/kdaniel/bgg-mcp:1.6.1", "vscode_extension": "", "weekly_downloads": 5127, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.231, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-09-29T16:53:05Z", "slug": "bgg-mcp", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BGG_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 911, "rank_v2_delta": 177, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.2, "maintenance": 12.9, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Baoyu Design", "repo": "JimLiu/baoyu-design", "display_repo": "", "url": "https://github.com/JimLiu/baoyu-design", "listing_class": "skill", "rank": 208, "previous_rank": 206, "rank_delta": -2, "stars": 4301, "stars_fmt": "4.3k", "forks": 298, "forks_fmt": "298", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 3, "commits_low_confidence": false, "score": 63.2, "description": "Run Claude Design locally as an Agent Skill — Cursor, Claude Code & more. Produce polished UI mockups, prototypes, decks & wireframes as self-contained HTML, without claude.ai/design. Best with Opus or Claude.", "language": "JavaScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 208, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.117, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-10T19:27:19Z", "slug": "baoyu-design", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in skills/baoyu-design/agents/gen-pptx/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 208, "rank_v2_delta": 915, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.2, "maintenance": 13.1, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DexPaprika", "repo": "coinpaprika/dexpaprika-mcp", "display_repo": "", "url": "https://github.com/coinpaprika/dexpaprika-mcp", "listing_class": "agent", "rank": 912, "previous_rank": 991, "rank_delta": 79, "stars": 53, "stars_fmt": "53", "forks": 17, "forks_fmt": "17", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 10, "commits_low_confidence": false, "score": 54.2, "description": "DexPaprika MCP server for real-time crypto token data, DEX trading activity, and DeFi analytics across multiple blockchains.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 511, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.635, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T09:57:39Z", "slug": "dexpaprika", "full_fetched_at": "2026-10-12T12:02:53Z", "source_note": "", "github_homepage": "https://dexpaprika.com", "homepage_icon": "/site-icons/c297e192e190a504.png", "homepage_icon_for": "https://dexpaprika.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DEXPAPRIKA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 912, "rank_v2_delta": 174, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.0, "maintenance": 16.2, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Guide", "repo": "zebbern/claude-code-guide", "display_repo": "", "url": "https://github.com/zebbern/claude-code-guide", "listing_class": "skill", "rank": 209, "previous_rank": 207, "rank_delta": -2, "stars": 4656, "stars_fmt": "4.7k", "forks": 470, "forks_fmt": "470", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 23, "commits_low_confidence": false, "score": 76.3, "description": "Claude Code Guide - Setup, Commands, workflows, agents, skills & tips-n-tricks from beginner to power user!", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 209, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:54:50Z", "slug": "claude-code-guide", "full_fetched_at": "2026-10-12T04:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in skills/r2-upload/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 209, "rank_v2_delta": 850, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 17.4, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server Zotero Dev", "repo": "introfini/mcp-server-zotero-dev", "display_repo": "", "url": "https://github.com/introfini/mcp-server-zotero-dev", "listing_class": "agent", "rank": 913, "previous_rank": 920, "rank_delta": 7, "stars": 40, "stars_fmt": "40", "forks": 8, "forks_fmt": "8", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 7, "commits_low_confidence": false, "score": 47.3, "description": "Give your AI assistant superpowers for Zotero plugin development. 28 tools for screenshots, DOM inspection, JavaScript execution, build integration, and debugging via Model Context Protocol.", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 512, "npm_package": "@introfini/mcp-server-zotero-dev", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 79, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.245, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:12:49Z", "slug": "mcp-server-zotero-dev", "full_fetched_at": "2026-10-12T16:02:28Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mcp-server/.eslintrc.json", "Found MCP-related server path: packages/mcp-server/README.md", "Found MCP-related server test path: packages/mcp-server/tests/ping.test.mts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@introfini/mcp-server-zotero-dev' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@introfini/mcp-server-zotero-dev", "version": "1.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:28Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.5, "trust_score_v2": 52.5, "rank_v2": 913, "rank_v2_delta": 390, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 10.7, "maintenance": 14.1, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Vibe Coding Prompt Template", "repo": "KhazP/vibe-coding-prompt-template", "display_repo": "", "url": "https://github.com/KhazP/vibe-coding-prompt-template", "listing_class": "skill", "rank": 210, "previous_rank": 210, "rank_delta": 0, "stars": 3135, "stars_fmt": "3.1k", "forks": 385, "forks_fmt": "385", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 1, "commits_low_confidence": true, "score": 60.8, "description": "Templates and workflow for generating PRDs, Tech Designs, and MVP and more using LLMs for AI IDEs", "language": "TypeScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 210, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:33:07Z", "slug": "vibe-coding-prompt-template", "full_fetched_at": "2026-10-12T16:02:39Z", "source_note": "", "github_homepage": "https://vibeworkflow.app/", "homepage_icon": "/site-icons/78c5f64e5cd7ed8e.png", "homepage_icon_for": "https://vibeworkflow.app/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.4, "trust_score_v2": 52.4, "rank_v2": 210, "rank_v2_delta": 829, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.9, "maintenance": 12.1, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Posit Dev Skills", "repo": "posit-dev/skills", "display_repo": "", "url": "https://github.com/posit-dev/skills", "listing_class": "skill", "rank": 211, "previous_rank": 208, "rank_delta": -3, "stars": 538, "stars_fmt": "538", "forks": 54, "forks_fmt": "54", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 5, "commits_low_confidence": true, "score": 58.6, "description": "A collection of Claude Skills from Posit", "language": "Python", "open_issues": 6, "category": "Agent Skills", "category_rank": 211, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:03:35Z", "slug": "posit-dev-skills", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.4, "trust_score_v2": 52.4, "rank_v2": 211, "rank_v2_delta": 814, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 12.3, "maintenance": 13.2, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "pgvector", "repo": "pgvector/pgvector", "display_repo": "", "url": "https://github.com/pgvector/pgvector", "listing_class": "agent", "rank": 914, "previous_rank": 908, "rank_delta": -6, "stars": 23319, "stars_fmt": "23.3k", "forks": 1348, "forks_fmt": "1.3k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 5, "commits_low_confidence": true, "score": 74.9, "description": "Open-source vector similarity search for Postgres", "language": "C", "open_issues": 9, "category": "Memory & Knowledge", "category_rank": 41, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 7, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 4.4, "scorecard_checks": { "Maintained": 10, "Code-Review": 0, "Dangerous-Workflow": 10, "SAST": 0, "Packaging": -1, "Token-Permissions": 0, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Pinned-Dependencies": 0, "Fuzzing": 0, "License": 9, "Signed-Releases": -1, "Branch-Protection": 0, "Security-Policy": 9 }, "scorecard_scanned_at": "2026-10-12T08:06:07Z", "slug": "pgvector", "full_fetched_at": "2026-10-12T08:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 52.4, "trust_score_v2": 52.4, "rank_v2": 914, "rank_v2_delta": 123, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 12.2, "maintenance": 13.3, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cybermes", "repo": "Zyrexnn/Cybermes", "display_repo": "", "url": "https://github.com/Zyrexnn/Cybermes", "listing_class": "agent", "rank": 915, "previous_rank": 893, "rank_delta": -22, "stars": 932, "stars_fmt": "932", "forks": 153, "forks_fmt": "153", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 8, "commits_low_confidence": false, "score": 63.5, "description": "Autonomous Offensive Security, Bug Bounty & Red Teaming Agent Framework powered by Hermes Agent, specialized reasoning skills, and multi-model LLM orchestration.", "language": "Python", "open_issues": 0, "category": "Security & Guardrails", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T06:43:18Z", "slug": "cybermes", "full_fetched_at": "2026-10-12T04:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: knowledge/hacktricks/src/AI/AI-MCP-Servers.md", "Found MCP-related server path: pkg/mcp/server.go", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (knowledge/Claude-BugHunter/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: knowledge/Claude-BugHunter/.claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.4, "trust_score_v2": 52.4, "rank_v2": 915, "rank_v2_delta": 197, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 11.9, "maintenance": 15.1, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MiroFish", "repo": "666ghj/MiroFish", "display_repo": "", "url": "https://github.com/666ghj/MiroFish", "listing_class": "agent", "rank": 916, "previous_rank": 913, "rank_delta": -3, "stars": 78346, "stars_fmt": "78.3k", "forks": 11956, "forks_fmt": "12.0k", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 2, "commits_low_confidence": false, "score": 78.0, "description": "A Simple and Universal Swarm Intelligence Engine, Predicting Anything. 简洁通用的群体智能引擎，预测万物", "language": "Python", "open_issues": 61, "category": "Multi-Agent Systems", "category_rank": 27, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:55:05Z", "slug": "mirofish", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "https://mirofish.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in backend/pyproject.toml", "README/docs also mention OpenAI", "Found credential/config marker 'LLM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 52.4, "trust_score_v2": 52.4, "rank_v2": 916, "rank_v2_delta": 73, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 11.6, "maintenance": 13.2, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MonkeyMCP", "repo": "jamesmontemagno/MonkeyMCP", "display_repo": "", "url": "https://github.com/jamesmontemagno/MonkeyMCP", "listing_class": "agent", "rank": 917, "previous_rank": 909, "rank_delta": -8, "stars": 125, "stars_fmt": "125", "forks": 66, "forks_fmt": "66", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 50.3, "description": "The MCP the world needs", "language": "Jupyter Notebook", "open_issues": 0, "category": "MCP Servers", "category_rank": 513, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/jamesmontemagno/monkeymcp:2.0.3", "vscode_extension": "", "weekly_downloads": 1625, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.275, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:53:15Z", "slug": "monkeymcp", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/prompts/create-functions-mcp-server.prompt.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.4, "trust_score_v2": 52.4, "rank_v2": 917, "rank_v2_delta": 225, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.5, "maintenance": 13.0, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Playwright Skill", "repo": "lackeyjb/playwright-skill", "display_repo": "", "url": "https://github.com/lackeyjb/playwright-skill", "listing_class": "skill", "rank": 212, "previous_rank": 212, "rank_delta": 0, "stars": 3186, "stars_fmt": "3.2k", "forks": 246, "forks_fmt": "246", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 55.6, "description": "General-purpose Playwright automation for coding agents", "language": "JavaScript", "open_issues": 4, "category": "Agent Skills", "category_rank": 212, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.462, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T17:59:52Z", "slug": "playwright-skill", "full_fetched_at": "2026-10-12T16:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in skills/playwright-skill/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.3, "trust_score_v2": 52.3, "rank_v2": 212, "rank_v2_delta": 808, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.2, "identity": 10.8, "transparency": 13.2, "maintenance": 11.3, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "IT Glue", "repo": "WYRE-AI/itglue-mcp", "display_repo": "", "url": "https://github.com/WYRE-AI/itglue-mcp", "listing_class": "agent", "rank": 918, "previous_rank": 911, "rank_delta": -7, "stars": 17, "stars_fmt": "17", "forks": 35, "forks_fmt": "35", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 9, "commits_low_confidence": true, "score": 51.9, "description": "MCP server for IT Glue — documentation, passwords, configurations, and flexible asset tools for AI assistants", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 514, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/wyre-technology/itglue-mcp:v1.15.1", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:36:09Z", "slug": "it-glue", "full_fetched_at": "2026-10-12T04:01:59Z", "source_note": "", "github_homepage": "https://conduit.wyre.ai/plugins/it-glue", "homepage_icon": "/site-icons/18b15c594eb8d445.png", "homepage_icon_for": "https://conduit.wyre.ai/plugins/it-glue", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ITGLUE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.3, "trust_score_v2": 52.3, "rank_v2": 918, "rank_v2_delta": 177, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.6, "identity": 10.8, "transparency": 13.1, "maintenance": 13.8, "adoption": 3.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Transcriptor MCP", "repo": "samson-art/transcriptor-mcp", "display_repo": "", "url": "https://github.com/samson-art/transcriptor-mcp", "listing_class": "agent", "rank": 919, "previous_rank": 912, "rank_delta": -7, "stars": 23, "stars_fmt": "23", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 161, "commits_low_confidence": false, "score": 61.2, "description": "One MCP server that gives Claude, ChatGPT, Cursor and any other AI app transcripts, chapters, metadata and frames from YouTube and 10 more video platforms.", "language": "TypeScript", "open_issues": 12, "category": "MCP Servers", "category_rank": 515, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:08:11Z", "slug": "transcriptor-mcp", "full_fetched_at": "2026-10-12T00:02:05Z", "source_note": "", "github_homepage": "https://transcriptor-mcp.org", "homepage_icon": "/site-icons/44f4417a52614a98.png", "homepage_icon_for": "https://transcriptor-mcp.org", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis credential/config marker 'REDIS_URL'", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.3, "trust_score_v2": 52.3, "rank_v2": 919, "rank_v2_delta": 174, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.7, "maintenance": 19.6, "adoption": 3.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skills For Architects", "repo": "AlpacaLabsLLC/skills-for-architects", "display_repo": "", "url": "https://github.com/AlpacaLabsLLC/skills-for-architects", "listing_class": "skill", "rank": 213, "previous_rank": 211, "rank_delta": -2, "stars": 375, "stars_fmt": "375", "forks": 80, "forks_fmt": "80", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 18, "commits_low_confidence": false, "score": 64.5, "description": "Claude Code skills for architecture, real estate, and workplace strategy. Type /skill-name and go.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 213, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-07T02:22:46Z", "slug": "skills-for-architects", "full_fetched_at": "2026-10-12T08:02:40Z", "source_note": "", "github_homepage": "https://architecturestudio.ai/?ref=github", "homepage_icon": "/site-icons/ade5a3254b853f88.png", "homepage_icon_for": "https://architecturestudio.ai/?ref=github", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.3, "trust_score_v2": 52.3, "rank_v2": 213, "rank_v2_delta": 919, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.6, "maintenance": 16.6, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TONNode — TON blockchain access", "repo": "tonnode/mcp", "display_repo": "", "url": "https://github.com/tonnode/mcp", "listing_class": "agent", "rank": 920, "previous_rank": 914, "rank_delta": -6, "stars": 27, "stars_fmt": "27", "forks": 0, "forks_fmt": "0", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 8, "commits_low_confidence": true, "score": 45.2, "description": "TON MCP server for Claude, ChatGPT, Cursor, Codex and any MCP client — liteserver queries over native ADNL: balances, account state, transaction history, get-methods. Private & archive endpoints supported", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 516, "npm_package": "@tonnode/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 254, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:03:52Z", "slug": "tonnode-ton-blockchain-access", "full_fetched_at": "2026-10-12T00:02:27Z", "source_note": "", "github_homepage": "https://tonnode.io", "homepage_icon": "/site-icons/696e5f1f0cf213b5.png", "homepage_icon_for": "https://tonnode.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@tonnode/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@tonnode/mcp", "version": "0.9.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:27Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.3, "trust_score_v2": 52.3, "rank_v2": 920, "rank_v2_delta": 392, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 11.2, "maintenance": 13.6, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Server 12306", "repo": "drfccv/mcp-server-12306", "display_repo": "", "url": "https://github.com/drfccv/mcp-server-12306", "listing_class": "agent", "rank": 921, "previous_rank": 915, "rank_delta": -6, "stars": 407, "stars_fmt": "407", "forks": 59, "forks_fmt": "59", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 3, "commits_low_confidence": false, "score": 54.8, "description": "12306 MCP Server​​ 是一个基于 ​​Model Context Protocol (MCP)​​ 的高性能火车票查询后端系统。它通过标准化接口提供官方 12306 的实时数据服务，包括余票查询、车站信息、列车经停站、中转换乘方案等核心功能。", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 517, "npm_package": "", "crate_package": "", "pypi_package": "mcp-server-12306", "docker_image": "", "vscode_extension": "", "weekly_downloads": 323, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.291, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-06T18:02:25Z", "slug": "mcp-server-12306", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-server-12306' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-server-12306", "version": "0.5.0.post20260930" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:05Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.3, "trust_score_v2": 52.3, "rank_v2": 921, "rank_v2_delta": 223, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.1, "maintenance": 13.6, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Perplexity MCP Server", "repo": "perplexityai/modelcontextprotocol", "display_repo": "", "url": "https://github.com/perplexityai/modelcontextprotocol", "listing_class": "agent", "rank": 922, "previous_rank": 918, "rank_delta": -4, "stars": 2560, "stars_fmt": "2.6k", "forks": 380, "forks_fmt": "380", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 2, "commits_low_confidence": false, "score": 61.3, "description": "The official MCP server implementation for the Perplexity API Platform", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 518, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.28, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:12:02Z", "slug": "perplexity-mcp-server", "full_fetched_at": "2026-10-12T08:02:14Z", "source_note": "", "github_homepage": "https://docs.perplexity.ai/guides/mcp-server", "homepage_icon": "/site-icons/8df95bada506d013.png", "homepage_icon_for": "https://docs.perplexity.ai/guides/mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in perplexity-ask/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Perplexity" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Perplexity credential/config marker 'PERPLEXITY_API_KEY'", "README/docs also mention Perplexity", "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.2, "trust_score_v2": 52.2, "rank_v2": 922, "rank_v2_delta": 139, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.5, "identity": 10.8, "transparency": 12.7, "maintenance": 12.8, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mac Control MCP", "repo": "AdelElo13/mac-control-mcp", "display_repo": "", "url": "https://github.com/AdelElo13/mac-control-mcp", "listing_class": "agent", "rank": 923, "previous_rank": 916, "rank_delta": -7, "stars": 16, "stars_fmt": "16", "forks": 3, "forks_fmt": "3", "last_push": "2026-09-15", "days_ago": 27, "weekly_commits": 163, "commits_low_confidence": false, "score": 56.6, "description": "", "language": "Swift", "open_issues": 2, "category": "MCP Servers", "category_rank": 519, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T09:45:19Z", "slug": "mac-control-mcp", "full_fetched_at": "2026-10-12T08:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.2, "trust_score_v2": 52.2, "rank_v2": 923, "rank_v2_delta": 227, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.4, "maintenance": 18.2, "adoption": 3.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agently", "repo": "AgentEra/Agently", "display_repo": "", "url": "https://github.com/AgentEra/Agently", "listing_class": "agent", "rank": 924, "previous_rank": 888, "rank_delta": -36, "stars": 1657, "stars_fmt": "1.7k", "forks": 182, "forks_fmt": "182", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 39, "commits_low_confidence": false, "score": 73.4, "description": "[GenAI Application Development Framework] 🚀 Build GenAI application quick and easy 💬 Easy to interact with GenAI agent in code using structure data and chained-calls syntax 🧩 Use Event-Driven Flow *TriggerFlow* to manage complex GenAI working logic 🔀 Switch to any model without rewrite…", "language": "Python", "open_issues": 13, "category": "Agent Frameworks", "category_rank": 82, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-07T17:23:36Z", "slug": "agently", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "http://agently.tech", "homepage_icon": "/site-icons/dc619f9c3319e675.png", "homepage_icon_for": "http://agently.tech", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/action_runtime/_calculator_mcp_server.py", "Found MCP-related server path: examples/agent_task_experiments/_mixed_business_mcp_server.py", "Found MCP-related server test path: tests/test_cores/cal_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "DeepSeek", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: agently/builtins/agent_extensions/ActionExtension.py", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.2, "trust_score_v2": 52.2, "rank_v2": 924, "rank_v2_delta": 32, "trust_v2_adjustment": -2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.3, "maintenance": 17.7, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cloudflare Security Audit Skill", "repo": "cloudflare/security-audit-skill", "display_repo": "", "url": "https://github.com/cloudflare/security-audit-skill", "listing_class": "skill", "rank": 214, "previous_rank": 213, "rank_delta": -1, "stars": 28633, "stars_fmt": "28.6k", "forks": 1716, "forks_fmt": "1.7k", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 1, "commits_low_confidence": false, "score": 66.7, "description": "A coding-agent skill for multi-phase security audits with independently verified, machine-readable findings", "language": "JavaScript", "open_issues": 22, "category": "Agent Skills", "category_rank": 214, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.357, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 4, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:09:03Z", "slug": "cloudflare-security-audit-skill", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.2, "trust_score_v2": 52.2, "rank_v2": 214, "rank_v2_delta": 833, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.2, "maintenance": 11.3, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pulsemcp MCP Servers", "repo": "pulsemcp/mcp-servers", "display_repo": "", "url": "https://github.com/pulsemcp/mcp-servers", "listing_class": "agent", "rank": 925, "previous_rank": 917, "rank_delta": -8, "stars": 81, "stars_fmt": "81", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 0, "commits_low_confidence": true, "score": 41.0, "description": "MCP (Model Context Protocol) Servers authored and maintained by the PulseMCP team. We build reliable servers thoughtfully designed specifically for MCP Client-powered workflows.", "language": "TypeScript", "open_issues": 26, "category": "MCP Servers", "category_rank": 520, "npm_package": "@pulsemcp/pulse-fetch", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 120, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:09:20Z", "slug": "pulsemcp-mcp-servers", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/publish-mcp-servers.yml", "Found MCP-related server path: .github/workflows/verify-mcp-server-publication.yml", "Found MCP-related server test path: libs/mcp-server-template/tests/README.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PROCTOR_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@pulsemcp/pulse-fetch' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.2, "trust_score_v2": 52.2, "rank_v2": 925, "rank_v2_delta": 177, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 11.6, "maintenance": 11.8, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ble MCP Server", "repo": "es617/ble-mcp-server", "display_repo": "", "url": "https://github.com/es617/ble-mcp-server", "listing_class": "agent", "rank": 926, "previous_rank": 922, "rank_delta": -4, "stars": 18, "stars_fmt": "18", "forks": 2, "forks_fmt": "2", "last_push": "2026-03-30", "days_ago": 196, "weekly_commits": 0, "commits_low_confidence": false, "score": 9.9, "description": "Bluetooth Low Energy (BLE) MCP server for Claude Code and other MCP-compatible agents.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 521, "npm_package": "", "crate_package": "", "pypi_package": "ble-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 91, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.019, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:20:10Z", "slug": "ble-mcp-server", "full_fetched_at": "2026-10-12T16:01:53Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: ble_mcp_server/__init__.py", "Found MCP-related server path: ble_mcp_server/__main__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'BLE_MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ble-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ble-mcp-server", "version": "0.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:53Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.2, "trust_score_v2": 52.2, "rank_v2": 926, "rank_v2_delta": 353, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.0, "identity": 18.0, "transparency": 11.5, "maintenance": 0.0, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FastAPI-MCP", "repo": "tadata-org/fastapi_mcp", "display_repo": "", "url": "https://github.com/tadata-org/fastapi_mcp", "listing_class": "agent", "rank": 927, "previous_rank": 919, "rank_delta": -8, "stars": 12018, "stars_fmt": "12.0k", "forks": 969, "forks_fmt": "969", "last_push": "2025-11-24", "days_ago": 322, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.4, "description": "Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!", "language": "Python", "open_issues": 96, "category": "Protocols & Tool Integration", "category_rank": 46, "npm_package": "", "crate_package": "", "pypi_package": "fastapi-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2349576, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.34, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:44:29Z", "slug": "fastapi-mcp", "full_fetched_at": "2026-10-12T00:02:23Z", "source_note": "", "github_homepage": "https://fastapi-mcp.tadata.com/", "homepage_icon": "/site-icons/a738ccc84373585a.png", "homepage_icon_for": "https://fastapi-mcp.tadata.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'fastapi-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "fastapi-mcp", "version": "0.4.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:23Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.2, "trust_score_v2": 52.2, "rank_v2": 927, "rank_v2_delta": 390, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.3, "maintenance": 0.0, "adoption": 18.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Shodan", "repo": "w0h1v/mcp-shodan", "display_repo": "", "url": "https://github.com/w0h1v/mcp-shodan", "listing_class": "agent", "rank": 928, "previous_rank": 1099, "rank_delta": 171, "stars": 175, "stars_fmt": "175", "forks": 27, "forks_fmt": "27", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 16, "commits_low_confidence": false, "score": 60.5, "description": "MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 522, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.139, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:01:49Z", "slug": "mcp-shodan", "full_fetched_at": "2026-10-12T00:02:36Z", "source_note": "", "github_homepage": "https://registry.modelcontextprotocol.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SHODAN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.1, "trust_score_v2": 52.1, "rank_v2": 928, "rank_v2_delta": 177, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 12.1, "maintenance": 16.9, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Longbridge MCP", "repo": "longbridge/longbridge-mcp", "display_repo": "", "url": "https://github.com/longbridge/longbridge-mcp", "listing_class": "agent", "rank": 929, "previous_rank": 929, "rank_delta": 0, "stars": 13, "stars_fmt": "13", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 19, "commits_low_confidence": false, "score": 51.4, "description": "", "language": "Rust", "open_issues": 1, "category": "MCP Servers", "category_rank": 523, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/longbridge/longbridge-mcp:0.8.6", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.58, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:59:07Z", "slug": "longbridge-mcp", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.1, "trust_score_v2": 52.1, "rank_v2": 929, "rank_v2_delta": 229, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 11.7, "maintenance": 17.2, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "inno-agent", "repo": "hhyqhh/inno-agent", "display_repo": "", "url": "https://github.com/hhyqhh/inno-agent", "listing_class": "agent", "rank": 930, "previous_rank": 910, "rank_delta": -20, "stars": 1294, "stars_fmt": "1.3k", "forks": 230, "forks_fmt": "230", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 64, "commits_low_confidence": false, "score": 77.0, "description": "An open-source personal learning agent with three-layer memory (learner profile / wiki knowledge base / cross-conversation recall), a proactive scheduler, personal IM channels, and a workspace-scoped Practice Lab — built on the Pi SDK.", "language": "TypeScript", "open_issues": 5, "category": "Memory & Knowledge", "category_rank": 42, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:35:21Z", "slug": "inno-agent", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "https://hhyqhh.github.io/inno-agent-website", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Tavily" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Tavily dependency 'tavily' in apps/inno-agent/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found search dependency 'tavily' in apps/inno-agent/package.json", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.1, "trust_score_v2": 52.1, "rank_v2": 930, "rank_v2_delta": 106, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 10.7, "maintenance": 19.0, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "pentest-ai", "repo": "0xSteph/pentest-ai", "display_repo": "", "url": "https://github.com/0xSteph/pentest-ai", "listing_class": "agent", "rank": 931, "previous_rank": 923, "rank_delta": -8, "stars": 1733, "stars_fmt": "1.7k", "forks": 319, "forks_fmt": "319", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 5, "commits_low_confidence": true, "score": 65.3, "description": "Open-source AI pentester that proves every finding. Machine oracles re-run each exploit; verified bugs ship a proof capsule you can replay yourself.", "language": "Python", "open_issues": 1, "category": "Security & Guardrails", "category_rank": 19, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T18:58:57Z", "slug": "pentest-ai", "full_fetched_at": "2026-10-12T08:02:06Z", "source_note": "", "github_homepage": "https://pentestai.xyz", "homepage_icon": "/site-icons/e97f20447586096a.png", "homepage_icon_for": "https://pentestai.xyz", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp_server/__init__.py", "Found MCP-related server path: mcp_server/auth.py", "Found MCP-related server test path: tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.0, "trust_score_v2": 52.0, "rank_v2": 931, "rank_v2_delta": 191, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.3, "maintenance": 13.4, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nanobrowser", "repo": "nanobrowser/nanobrowser", "display_repo": "", "url": "https://github.com/nanobrowser/nanobrowser", "listing_class": "agent", "rank": 932, "previous_rank": 921, "rank_delta": -11, "stars": 14075, "stars_fmt": "14.1k", "forks": 1489, "forks_fmt": "1.5k", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 7, "commits_low_confidence": false, "score": 74.6, "description": "Open-Source Chrome extension for AI-powered web automation. Run multi-agent workflows using your own LLM API key. Alternative to OpenAI Operator.", "language": "TypeScript", "open_issues": 49, "category": "Browser & Computer Use", "category_rank": 27, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 9, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-03T23:30:05Z", "slug": "nanobrowser", "full_fetched_at": "2026-10-12T08:02:09Z", "source_note": "", "github_homepage": "https://nanobrowser.ai", "homepage_icon": "/site-icons/5322b828b1e14c23.png", "homepage_icon_for": "https://nanobrowser.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found xAI Grok dependency '@ai-sdk/xai' in package.json", "README/docs also mention xAI Grok" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'puppeteer' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 52.0, "trust_score_v2": 52.0, "rank_v2": 932, "rank_v2_delta": 23, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.1, "maintenance": 14.9, "adoption": 10.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Codex MCP Go", "repo": "w31r4/codex-mcp-go", "display_repo": "", "url": "https://github.com/w31r4/codex-mcp-go", "listing_class": "agent", "rank": 933, "previous_rank": 925, "rank_delta": -8, "stars": 52, "stars_fmt": "52", "forks": 5, "forks_fmt": "5", "last_push": "2026-02-03", "days_ago": 251, "weekly_commits": 0, "commits_low_confidence": false, "score": 13.9, "description": "codex-mcp-go is a Go-based MCP (Model Context Protocol) server that serves as a bridge for Codex CLI, enabling various AI coding assistants (such as Claude Code, Roo Code, KiloCode, etc.) to seamlessly collaborate with Codex.", "language": "Go", "open_issues": 2, "category": "MCP Servers", "category_rank": 524, "npm_package": "@zenfun510/codex-mcp-go", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 67, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.013, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-08T09:59:20Z", "slug": "codex-mcp-go", "full_fetched_at": "2026-10-12T00:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: internal/mcp/server.go", "Found MCP-related server path: internal/mcp/server_test.go" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@zenfun510/codex-mcp-go' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@zenfun510/codex-mcp-go", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:37Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 52.0, "trust_score_v2": 52.0, "rank_v2": 933, "rank_v2_delta": 352, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.3, "identity": 18.0, "transparency": 11.1, "maintenance": 0.0, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Novel To Game", "repo": "zenstory-ai/novel-to-game", "display_repo": "", "url": "https://github.com/zenstory-ai/novel-to-game", "listing_class": "skill", "rank": 215, "previous_rank": 214, "rank_delta": -1, "stars": 851, "stars_fmt": "851", "forks": 119, "forks_fmt": "119", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 18, "commits_low_confidence": false, "score": 67.0, "description": "Agent skills for source-grounded novel-to-game adaptation (小说改编游戏 / story to game): cited design docs, target-runtime builds, evidence-based QA. Three playable browser examples. For Claude Code, Codex, and Kimi Code.", "language": "Markdown", "open_issues": 0, "category": "Agent Skills", "category_rank": 215, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-08T17:09:07Z", "slug": "novel-to-game", "full_fetched_at": "2026-10-12T04:02:06Z", "source_note": "", "github_homepage": "https://plateau.vibecoco.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.9, "trust_score_v2": 51.9, "rank_v2": 215, "rank_v2_delta": 831, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.1, "maintenance": 16.5, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Glidermcp Com", "repo": "glidermcp/glidermcp", "display_repo": "", "url": "https://github.com/glidermcp/glidermcp", "listing_class": "agent", "rank": 934, "previous_rank": 935, "rank_delta": 1, "stars": 18, "stars_fmt": "18", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 27, "commits_low_confidence": false, "score": 52.2, "description": "Glider MCP - code analysis for AI assistants", "language": "", "open_issues": 13, "category": "MCP Servers", "category_rank": 525, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 3, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:43:49Z", "slug": "glidermcp-com", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "https://glidermcp.com", "homepage_icon": "/site-icons/f164c672a0044181.png", "homepage_icon_for": "https://glidermcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/glider-trace/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.9, "trust_score_v2": 51.9, "rank_v2": 934, "rank_v2_delta": 217, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 11.8, "maintenance": 17.8, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google/Meta Ads + GA4 MCP", "repo": "irinabuht12-oss/google-ads-meta-ads-mcp", "display_repo": "", "url": "https://github.com/irinabuht12-oss/google-ads-meta-ads-mcp", "listing_class": "agent", "rank": 935, "previous_rank": 926, "rank_delta": -9, "stars": 4601, "stars_fmt": "4.6k", "forks": 367, "forks_fmt": "367", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 5, "commits_low_confidence": true, "score": 68.6, "description": "Google Ads MCP server + Meta Ads MCP (Facebook Ads MCP) + Google Analytics MCP (GA4) + Search Console in one hosted remote MCP for Claude, ChatGPT, Cursor & n8n: OAuth login, no API keys, approval-gated writes, 7-day free trial. By Ryze AI.", "language": "", "open_issues": 1, "category": "MCP Servers", "category_rank": 526, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.053, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:37:37Z", "slug": "google-meta-ads-ga4-mcp", "full_fetched_at": "2026-10-12T16:02:25Z", "source_note": "", "github_homepage": "https://www.get-ryze.ai/", "homepage_icon": "/site-icons/643325dc89288b02.png", "homepage_icon_for": "https://www.get-ryze.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.9, "trust_score_v2": 51.9, "rank_v2": 935, "rank_v2_delta": 229, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.7, "maintenance": 13.6, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Optim Agent", "repo": "Optim-Agent/optim-agent", "display_repo": "", "url": "https://github.com/Optim-Agent/optim-agent", "listing_class": "skill", "rank": 216, "previous_rank": 217, "rank_delta": 1, "stars": 801, "stars_fmt": "801", "forks": 43, "forks_fmt": "43", "last_push": "2026-08-14", "days_ago": 59, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.9, "description": "LLM agents as your hyperparameter optimizer.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 216, "npm_package": "", "crate_package": "", "pypi_package": "optim-agent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.038, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T09:57:15Z", "slug": "optim-agent", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "https://optim-agent.github.io/optim-agent/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'optim-agent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "optim-agent", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:09Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.8, "trust_score_v2": 51.8, "rank_v2": 216, "rank_v2_delta": 978, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 13.8, "maintenance": 8.1, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "App It", "repo": "Christian-Katzmann/app-it", "display_repo": "", "url": "https://github.com/Christian-Katzmann/app-it", "listing_class": "skill", "rank": 217, "previous_rank": 215, "rank_delta": -2, "stars": 216, "stars_fmt": "216", "forks": 21, "forks_fmt": "21", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 3, "commits_low_confidence": false, "score": 51.2, "description": "Turn your local web projects into Mac apps you can launch from the Dock, with their own window, name and icon.", "language": "Shell", "open_issues": 8, "category": "Agent Skills", "category_rank": 217, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.443, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-30T22:49:46Z", "slug": "app-it", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/app-it-static/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.8, "trust_score_v2": 51.8, "rank_v2": 217, "rank_v2_delta": 839, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 13.1, "maintenance": 13.6, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "anti-slop", "repo": "dmmulroy/anti-slop", "display_repo": "", "url": "https://github.com/dmmulroy/anti-slop", "listing_class": "skill", "rank": 218, "previous_rank": 218, "rank_delta": 0, "stars": 5452, "stars_fmt": "5.5k", "forks": 141, "forks_fmt": "141", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 53.0, "description": "Opinionated Oxlint rules for rejecting low-evidence TypeScript and JavaScript patterns", "language": "TypeScript", "open_issues": 5, "category": "Agent Skills", "category_rank": 218, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.943, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:03:45Z", "slug": "dmmulroy-anti-slop", "full_fetched_at": "2026-10-12T12:03:01Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.8, "trust_score_v2": 51.8, "rank_v2": 218, "rank_v2_delta": 851, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 12.1, "maintenance": 9.9, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Harness", "repo": "revfactory/harness", "display_repo": "", "url": "https://github.com/revfactory/harness", "listing_class": "skill", "rank": 219, "previous_rank": 220, "rank_delta": 1, "stars": 9163, "stars_fmt": "9.2k", "forks": 1311, "forks_fmt": "1.3k", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 4, "commits_low_confidence": false, "score": 70.1, "description": "A meta-skill that designs domain-specific agent teams, defines specialized agents, and generates the skills they use.", "language": "", "open_issues": 0, "category": "Agent Skills", "category_rank": 219, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.408, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:58:31Z", "slug": "harness", "full_fetched_at": "2026-10-12T00:01:59Z", "source_note": "", "github_homepage": "https://revfactory.github.io/harness/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.8, "trust_score_v2": 51.8, "rank_v2": 219, "rank_v2_delta": 835, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 11.5, "maintenance": 13.9, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sap Adt MCP", "repo": "yzonur/sap-adt-mcp", "display_repo": "", "url": "https://github.com/yzonur/sap-adt-mcp", "listing_class": "agent", "rank": 936, "previous_rank": 924, "rank_delta": -12, "stars": 18, "stars_fmt": "18", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 4, "commits_low_confidence": true, "score": 43.8, "description": "MCP server giving Claude live access to SAP systems via ADT — read, edit, search, test, and diff ABAP across landscapes without installing anything on the SAP stack.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 527, "npm_package": "sap-adt-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 120, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.068, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:17:37Z", "slug": "sap-adt-mcp", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'sap-adt-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "sap-adt-mcp", "version": "0.8.58" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:13Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.8, "trust_score_v2": 51.8, "rank_v2": 936, "rank_v2_delta": 392, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.4, "maintenance": 13.2, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Newsmcp", "repo": "pranciskus/newsmcp", "display_repo": "", "url": "https://github.com/pranciskus/newsmcp", "listing_class": "agent", "rank": 937, "previous_rank": 930, "rank_delta": -7, "stars": 35, "stars_fmt": "35", "forks": 2, "forks_fmt": "2", "last_push": "2026-03-06", "days_ago": 220, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.5, "description": "MCP server for real-time world news — free, no API key required", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 528, "npm_package": "@newsmcp/server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 46, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": true, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T14:59:38Z", "slug": "newsmcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mcp-server/README.md", "Found MCP-related server path: packages/mcp-server/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/mcp-server/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (packages/claude-code-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@newsmcp/server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@newsmcp/server", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.8, "trust_score_v2": 51.8, "rank_v2": 937, "rank_v2_delta": 385, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 18.0, "transparency": 11.0, "maintenance": 0.0, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Jakub Krehel Skills", "repo": "jakubkrehel/skills", "display_repo": "", "url": "https://github.com/jakubkrehel/skills", "listing_class": "skill", "rank": 220, "previous_rank": 216, "rank_delta": -4, "stars": 7850, "stars_fmt": "7.8k", "forks": 294, "forks_fmt": "294", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 17, "commits_low_confidence": false, "score": 75.5, "description": "A collection of agent skills that help you build great interfaces.", "language": "Markdown", "open_issues": 2, "category": "Agent Skills", "category_rank": 220, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T21:32:12Z", "slug": "jakub-krehel-skills", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "https://jakub.kr/skills", "homepage_icon": "/site-icons/0371d6f1bf605856.png", "homepage_icon_for": "https://jakub.kr/skills", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.8, "trust_score_v2": 51.8, "rank_v2": 220, "rank_v2_delta": 833, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 10.7, "maintenance": 16.9, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "img2threejs", "repo": "img2threejs/img2threejs", "display_repo": "", "url": "https://github.com/img2threejs/img2threejs", "listing_class": "skill", "rank": 221, "previous_rank": 219, "rank_delta": -2, "stars": 17999, "stars_fmt": "18.0k", "forks": 1520, "forks_fmt": "1.5k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 4, "commits_low_confidence": true, "score": 73.4, "description": "Rebuild the object in a reference image as a code-only, procedural, quality-gated, animation-ready Three.js model. Token-efficient image-to-3D.", "language": "Python", "open_issues": 70, "category": "Agent Skills", "category_rank": 221, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.28, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-10T23:09:09Z", "slug": "img2threejs", "full_fetched_at": "2026-10-12T16:02:31Z", "source_note": "", "github_homepage": "https://img2threejs.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.7, "trust_score_v2": 51.7, "rank_v2": 221, "rank_v2_delta": 855, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 11.6, "maintenance": 13.1, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Odoo", "repo": "erpipe-org/mcp-odoo", "display_repo": "", "url": "https://github.com/erpipe-org/mcp-odoo", "listing_class": "agent", "rank": 938, "previous_rank": 932, "rank_delta": -6, "stars": 422, "stars_fmt": "422", "forks": 194, "forks_fmt": "194", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.7, "description": "Odoo MCP for AI agents — gated writes, multi-instance. Hosted product: https://erpipe.com", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 529, "npm_package": "", "crate_package": "", "pypi_package": "odoo-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1352, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.15, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:23:14Z", "slug": "mcp-odoo", "full_fetched_at": "2026-10-12T16:01:59Z", "source_note": "", "github_homepage": "https://erpipe.com/", "homepage_icon": "/site-icons/a39f9c9d378ee576.png", "homepage_icon_for": "https://erpipe.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/cursor/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ODOO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'odoo-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "odoo-mcp", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.7, "trust_score_v2": 51.7, "rank_v2": 938, "rank_v2_delta": 358, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 11.5, "maintenance": 8.8, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent Skill Creator", "repo": "FrancyJGLisboa/agent-skills-platform", "display_repo": "", "url": "https://github.com/FrancyJGLisboa/agent-skills-platform", "listing_class": "skill", "rank": 222, "previous_rank": 221, "rank_delta": -1, "stars": 2404, "stars_fmt": "2.4k", "forks": 265, "forks_fmt": "265", "last_push": "2026-09-15", "days_ago": 27, "weekly_commits": 14, "commits_low_confidence": false, "score": 67.7, "description": "Build tested agent skills and govern their lifecycle through a user-defined marketplace: evidence, discovery, updates, rollback, quarantine, and 17-platform distribution.", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 222, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T12:58:44Z", "slug": "agent-skill-creator", "full_fetched_at": "2026-10-12T16:02:04Z", "source_note": "", "github_homepage": "https://francyjglisboa.github.io/agent-skills-platform/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.agents/skills/live-weather-briefing-skill/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.7, "trust_score_v2": 51.7, "rank_v2": 222, "rank_v2_delta": 912, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.4, "maintenance": 14.9, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BettaFish", "repo": "666ghj/BettaFish", "display_repo": "", "url": "https://github.com/666ghj/BettaFish", "listing_class": "agent", "rank": 939, "previous_rank": 934, "rank_delta": -5, "stars": 42388, "stars_fmt": "42.4k", "forks": 7609, "forks_fmt": "7.6k", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 2, "commits_low_confidence": false, "score": 75.4, "description": "微舆：人人可用的多Agent舆情分析助手，打破信息茧房，还原舆情原貌，预测未来走向，辅助决策！从0实现，不依赖任何框架。", "language": "Python", "open_issues": 2, "category": "Multi-Agent Systems", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.31, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:10:34Z", "slug": "bettafish", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres", "Redis", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Tavily dependency 'tavily' in requirements.txt", "Found Postgres dependency 'psycopg' in requirements.txt", "README/docs also mention Postgres", "Found Redis dependency 'redis' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in requirements.txt", "README/docs also mention browser capabilities", "Found search dependency 'tavily' in requirements.txt", "README/docs also mention search capabilities", "Found database dependency 'redis' in requirements.txt" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-2.0", "license_type": "open", "license_override": "", "trust_score": 51.6, "trust_score_v2": 51.6, "rank_v2": 939, "rank_v2_delta": -11, "trust_v2_adjustment": -3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 12.5, "maintenance": 13.2, "adoption": 11.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AgenticSeek", "repo": "Fosowl/agenticSeek", "display_repo": "", "url": "https://github.com/Fosowl/agenticSeek", "listing_class": "agent", "rank": 940, "previous_rank": 931, "rank_delta": -9, "stars": 27475, "stars_fmt": "27.5k", "forks": 3077, "forks_fmt": "3.1k", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 14, "commits_low_confidence": false, "score": 81.3, "description": "Fully Local Manus AI. No APIs, No $200 monthly bills. Enjoy an autonomous agent that thinks, browses the web, and code for the sole cost of electricity.", "language": "Python", "open_issues": 18, "category": "Agent Frameworks", "category_rank": 83, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:15:17Z", "slug": "agenticseek", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "http://agenticseek.tech", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "Together AI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in setup.py", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'selenium' in setup.py", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 51.6, "trust_score_v2": 51.6, "rank_v2": 940, "rank_v2_delta": -49, "trust_v2_adjustment": -4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 11.8, "maintenance": 16.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "RU Marketplace MCP", "repo": "Vladimir-Human/ru-marketplace-mcp", "display_repo": "", "url": "https://github.com/Vladimir-Human/ru-marketplace-mcp", "listing_class": "agent", "rank": 941, "previous_rank": 936, "rank_delta": -5, "stars": 145, "stars_fmt": "145", "forks": 23, "forks_fmt": "23", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 45, "commits_low_confidence": false, "score": 65.1, "description": "Одиннадцать маркетплейсов и недвижимость Циан как MCP-серверы: Wildberries, Ozon, Яндекс Маркет, Детский мир, Авито, AliExpress, Taobao, Мегамаркет, Lamoda, DNS, Ситилинк, Циан. Плюс сравнение цен по всем товарным источникам одним вызовом. Только чтение, ключи не нужны.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 530, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:48:56Z", "slug": "ru-marketplace-mcp", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in packages/mcp-core/pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found marketplace path: dsh/skills/marketplace/SKILL.md", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in packages/mcp-core/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.6, "trust_score_v2": 51.6, "rank_v2": 941, "rank_v2_delta": 77, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 11.7, "maintenance": 18.6, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Oxylabs Agent Skills", "repo": "oxylabs/agent-skills", "display_repo": "", "url": "https://github.com/oxylabs/agent-skills", "listing_class": "skill", "rank": 223, "previous_rank": 222, "rank_delta": -1, "stars": 875, "stars_fmt": "875", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 8, "commits_low_confidence": false, "score": 55.1, "description": "Official Agent skills of Oxylabs products", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 223, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.588, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:57:00Z", "slug": "oxylabs-agent-skills", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.6, "trust_score_v2": 51.6, "rank_v2": 223, "rank_v2_delta": 845, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 11.6, "maintenance": 15.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Codealive MCP", "repo": "CodeAlive-AI/codealive-mcp", "display_repo": "", "url": "https://github.com/CodeAlive-AI/codealive-mcp", "listing_class": "agent", "rank": 942, "previous_rank": 933, "rank_delta": -9, "stars": 91, "stars_fmt": "91", "forks": 9, "forks_fmt": "9", "last_push": "2026-09-24", "days_ago": 18, "weekly_commits": 5, "commits_low_confidence": false, "score": 48.8, "description": "Context engine for large codebases, exposed through MCP. Gives AI coding agents precise repository context; benchmarked at frontier-agent quality with ~25x lower model cost and 45% fewer tokens with semantic search.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 531, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/codealive-ai/codealive-mcp:3.0.3", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 10, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:33:57Z", "slug": "codealive-mcp", "full_fetched_at": "2026-10-12T12:03:07Z", "source_note": "", "github_homepage": "https://www.codealive.ai/", "homepage_icon": "/site-icons/32da6f945f6ae4ab.png", "homepage_icon_for": "https://www.codealive.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/codealive_mcp_server.py", "Found MCP-related server docs path: docs/fastmcp4-migration.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CODEALIVE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.5, "trust_score_v2": 51.5, "rank_v2": 942, "rank_v2_delta": 196, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.9, "maintenance": 13.9, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pagerduty MCP Server", "repo": "PagerDuty/pagerduty-mcp-server", "display_repo": "", "url": "https://github.com/PagerDuty/pagerduty-mcp-server", "listing_class": "agent", "rank": 943, "previous_rank": 937, "rank_delta": -6, "stars": 79, "stars_fmt": "79", "forks": 42, "forks_fmt": "42", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.7, "description": "PagerDuty's official local MCP (Model Context Protocol) server which provides tools to interact with your PagerDuty account directly from your MCP-enabled client.", "language": "Python", "open_issues": 21, "category": "MCP Servers", "category_rank": 532, "npm_package": "", "crate_package": "", "pypi_package": "pagerduty-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 30040, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.23, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:36:46Z", "slug": "pagerduty-mcp-server", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PAGERDUTY_USER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'pagerduty-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "PagerDuty/pagerduty-mcp-server", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.5, "trust_score_v2": 51.5, "rank_v2": 943, "rank_v2_delta": 196, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 12.6, "maintenance": 9.5, "adoption": 10.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "NinjaOne", "repo": "WYRE-AI/ninjaone-mcp", "display_repo": "", "url": "https://github.com/WYRE-AI/ninjaone-mcp", "listing_class": "agent", "rank": 944, "previous_rank": 941, "rank_delta": -3, "stars": 26, "stars_fmt": "26", "forks": 26, "forks_fmt": "26", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 7, "commits_low_confidence": true, "score": 51.6, "description": "MCP server for NinjaOne — device monitoring, patching, scripting, and alert management tools for AI assistants", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 533, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/wyre-technology/ninjaone-mcp:v2.2.2", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.66, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:45:09Z", "slug": "ninjaone", "full_fetched_at": "2026-10-12T04:01:58Z", "source_note": "", "github_homepage": "https://conduit.wyre.ai/plugins/ninjaone-rmm", "homepage_icon": "/site-icons/18b15c594eb8d445.png", "homepage_icon_for": "https://conduit.wyre.ai/plugins/ninjaone-rmm", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'NODE_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.4, "trust_score_v2": 51.4, "rank_v2": 944, "rank_v2_delta": 197, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 12.8, "maintenance": 13.8, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mirascope", "repo": "Mirascope/mirascope", "display_repo": "", "url": "https://github.com/Mirascope/mirascope", "listing_class": "agent", "rank": 945, "previous_rank": 948, "rank_delta": 3, "stars": 1531, "stars_fmt": "1.5k", "forks": 130, "forks_fmt": "130", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 11, "commits_low_confidence": false, "score": 67.4, "description": "The LLM Anti-Framework", "language": "Python", "open_issues": 8, "category": "Agent Frameworks", "category_rank": 84, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T03:17:31Z", "slug": "mirascope", "full_fetched_at": "2026-10-12T08:02:02Z", "source_note": "", "github_homepage": "https://mirascope.com", "homepage_icon": "/site-icons/2ff5ecaf86b7259f.png", "homepage_icon_for": "https://mirascope.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'fastmcp' in python/pyproject.toml", "Found MCP dependency '@modelcontextprotocol/sdk' in typescript/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in python/pyproject.toml", "Found Anthropic dependency 'anthropic' in python/pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in python/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: content/docs/v1/docs/learn/extensions/custom_provider.mdx" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.4, "trust_score_v2": 51.4, "rank_v2": 945, "rank_v2_delta": 66, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 12.4, "maintenance": 16.3, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Finance Skills", "repo": "himself65/finance-skills", "display_repo": "", "url": "https://github.com/himself65/finance-skills", "listing_class": "skill", "rank": 224, "previous_rank": 225, "rank_delta": 1, "stars": 3395, "stars_fmt": "3.4k", "forks": 387, "forks_fmt": "387", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 4, "commits_low_confidence": true, "score": 66.8, "description": "A collection of skills for AI financial analysis.", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 224, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:20:45Z", "slug": "finance-skills", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "https://skills.himself65.com", "homepage_icon": "/site-icons/32f0c23d80bc8a75.png", "homepage_icon_for": "https://skills.himself65.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.4, "trust_score_v2": 51.4, "rank_v2": 224, "rank_v2_delta": 946, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.9, "maintenance": 13.3, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ouroboros", "repo": "razzant/ouroboros", "display_repo": "", "url": "https://github.com/razzant/ouroboros", "listing_class": "agent", "rank": 946, "previous_rank": 939, "rank_delta": -7, "stars": 1443, "stars_fmt": "1.4k", "forks": 660, "forks_fmt": "660", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2611, "commits_low_confidence": false, "score": 82.1, "description": "Ouroboros — self-creating AI agent. Born Feb 16, 2026.", "language": "Python", "open_issues": 305, "category": "Agent Frameworks", "category_rank": 85, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.11, "scorecard_score": 3.7, "scorecard_checks": { "Code-Review": 0, "Maintained": 10, "Dangerous-Workflow": 10, "Security-Policy": 10, "Packaging": -1, "Token-Permissions": 0, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Signed-Releases": 0, "Pinned-Dependencies": 6, "Fuzzing": 0, "SAST": 0, "License": 10, "Branch-Protection": 0, "Dependency-Update-Tool": 0, "Vulnerabilities": 0, "CI-Tests": 1, "Contributors": 6 }, "scorecard_scanned_at": "2026-10-12T00:05:56Z", "slug": "ouroboros", "full_fetched_at": "2026-10-12T00:02:01Z", "source_note": "", "github_homepage": "https://ouroboros-agent.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: tests/test_mcp_server_identity.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found marketplace path: ouroboros/marketplace/__init__.py", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.4, "trust_score_v2": 51.4, "rank_v2": 946, "rank_v2_delta": -25, "trust_v2_adjustment": -3.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.6, "maintenance": 20.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -1.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Grok Build", "repo": "xai-org/grok-build", "display_repo": "", "url": "https://github.com/xai-org/grok-build", "listing_class": "agent", "rank": 947, "previous_rank": 938, "rank_delta": -9, "stars": 27327, "stars_fmt": "27.3k", "forks": 5144, "forks_fmt": "5.1k", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 7, "commits_low_confidence": false, "score": 78.5, "description": "SpaceXAI's coding agent harness and TUI. Fullscreen, mouse interactive, extensible.", "language": "Rust", "open_issues": 0, "category": "Coding Agents", "category_rank": 54, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 13, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:50:07Z", "slug": "grok-build", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: crates/codegen/xai-grok-config/src/mcp_server_config.rs", "Found MCP-related server path: crates/codegen/xai-grok-config/src/mcp_server_config_tests.rs", "Found MCP-related server docs path: crates/codegen/xai-grok-pager/docs/user-guide/07-mcp-servers.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: crates/codegen/xai-grok-agent/src/plugins/discovery.rs", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.4, "trust_score_v2": 51.4, "rank_v2": 947, "rank_v2_delta": 128, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 14.7, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Scriptivox MCP Server", "repo": "SparkleOfficial/scriptivox-mcp-server", "display_repo": "", "url": "https://github.com/SparkleOfficial/scriptivox-mcp-server", "listing_class": "agent", "rank": 948, "previous_rank": 955, "rank_delta": 7, "stars": 11, "stars_fmt": "11", "forks": 0, "forks_fmt": "0", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 5, "commits_low_confidence": true, "score": 41.2, "description": "", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 534, "npm_package": "@scriptivox/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/sparkleofficialmain/scriptivox-mcp-server:1.1.3", "vscode_extension": "", "weekly_downloads": 1416, "dl_source": "npm+docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:39:50Z", "slug": "scriptivox-mcp-server", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SCRIPTIVOX_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@scriptivox/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@scriptivox/mcp-server", "version": "1.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:14Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.4, "trust_score_v2": 51.4, "rank_v2": 948, "rank_v2_delta": 362, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 11.2, "maintenance": 13.6, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "mateclaw", "repo": "mateaix/mateclaw", "display_repo": "", "url": "https://github.com/mateaix/mateclaw", "listing_class": "agent", "rank": 949, "previous_rank": 944, "rank_delta": -5, "stars": 1156, "stars_fmt": "1.2k", "forks": 342, "forks_fmt": "342", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 131, "commits_low_confidence": false, "score": 80.2, "description": "🤖 MateClaw — Your second brain with Multi-Agent Orchestration, MCP Protocol, Skills & Memory, Dream, and Multi-Channel Support. Built on Spring AI Alibaba.", "language": "Java", "open_issues": 173, "category": "Multi-Agent Systems", "category_rank": 29, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 2.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:46:31Z", "slug": "mateclaw", "full_fetched_at": "2026-10-11T20:01:58Z", "source_note": "", "github_homepage": "https://claw.mate.vip", "homepage_icon": "/site-icons/25f321d039e0394b.png", "homepage_icon_for": "https://claw.mate.vip", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mateclaw-server/src/main/java/vip/mate/tool/mcp/config/McpServerBootstrapRunner.java", "Found MCP-related server path: mateclaw-server/src/main/java/vip/mate/tool/mcp/controller/McpServerController.java", "Found MCP-related server test path: mateclaw-server/src/test/java/vip/mate/tool/mcp/service/McpServerSanitizeTest.java", "Found MCP-related server test path: mateclaw-server/src/test/java/vip/mate/tool/mcp/service/McpServerServiceListToolsTest.java" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: mateclaw-plugin-api/src/main/java/vip/mate/plugin/api/MateClawPlugin.java", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.4, "trust_score_v2": 51.4, "rank_v2": 949, "rank_v2_delta": 125, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.4, "maintenance": 20.0, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zscaler Zero Trust Exchange", "repo": "zscaler/zscaler-mcp-server", "display_repo": "", "url": "https://github.com/zscaler/zscaler-mcp-server", "listing_class": "agent", "rank": 950, "previous_rank": 958, "rank_delta": 8, "stars": 49, "stars_fmt": "49", "forks": 33, "forks_fmt": "33", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 0, "commits_low_confidence": true, "score": 42.3, "description": "Zscaler Integration MCP Server is a Model Context Protocol (MCP) server designed for managing Several Zscaler Products using Large Language Models (LLMs).", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 535, "npm_package": "", "crate_package": "", "pypi_package": "zscaler-mcp", "docker_image": "docker.io/zscaler/zscaler-mcp-server:latest", "vscode_extension": "", "weekly_downloads": 15831, "dl_source": "docker+pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.5, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:34:21Z", "slug": "zscaler-zero-trust-exchange", "full_fetched_at": "2026-10-12T04:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: integrations/helm-chart/charts/zscaler-mcp-server/.helmignore", "Found MCP-related server path: integrations/helm-chart/charts/zscaler-mcp-server/Chart.yaml", "Found MCP-related server docs path: docs/media/start-mcp-server.gif" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "README/docs also mention Amazon Bedrock", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'ZSCALER_MCP_AUTH_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'zscaler-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.3, "trust_score_v2": 51.3, "rank_v2": 950, "rank_v2_delta": 108, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.0, "maintenance": 12.0, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Eval Skills", "repo": "ai-evals-course/evals-skills", "display_repo": "", "url": "https://github.com/ai-evals-course/evals-skills", "listing_class": "skill", "rank": 225, "previous_rank": 223, "rank_delta": -2, "stars": 1491, "stars_fmt": "1.5k", "forks": 104, "forks_fmt": "104", "last_push": "2026-09-24", "days_ago": 18, "weekly_commits": 8, "commits_low_confidence": false, "score": 62.9, "description": "Skills that guide AI coding agents to help you build product-specific AI evals.", "language": "", "open_issues": 0, "category": "Agent Skills", "category_rank": 225, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.288, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:28:00Z", "slug": "eval-skills", "full_fetched_at": "2026-10-12T12:02:30Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.3, "trust_score_v2": 51.3, "rank_v2": 225, "rank_v2_delta": 859, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.0, "maintenance": 14.6, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Skills Governance Risk and Compliance", "repo": "Sushegaad/Claude-Skills-Governance-Risk-and-Compliance", "display_repo": "", "url": "https://github.com/Sushegaad/Claude-Skills-Governance-Risk-and-Compliance", "listing_class": "skill", "rank": 226, "previous_rank": 226, "rank_delta": 0, "stars": 953, "stars_fmt": "953", "forks": 185, "forks_fmt": "185", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 19, "commits_low_confidence": false, "score": 69.4, "description": "Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs…", "language": "HTML", "open_issues": 9, "category": "Agent Skills", "category_rank": 226, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-10T01:46:02Z", "slug": "claude-skills-governance-risk-and-compliance", "full_fetched_at": "2026-10-12T00:02:18Z", "source_note": "", "github_homepage": "https://sushegaad.github.io/Claude-Skills-Governance-Risk-and-Compliance/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/ccpa/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.3, "trust_score_v2": 51.3, "rank_v2": 226, "rank_v2_delta": 856, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.7, "maintenance": 17.1, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google Knowledge Graph MCP", "repo": "houtini-ai/google-knowledge-graph-mcp", "display_repo": "", "url": "https://github.com/houtini-ai/google-knowledge-graph-mcp", "listing_class": "agent", "rank": 951, "previous_rank": 953, "rank_delta": 2, "stars": 12, "stars_fmt": "12", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 4, "commits_low_confidence": true, "score": 43.4, "description": "MCP server for Google's free public Knowledge Graph Search API - search for structured entity information about people, places, organizations, and concepts", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 536, "npm_package": "@houtini/google-knowledge-graph-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 355, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.094, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T13:33:36Z", "slug": "google-knowledge-graph-mcp", "full_fetched_at": "2026-10-12T16:02:28Z", "source_note": "", "github_homepage": "https://houtini.com", "homepage_icon": "/site-icons/45465dd0be06e1b8.png", "homepage_icon_for": "https://houtini.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GOOGLE_KNOWLEDGE_GRAPH_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@houtini/google-knowledge-graph-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@houtini/google-knowledge-graph-mcp", "version": "1.0.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:28Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.3, "trust_score_v2": 51.3, "rank_v2": 951, "rank_v2_delta": 362, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.4, "maintenance": 13.3, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SimpleEnglish", "repo": "AminBlg/SimpleEnglish", "display_repo": "", "url": "https://github.com/AminBlg/SimpleEnglish", "listing_class": "skill", "rank": 227, "previous_rank": 224, "rank_delta": -3, "stars": 3883, "stars_fmt": "3.9k", "forks": 152, "forks_fmt": "152", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 5, "commits_low_confidence": true, "score": 65.4, "description": "Agent skill: make LLMs write docs in ASD-STE100 Simplified Technical", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 227, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.773, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T16:59:38Z", "slug": "simpleenglish", "full_fetched_at": "2026-10-12T08:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.3, "trust_score_v2": 51.3, "rank_v2": 227, "rank_v2_delta": 856, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 11.2, "maintenance": 13.1, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google Surf MCP", "repo": "HarimxChoi/google-surf-mcp", "display_repo": "", "url": "https://github.com/HarimxChoi/google-surf-mcp", "listing_class": "agent", "rank": 952, "previous_rank": 942, "rank_delta": -10, "stars": 291, "stars_fmt": "291", "forks": 33, "forks_fmt": "33", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.6, "description": "Turn Google Search, Papers, and Codebases into an Automatic Local Knowledge Graph for AI Agents.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 537, "npm_package": "google-surf-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 246, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:22:39Z", "slug": "google-surf-mcp", "full_fetched_at": "2026-10-12T16:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'google-surf-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "google-surf-mcp", "version": "1.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:16Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.3, "trust_score_v2": 51.3, "rank_v2": 952, "rank_v2_delta": 348, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.2, "maintenance": 9.9, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agentic Security", "repo": "msoedov/agentic_security", "display_repo": "", "url": "https://github.com/msoedov/agentic_security", "listing_class": "agent", "rank": 953, "previous_rank": 946, "rank_delta": -7, "stars": 2019, "stars_fmt": "2.0k", "forks": 295, "forks_fmt": "295", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 5, "commits_low_confidence": false, "score": 63.2, "description": "Agentic LLM Vulnerability Scanner / AI red teaming kit 🧪", "language": "Python", "open_issues": 42, "category": "Security & Guardrails", "category_rank": 20, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T10:04:31Z", "slug": "agentic-security", "full_fetched_at": "2026-10-12T08:02:09Z", "source_note": "", "github_homepage": "https://agentic-security.vercel.app", "homepage_icon": "/site-icons/f756d87bfce041cc.png", "homepage_icon_for": "https://agentic-security.vercel.app", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Groq", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Groq credential/config marker 'GROQ_API_KEY'", "README/docs also mention Groq" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.2, "trust_score_v2": 51.2, "rank_v2": 953, "rank_v2_delta": 50, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 12.8, "maintenance": 13.8, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Turso Cloud", "repo": "spences10/mcp-turso-cloud", "display_repo": "", "url": "https://github.com/spences10/mcp-turso-cloud", "listing_class": "agent", "rank": 954, "previous_rank": 940, "rank_delta": -14, "stars": 18, "stars_fmt": "18", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 8, "commits_low_confidence": true, "score": 48.2, "description": "🗂️ A Model Context Protocol (MCP) server that provides integration with Turso databases for LLMs. This server implements a two-level authentication system to handle both organization-level and database-level operations, making it easy to manage and query Turso databases directly from LLMs.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 538, "npm_package": "mcp-turso-cloud", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 67, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-09-24T11:15:11Z", "slug": "mcp-turso-cloud", "full_fetched_at": "2026-10-12T00:02:15Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'TURSO_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'mcp-turso-cloud' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-turso-cloud", "version": "0.0.11" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:15Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.2, "trust_score_v2": 51.2, "rank_v2": 954, "rank_v2_delta": 199, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 11.2, "maintenance": 13.8, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "autoMate", "repo": "yuruotong1/autoMate", "display_repo": "", "url": "https://github.com/yuruotong1/autoMate", "listing_class": "agent", "rank": 955, "previous_rank": 943, "rank_delta": -12, "stars": 3965, "stars_fmt": "4.0k", "forks": 490, "forks_fmt": "490", "last_push": "2026-09-18", "days_ago": 24, "weekly_commits": 1, "commits_low_confidence": false, "score": 59.6, "description": "Like Manus, Computer Use Agent(CUA) and Omniparser, we are computer-using agents.AI-driven local automation assistant that uses natural language to make computers work by themselves", "language": "Python", "open_issues": 2, "category": "Browser & Computer Use", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.74, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-06T22:30:33Z", "slug": "automate", "full_fetched_at": "2026-10-12T08:02:41Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.2, "trust_score_v2": 51.2, "rank_v2": 955, "rank_v2_delta": 226, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 11.1, "maintenance": 11.6, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "JavaLens", "repo": "pzalutski-pixel/javalens-mcp", "display_repo": "", "url": "https://github.com/pzalutski-pixel/javalens-mcp", "listing_class": "agent", "rank": 956, "previous_rank": 950, "rank_delta": -6, "stars": 43, "stars_fmt": "43", "forks": 12, "forks_fmt": "12", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 1, "commits_low_confidence": true, "score": 43.8, "description": "MCP server providing semantic Java code analysis for AI agents. Built on Eclipse JDT with tools for navigation, refactoring, search, and metrics.", "language": "Java", "open_issues": 1, "category": "MCP Servers", "category_rank": 539, "npm_package": "javalens-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 180, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-02T19:00:35Z", "slug": "javalens", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'javalens-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "javalens-mcp", "version": "1.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.2, "trust_score_v2": 51.2, "rank_v2": 956, "rank_v2_delta": 393, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.8, "identity": 10.8, "transparency": 11.1, "maintenance": 12.5, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Storeshots MCP", "repo": "mtbun/storeshots-mcp", "display_repo": "", "url": "https://github.com/mtbun/storeshots-mcp", "listing_class": "agent", "rank": 957, "previous_rank": 968, "rank_delta": 11, "stars": 25, "stars_fmt": "25", "forks": 0, "forks_fmt": "0", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2, "commits_low_confidence": true, "score": 39.5, "description": "Store-ready App Store & Google Play screenshots from any MCP client. Device frames, benefit-driven headlines, exact store dimensions. No API keys.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 540, "npm_package": "storeshots-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 781, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.083, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:22:01Z", "slug": "storeshots-mcp", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'storeshots-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "storeshots-mcp", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.2, "trust_score_v2": 51.2, "rank_v2": 957, "rank_v2_delta": 378, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.7, "identity": 10.8, "transparency": 10.7, "maintenance": 13.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "TinyTroupe", "repo": "microsoft/TinyTroupe", "display_repo": "", "url": "https://github.com/microsoft/TinyTroupe", "listing_class": "agent", "rank": 958, "previous_rank": 951, "rank_delta": -7, "stars": 7590, "stars_fmt": "7.6k", "forks": 687, "forks_fmt": "687", "last_push": "2026-07-03", "days_ago": 101, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.5, "description": "LLM-powered multiagent persona simulation for imagination enhancement and business insights.", "language": "Jupyter Notebook", "open_issues": 14, "category": "Multi-Agent Systems", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "tinytroupe", "docker_image": "", "vscode_extension": "", "weekly_downloads": 14, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.21, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:42:58Z", "slug": "tinytroupe", "full_fetched_at": "2026-10-12T08:01:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'tinytroupe' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "tinytroupe", "version": "0.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:01:57Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.1, "trust_score_v2": 51.1, "rank_v2": 958, "rank_v2_delta": 273, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 13.2, "maintenance": 5.3, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Magentic-UI", "repo": "microsoft/magentic-ui", "display_repo": "", "url": "https://github.com/microsoft/magentic-ui", "listing_class": "agent", "rank": 959, "previous_rank": 945, "rank_delta": -14, "stars": 10094, "stars_fmt": "10.1k", "forks": 1020, "forks_fmt": "1.0k", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 0, "commits_low_confidence": false, "score": 60.5, "description": "MagenticLite is an experimental agent that works across the browser and local file system", "language": "Python", "open_issues": 4, "category": "Browser & Computer Use", "category_rank": 29, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:35:24Z", "slug": "magentic-ui", "full_fetched_at": "2026-10-12T08:02:04Z", "source_note": "", "github_homepage": "https://www.microsoft.com/en-us/research/blog/magenticlite-magenticbrain-fara1-5-an-agentic-experience-optimized-for-small-models/", "homepage_icon": "/site-icons/f7fcf854c253f9df.png", "homepage_icon_for": "https://www.microsoft.com/en-us/research/blog/magenticlite-magenticbrain-fara1-5-an-agentic-experience-optimized-for-small-models/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.1, "trust_score_v2": 51.1, "rank_v2": 959, "rank_v2_delta": 107, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 13.2, "maintenance": 10.7, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP NixOS", "repo": "utensils/mcp-nixos", "display_repo": "", "url": "https://github.com/utensils/mcp-nixos", "listing_class": "agent", "rank": 960, "previous_rank": 947, "rank_delta": -13, "stars": 853, "stars_fmt": "853", "forks": 46, "forks_fmt": "46", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.3, "description": "MCP-NixOS - Model Context Protocol Server for NixOS resources", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 541, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.71, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T10:53:48Z", "slug": "mcp-nixos", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "https://mcp-nixos.io/", "homepage_icon": "/site-icons/078364d9e1b2b9d0.png", "homepage_icon_for": "https://mcp-nixos.io/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .claude/agents/mcp-server-architect.md", "Found MCP-related server path: nix/fastmcp-slim.nix", "Found MCP-related server test path: tests/test_fastmcp_version.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: .pi/extensions/mcp-nixos.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.1, "trust_score_v2": 51.1, "rank_v2": 960, "rank_v2_delta": 213, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 12.7, "maintenance": 9.5, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Coze Studio", "repo": "coze-dev/coze-studio", "display_repo": "", "url": "https://github.com/coze-dev/coze-studio", "listing_class": "agent", "rank": 961, "previous_rank": 952, "rank_delta": -9, "stars": 21700, "stars_fmt": "21.7k", "forks": 3127, "forks_fmt": "3.1k", "last_push": "2026-07-29", "days_ago": 75, "weekly_commits": 0, "commits_low_confidence": false, "score": 56.9, "description": "An AI agent development platform with all-in-one visual tools, simplifying agent creation, debugging, and deployment like never before. Coze your way to AI Agent creation.", "language": "TypeScript", "open_issues": 497, "category": "Workflow Platforms", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:52:50Z", "slug": "coze-studio", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: frontend/packages/arch/idl/src/auto-generated/bytefaas_api/namespaces/mcp_server.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "high", "evidence": [ "Found marketplace path: backend/api/model/marketplace/marketplace_common/marketplace_common.go", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.0, "trust_score_v2": 51.0, "rank_v2": 961, "rank_v2_delta": 101, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.1, "identity": 10.8, "transparency": 12.7, "maintenance": 7.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -1.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Browser Use Web UI", "repo": "browser-use/web-ui", "display_repo": "", "url": "https://github.com/browser-use/web-ui", "listing_class": "agent", "rank": 962, "previous_rank": 956, "rank_delta": -6, "stars": 16610, "stars_fmt": "16.6k", "forks": 2769, "forks_fmt": "2.8k", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 0, "commits_low_confidence": false, "score": 63.9, "description": "🖥️ Run AI Agent in your browser.", "language": "Python", "open_issues": 271, "category": "Browser & Computer Use", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.45, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 1, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:00:08Z", "slug": "browser-use-web-ui", "full_fetched_at": "2026-10-12T04:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.0, "trust_score_v2": 51.0, "rank_v2": 962, "rank_v2_delta": 149, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 11.9, "maintenance": 10.9, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Aider", "repo": "Aider-AI/aider", "display_repo": "", "url": "https://github.com/Aider-AI/aider", "listing_class": "agent", "rank": 963, "previous_rank": 957, "rank_delta": -6, "stars": 49501, "stars_fmt": "49.5k", "forks": 5047, "forks_fmt": "5.0k", "last_push": "2026-05-22", "days_ago": 143, "weekly_commits": 0, "commits_low_confidence": false, "score": 50.5, "description": "aider is AI pair programming in your terminal", "language": "Python", "open_issues": 1397, "category": "Coding Agents", "category_rank": 55, "npm_package": "", "crate_package": "", "pypi_package": "aider-chat", "docker_image": "", "vscode_extension": "", "weekly_downloads": 58154, "dl_source": "pypi", "hn_mentions_30d": 52, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.16, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-07-11T03:01:38Z", "slug": "aider", "full_fetched_at": "2026-10-12T04:02:05Z", "source_note": "", "github_homepage": "https://aider.chat/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": { "actions_30d": 5437, "actions_30d_merged": null, "actions_30d_by_repo": [ { "repo": "farkaskid-code/systembot", "count": 2 }, { "repo": "mattehe-creator/appfabriken", "count": 2 }, { "repo": "MaleeshaKumarage/readysetsiivous", "count": 1 } ] }, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "shell" ], "confidence": "high", "evidence": [ "Found shell dependency 'pty' in requirements.txt", "README/docs also mention shell capabilities", "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'aider-chat' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "aider-chat", "version": "0.86.2" } ], "found": [ { "id": "GHSA-7w7m-v5vp-w699", "aliases": [ "CVE-2026-10175", "PYSEC-2026-2335" ], "summary": "Aider is vulnerable to Code Injection via editor_coder.run function", "severity": "LOW", "published": "2026-05-31", "package": "aider-chat", "version": "0.86.2" }, { "id": "GHSA-hchg-qm84-cj9p", "aliases": [ "CVE-2026-10177", "PYSEC-2026-2336" ], "summary": "Aider has an SSRF vulnerability through its AWS EC2 Metadata Endpoint", "severity": "LOW", "published": "2026-05-31", "package": "aider-chat", "version": "0.86.2" } ], "worst": "LOW", "checked_at": "2026-10-12T04:02:05Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 1.0, "signal_types": 5, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 51.0, "trust_score_v2": 51.0, "rank_v2": 963, "rank_v2_delta": 267, "trust_v2_adjustment": 2.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.7, "maintenance": 2.5, "adoption": 17.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Itr Wala", "repo": "karanb192/itr-wala", "display_repo": "", "url": "https://github.com/karanb192/itr-wala", "listing_class": "skill", "rank": 228, "previous_rank": 227, "rank_delta": -1, "stars": 873, "stars_fmt": "873", "forks": 128, "forks_fmt": "128", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 3, "commits_low_confidence": true, "score": 59.8, "description": "File your Indian income tax return (ITR) from your terminal. Deterministic tax engine, both regimes, AY 2026-27. Claude Code / Codex / Gemini skill.", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 228, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.933, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:21:17Z", "slug": "itr-wala", "full_fetched_at": "2026-10-12T16:02:37Z", "source_note": "", "github_homepage": "https://itr-wala.karanbansal.in", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 51.0, "trust_score_v2": 51.0, "rank_v2": 228, "rank_v2_delta": 866, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.9, "identity": 10.8, "transparency": 11.4, "maintenance": 13.1, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Meta MCP", "repo": "mikusnuz/meta-mcp", "display_repo": "", "url": "https://github.com/mikusnuz/meta-mcp", "listing_class": "agent", "rank": 964, "previous_rank": 954, "rank_delta": -10, "stars": 29, "stars_fmt": "29", "forks": 11, "forks_fmt": "11", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 1, "commits_low_confidence": true, "score": 42.1, "description": "MCP server for Instagram Graph API, Threads API & Meta platform — 57 tools with Graph API v25.0", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 542, "npm_package": "@mikusnuz/meta-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 917, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:18:49Z", "slug": "meta-mcp", "full_fetched_at": "2026-10-11T20:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'INSTAGRAM_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mikusnuz/meta-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mikusnuz/meta-mcp", "version": "2.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:00Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 51.0, "trust_score_v2": 51.0, "rank_v2": 964, "rank_v2_delta": 359, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.3, "maintenance": 12.3, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Aso Skills", "repo": "appeeky/aso-skills", "display_repo": "", "url": "https://github.com/appeeky/aso-skills", "listing_class": "skill", "rank": 229, "previous_rank": 228, "rank_delta": -1, "stars": 2172, "stars_fmt": "2.2k", "forks": 128, "forks_fmt": "128", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 7, "commits_low_confidence": true, "score": 65.4, "description": "AI agent skills for App Store Optimization (ASO) and app marketing. Built for indie developers, app marketers, and growth teams who want Cursor, Claude Code, or any Agent Skills-compatible AI assistant to help with keyword research, metadata optimization, competitor analysis, and app growth.", "language": "MDX", "open_issues": 0, "category": "Agent Skills", "category_rank": 229, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.619, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T07:29:33Z", "slug": "aso-skills", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "https://appeeky.com/", "homepage_icon": "/site-icons/bef393752a991de2.png", "homepage_icon_for": "https://appeeky.com/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/icon.png", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.9, "trust_score_v2": 50.9, "rank_v2": 229, "rank_v2_delta": 867, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.5, "identity": 10.8, "transparency": 11.5, "maintenance": 13.4, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Openevidence MCP", "repo": "bakhtiersizhaev/openevidence-mcp", "display_repo": "", "url": "https://github.com/bakhtiersizhaev/openevidence-mcp", "listing_class": "agent", "rank": 965, "previous_rank": 960, "rank_delta": -5, "stars": 45, "stars_fmt": "45", "forks": 10, "forks_fmt": "10", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 1, "commits_low_confidence": false, "score": 41.2, "description": "First open-source OpenEvidence MCP server: browser-session medical research tools for Codex, Claude Code, and MCP clients", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 543, "npm_package": "openevidence-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 54, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.196, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:52:48Z", "slug": "openevidence-mcp", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "https://bakhtiersizhaev.github.io/openevidence-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: _external/awesome-mcp-servers-pr.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'openevidence-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "openevidence-mcp", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:46Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.9, "trust_score_v2": 50.9, "rank_v2": 965, "rank_v2_delta": 386, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.1, "maintenance": 12.1, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "NotebookLM MCP (PleasePrompto)", "repo": "PleasePrompto/notebooklm-mcp", "display_repo": "", "url": "https://github.com/PleasePrompto/notebooklm-mcp", "listing_class": "agent", "rank": 966, "previous_rank": 961, "rank_delta": -5, "stars": 3435, "stars_fmt": "3.4k", "forks": 553, "forks_fmt": "553", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 54.6, "description": "MCP server for NotebookLM - Let your AI agents (Claude Code, Codex) research documentation directly with grounded, citation-backed answers from Gemini. Persistent auth, library management, cross-client sharing. Zero hallucinations, just your knowledge base.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 544, "npm_package": "notebooklm-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1742, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:56:06Z", "slug": "notebooklm-mcp-pleaseprompto", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'notebooklm-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "notebooklm-mcp", "version": "2.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:10Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "PleasePrompto/notebooklm-mcp", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.9, "trust_score_v2": 50.9, "rank_v2": 966, "rank_v2_delta": 392, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.7, "identity": 10.8, "transparency": 9.7, "maintenance": 9.9, "adoption": 12.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Swift Concurrency Agent Skill", "repo": "AvdLee/Swift-Concurrency-Agent-Skill", "display_repo": "", "url": "https://github.com/AvdLee/Swift-Concurrency-Agent-Skill", "listing_class": "skill", "rank": 230, "previous_rank": 229, "rank_delta": -1, "stars": 1679, "stars_fmt": "1.7k", "forks": 102, "forks_fmt": "102", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 2, "commits_low_confidence": false, "score": 55.9, "description": "Add expert Swift Concurrency guidance to your AI coding tool (Agent Skills open format): safe concurrency, performance optimization, and Swift 6 migration.", "language": "", "open_issues": 4, "category": "Agent Skills", "category_rank": 230, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.54, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:39:41Z", "slug": "swift-concurrency-agent-skill", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://www.swiftconcurrencycourse.com", "homepage_icon": "/site-icons/4d3b7a7027e01757.png", "homepage_icon_for": "https://www.swiftconcurrencycourse.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.8, "trust_score_v2": 50.8, "rank_v2": 230, "rank_v2_delta": 877, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.3, "maintenance": 12.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sage", "repo": "gendigitalinc/sage", "display_repo": "", "url": "https://github.com/gendigitalinc/sage", "listing_class": "skill", "rank": 231, "previous_rank": 248, "rank_delta": 17, "stars": 312, "stars_fmt": "312", "forks": 30, "forks_fmt": "30", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2, "commits_low_confidence": true, "score": 52.9, "description": "Lightweight Agent Detection & Response (ADR) layer for AI agents — guards commands, files, and web requests. Part of Gen Agent Trust Hub.", "language": "TypeScript", "open_issues": 8, "category": "Agent Skills", "category_rank": 231, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.315, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:50:22Z", "slug": "sage", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "https://ai.gendigital.com/sage", "homepage_icon": "/site-icons/95011d43d10725ca.png", "homepage_icon_for": "https://ai.gendigital.com/sage", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/claude-code/dist/mcp-server.cjs", "Found MCP-related server path: packages/claude-code/src/mcp-server.ts", "Found MCP-related server test path: packages/claude-code/src/__tests__/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.8, "trust_score_v2": 50.8, "rank_v2": 231, "rank_v2_delta": 961, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 12.2, "maintenance": 13.0, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Serpapi MCP", "repo": "serpapi/serpapi-mcp", "display_repo": "", "url": "https://github.com/serpapi/serpapi-mcp", "listing_class": "agent", "rank": 967, "previous_rank": 963, "rank_delta": -4, "stars": 179, "stars_fmt": "179", "forks": 43, "forks_fmt": "43", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 4, "commits_low_confidence": false, "score": 52.0, "description": "SerpApi MCP Server for Google and other search engine results", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 545, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.615, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:41:21Z", "slug": "serpapi-mcp", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "https://serpapi.com/integrations/mcp", "homepage_icon": "/site-icons/0dbf0a91efc9c48f.png", "homepage_icon_for": "https://serpapi.com/integrations/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: copilot/mcp-server-api/manifest.yml", "Found MCP-related server path: copilot/mcp-server-api/overrides/cfn.patches.yml", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "SerpAPI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found SerpAPI dependency 'serpapi' in pyproject.toml", "Found SerpAPI credential/config marker 'SERPAPI_API_KEY'", "README/docs also mention SerpAPI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found search dependency 'serpapi' in pyproject.toml", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.8, "trust_score_v2": 50.8, "rank_v2": 967, "rank_v2_delta": 189, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.1, "maintenance": 13.5, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "COG second brain", "repo": "huytieu/COG-second-brain", "display_repo": "", "url": "https://github.com/huytieu/COG-second-brain", "listing_class": "skill", "rank": 232, "previous_rank": 230, "rank_delta": -2, "stars": 1275, "stars_fmt": "1.3k", "forks": 154, "forks_fmt": "154", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 4, "commits_low_confidence": false, "score": 61.1, "description": "Self-evolving second brain with 35 AI skills, 10 agents, and people CRM. Closed-loop harness: a V-model verification lifecycle where the worker never grades its own homework. Plus paired anti-slop design skills for marketing and product UI. Works with Claude Code, Cursor, Kiro, Gemini CLI, Codex.", "language": "Python", "open_issues": 8, "category": "Agent Skills", "category_rank": 232, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.352, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T20:42:02Z", "slug": "cog-second-brain", "full_fetched_at": "2026-10-12T16:02:18Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.8, "trust_score_v2": 50.8, "rank_v2": 232, "rank_v2_delta": 872, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 11.9, "maintenance": 14.1, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Codex Settings", "repo": "fcakyon/claude-codex-settings", "display_repo": "", "url": "https://github.com/fcakyon/claude-codex-settings", "listing_class": "skill", "rank": 233, "previous_rank": 157, "rank_delta": -76, "stars": 1174, "stars_fmt": "1.2k", "forks": 109, "forks_fmt": "109", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 14, "commits_low_confidence": false, "score": 67.6, "description": "Battle-tested Claude Code, OpenAI Codex, Cursor configs, plugins, hooks and agents with Kimi, MiniMax and GLM API support.", "language": "Python", "open_issues": 6, "category": "Agent Skills", "category_rank": 233, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-19T14:13:48Z", "slug": "claude-codex-settings", "full_fetched_at": "2026-10-12T16:01:57Z", "source_note": "", "github_homepage": "https://claudesettings.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/adhd-output-style/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (plugins/adhd-output-style/gemini-extension.json)", "Found credential/config marker 'ANTHROPIC_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.8, "trust_score_v2": 50.8, "rank_v2": 233, "rank_v2_delta": 898, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 11.4, "maintenance": 16.7, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SearXNG HTTP MCP", "repo": "whw23/searxng_http_mcp", "display_repo": "", "url": "https://github.com/whw23/searxng_http_mcp", "listing_class": "agent", "rank": 968, "previous_rank": 962, "rank_delta": -6, "stars": 12, "stars_fmt": "12", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 0, "commits_low_confidence": true, "score": 32.7, "description": "A zero-install, cloud-hosted SearXNG MCP server over HTTP — no local runtime required.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 546, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/whw23/searxng-http-mcp", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 5, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:45:50Z", "slug": "searxng-http-mcp", "full_fetched_at": "2026-10-12T00:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp_server/__init__.py", "Found MCP-related server path: mcp_server/app.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/local/.claude-plugin/plugin.json)", "Found credential/config marker 'SEARXNG_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.7, "trust_score_v2": 50.7, "rank_v2": 968, "rank_v2_delta": 195, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 10.8, "transparency": 13.7, "maintenance": 11.8, "adoption": 2.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Illo Skill", "repo": "tmchow/illo-skill", "display_repo": "", "url": "https://github.com/tmchow/illo-skill", "listing_class": "skill", "rank": 234, "previous_rank": 231, "rank_delta": -3, "stars": 401, "stars_fmt": "401", "forks": 18, "forks_fmt": "18", "last_push": "2026-09-21", "days_ago": 21, "weekly_commits": 4, "commits_low_confidence": false, "score": 52.4, "description": "illo skill — an AI agent skill that turns ideas and articles into original print-style editorial illustrations, starring a recurring mascot. 30+ characters packs, with ability to create your own.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 234, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.68, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T09:51:55Z", "slug": "illo-skill", "full_fetched_at": "2026-10-12T00:02:27Z", "source_note": "", "github_homepage": "https://illo-skill.com", "homepage_icon": "/site-icons/a929293707edb2c8.png", "homepage_icon_for": "https://illo-skill.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.7, "trust_score_v2": 50.7, "rank_v2": 234, "rank_v2_delta": 853, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 12.2, "maintenance": 13.4, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Whale", "repo": "usewhale/Whale", "display_repo": "", "url": "https://github.com/usewhale/Whale", "listing_class": "agent", "rank": 969, "previous_rank": 965, "rank_delta": -4, "stars": 931, "stars_fmt": "931", "forks": 73, "forks_fmt": "73", "last_push": "2026-08-11", "days_ago": 62, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.9, "description": "Whale — blazingly fast, terminal-first AI coding agent for DeepSeek. ~98% prompt cache hit rate, 1M context, MCP tools, dynamic workflows.", "language": "Go", "open_issues": 13, "category": "Coding Agents", "category_rank": 56, "npm_package": "@usewhale/whale", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 27, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:47:07Z", "slug": "whale", "full_fetched_at": "2026-10-12T00:02:37Z", "source_note": "", "github_homepage": "https://whale-site.pages.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: internal/plugins/local.go", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@usewhale/whale' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@usewhale/whale", "version": "0.1.66" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:37Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.7, "trust_score_v2": 50.7, "rank_v2": 969, "rank_v2_delta": 315, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 12.2, "maintenance": 7.9, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Sap Docs", "repo": "marianfoo/mcp-sap-docs", "display_repo": "", "url": "https://github.com/marianfoo/mcp-sap-docs", "listing_class": "agent", "rank": 970, "previous_rank": 949, "rank_delta": -21, "stars": 239, "stars_fmt": "239", "forks": 49, "forks_fmt": "49", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 6, "commits_low_confidence": false, "score": 55.1, "description": "", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 547, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:46:15Z", "slug": "mcp-sap-docs", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: sync/abap.overlay/.github/workflows/deploy-abap-mcp-server.yml", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ABAP_REPO_SYNC_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.7, "trust_score_v2": 50.7, "rank_v2": 970, "rank_v2_delta": 202, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 11.9, "maintenance": 14.1, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Documentation Server", "repo": "andrea9293/mcp-documentation-server", "display_repo": "", "url": "https://github.com/andrea9293/mcp-documentation-server", "listing_class": "agent", "rank": 971, "previous_rank": 964, "rank_delta": -7, "stars": 343, "stars_fmt": "343", "forks": 44, "forks_fmt": "44", "last_push": "2026-08-27", "days_ago": 46, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.5, "description": "MCP Documentation Server - Bridge the AI Knowledge Gap. ✨ Features: Document management • Gemini integration • AI-powered semantic search • File uploads • Smart chunking • Multilingual support • Zero-setup 🎯 Perfect for: New frameworks • API docs • Internal guides ", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 548, "npm_package": "@andrea9293/mcp-documentation-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 92, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:51:14Z", "slug": "mcp-documentation-server", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency '@google/genai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "filesystem" ], "confidence": "medium", "evidence": [ "Found filesystem dependency 'fs-extra' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@andrea9293/mcp-documentation-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@andrea9293/mcp-documentation-server", "version": "1.15.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:42Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.7, "trust_score_v2": 50.7, "rank_v2": 971, "rank_v2_delta": 353, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.7, "maintenance": 8.9, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "vibesdk", "repo": "cloudflare/vibesdk", "display_repo": "", "url": "https://github.com/cloudflare/vibesdk", "listing_class": "agent", "rank": 972, "previous_rank": 969, "rank_delta": -3, "stars": 5400, "stars_fmt": "5.4k", "forks": 1274, "forks_fmt": "1.3k", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 0, "commits_low_confidence": false, "score": 59.0, "description": "An open-source vibe coding platform that helps you build your own vibe-coding platform, built entirely on Cloudflare stack ", "language": "TypeScript", "open_issues": 11, "category": "UI & App Builders", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 5, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:50:16Z", "slug": "vibesdk", "full_fetched_at": "2026-10-12T12:02:55Z", "source_note": "", "github_homepage": "https://build.cloudflare.dev", "homepage_icon": "/site-icons/30c8f68324088920.png", "homepage_icon_for": "https://build.cloudflare.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found Anthropic dependency 'anthropic' in space/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "code" ], "confidence": "high", "evidence": [ "Found browser dependency 'puppeteer' in package.json", "Found code dependency '@octokit' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.6, "trust_score_v2": 50.6, "rank_v2": 972, "rank_v2_delta": 108, "trust_v2_adjustment": -1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.9, "maintenance": 10.7, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Prd Taskmaster", "repo": "anombyte93/prd-taskmaster", "display_repo": "", "url": "https://github.com/anombyte93/prd-taskmaster", "listing_class": "skill", "rank": 235, "previous_rank": 232, "rank_delta": -3, "stars": 607, "stars_fmt": "607", "forks": 59, "forks_fmt": "59", "last_push": "2026-08-14", "days_ago": 59, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.8, "description": "Zero-config goal-to-tasks engine for Claude Code (the Atlas engine). Graded PRD validation, dependency-ordered task graph, evidence-gated execution.", "language": "Python", "open_issues": 8, "category": "Agent Skills", "category_rank": 235, "npm_package": "prd-taskmaster", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:52:07Z", "slug": "prd-taskmaster", "full_fetched_at": "2026-10-12T08:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server/.npmignore", "Found MCP-related server path: mcp-server/requirements.txt", "Found MCP dependency 'fastmcp' in mcp-server/requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/.npmignore", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'prd-taskmaster' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "prd-taskmaster", "version": "5.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:43Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.6, "trust_score_v2": 50.6, "rank_v2": 235, "rank_v2_delta": 1127, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.3, "maintenance": 8.1, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Funplay Unity MCP", "repo": "FunplayAI/funplay-unity-mcp", "display_repo": "", "url": "https://github.com/FunplayAI/funplay-unity-mcp", "listing_class": "agent", "rank": 973, "previous_rank": 966, "rank_delta": -7, "stars": 261, "stars_fmt": "261", "forks": 21, "forks_fmt": "21", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 6, "commits_low_confidence": true, "score": 55.6, "description": "The Most Advanced MCP Server for Unity Editor with execute_code, prompts/resources, input simulation, screenshots, and play mode automation.", "language": "C#", "open_issues": 0, "category": "MCP Servers", "category_rank": 549, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:27:36Z", "slug": "funplay-unity-mcp", "full_fetched_at": "2026-10-12T16:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: Editor/MCP/Server.meta", "Found MCP-related server path: Editor/MCP/Server/FunplayMCPServerControlsPanel.cs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.6, "trust_score_v2": 50.6, "rank_v2": 973, "rank_v2_delta": 236, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 12.2, "maintenance": 13.4, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MacOS MCP", "repo": "CursorTouch/MacOS-MCP", "display_repo": "", "url": "https://github.com/CursorTouch/MacOS-MCP", "listing_class": "agent", "rank": 974, "previous_rank": 995, "rank_delta": 21, "stars": 202, "stars_fmt": "202", "forks": 32, "forks_fmt": "32", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 4, "commits_low_confidence": true, "score": 54.6, "description": "Lightweight MCP server for computer use in MacOS", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 550, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:39:57Z", "slug": "macos-mcp", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: .pi/extensions/macos-mcp/.gitignore", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.5, "trust_score_v2": 50.5, "rank_v2": 974, "rank_v2_delta": 217, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.5, "maintenance": 13.4, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OSS Snowflake MCP Server", "repo": "Snowflake-Labs/mcp", "display_repo": "", "url": "https://github.com/Snowflake-Labs/mcp", "listing_class": "agent", "rank": 975, "previous_rank": 967, "rank_delta": -8, "stars": 299, "stars_fmt": "299", "forks": 108, "forks_fmt": "108", "last_push": "2026-05-15", "days_ago": 150, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.7, "description": "MCP Server for Snowflake including Cortex AI, object management, SQL orchestration, semantic view consumption, and more", "language": "Python", "open_issues": 21, "category": "MCP Servers", "category_rank": 551, "npm_package": "", "crate_package": "", "pypi_package": "snowflake-labs-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9274, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.97, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:03:14Z", "slug": "oss-snowflake-mcp-server", "full_fetched_at": "2026-10-12T00:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp_server_snowflake/__init__.py", "Found MCP-related server path: mcp_server_snowflake/cortex_services/prompts.py", "Found MCP-related server test path: mcp_server_snowflake/tests/__init__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'snowflake-labs-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "snowflake-labs-mcp", "version": "1.4.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:12Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.5, "trust_score_v2": 50.5, "rank_v2": 975, "rank_v2_delta": 398, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 11.4, "maintenance": 2.0, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Vidlens MCP", "repo": "thatsrajan/vidlens-mcp", "display_repo": "", "url": "https://github.com/thatsrajan/vidlens-mcp", "listing_class": "agent", "rank": 976, "previous_rank": 975, "rank_delta": -1, "stars": 34, "stars_fmt": "34", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 9, "commits_low_confidence": true, "score": 50.0, "description": "", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 552, "npm_package": "vidlens-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 166, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:06:19Z", "slug": "vidlens-mcp", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/server/mcp-server.ts", "Found MCP-related server test path: src/test/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency '@google/genai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "Found shell dependency 'execa' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'vidlens-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "vidlens-mcp", "version": "1.5.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:25Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.5, "trust_score_v2": 50.5, "rank_v2": 976, "rank_v2_delta": 321, "trust_v2_adjustment": 3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 11.2, "maintenance": 13.9, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Tomyud1 Godot MCP", "repo": "tomyud1/godot-mcp", "display_repo": "", "url": "https://github.com/tomyud1/godot-mcp", "listing_class": "agent", "rank": 977, "previous_rank": 970, "rank_delta": -7, "stars": 433, "stars_fmt": "433", "forks": 50, "forks_fmt": "50", "last_push": "2026-08-24", "days_ago": 49, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.9, "description": "MCP Server and Godot Plugin for AI-assisted game development", "language": "GDScript", "open_issues": 13, "category": "MCP Servers", "category_rank": 553, "npm_package": "godot-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 454, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.189, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:33:57Z", "slug": "tomyud1-godot-mcp", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-server/README.md", "Found MCP-related server path: mcp-server/package-lock.json", "Found MCP-related server test path: mcp-server/src/tests/godot-bridge.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'godot-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "godot-mcp-server", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:26Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.5, "trust_score_v2": 50.5, "rank_v2": 977, "rank_v2_delta": 395, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 10.8, "maintenance": 8.7, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "golf", "repo": "golf-mcp/golf", "display_repo": "", "url": "https://github.com/golf-mcp/golf", "listing_class": "agent", "rank": 978, "previous_rank": 971, "rank_delta": -7, "stars": 840, "stars_fmt": "840", "forks": 75, "forks_fmt": "75", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.6, "description": "Production-Ready MCP Server Framework • Build, deploy & scale secure AI agent infrastructure • Includes Auth, Observability, Debugger, Telemetry & Runtime • Run real-world MCPs powering AI Agents ", "language": "Python", "open_issues": 3, "category": "Protocols & Tool Integration", "category_rank": 47, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.23, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T00:37:36Z", "slug": "golf", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "https://golf.dev/", "homepage_icon": "/site-icons/818e96d626851a74.png", "homepage_icon_for": "https://golf.dev/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/core/test_fastmcp_v4_integration.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.4, "trust_score_v2": 50.4, "rank_v2": 978, "rank_v2_delta": 242, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 13.0, "maintenance": 9.8, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Starwind UI MCP", "repo": "starwind-ui/starwind-ui-mcp", "display_repo": "", "url": "https://github.com/starwind-ui/starwind-ui-mcp", "listing_class": "agent", "rank": 979, "previous_rank": 972, "rank_delta": -7, "stars": 35, "stars_fmt": "35", "forks": 17, "forks_fmt": "17", "last_push": "2026-08-15", "days_ago": 58, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.0, "description": "Framework-aware Starwind UI v3 tools for Astro and React setup, components, docs, and migration.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 554, "npm_package": "@starwind-ui/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 178, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.216, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:27:34Z", "slug": "starwind-ui-mcp", "full_fetched_at": "2026-10-12T00:02:18Z", "source_note": "", "github_homepage": "https://starwind.dev/docs/getting-started/mcp/", "homepage_icon": "/site-icons/ee756f3d52b6dcef.png", "homepage_icon_for": "https://starwind.dev/docs/getting-started/mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@starwind-ui/mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@starwind-ui/mcp", "version": "0.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:18Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.4, "trust_score_v2": 50.4, "rank_v2": 979, "rank_v2_delta": 400, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.2, "maintenance": 8.1, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCPSpend", "repo": "andreisirbu91-lab/MCPSpend", "display_repo": "", "url": "https://github.com/andreisirbu91-lab/MCPSpend", "listing_class": "agent", "rank": 980, "previous_rank": 973, "rank_delta": -7, "stars": 73, "stars_fmt": "73", "forks": 2, "forks_fmt": "2", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.7, "description": "Real-time cost observability for Model Context Protocol (MCP) tool calls. Wraps any MCP server, attributes spend per tool/project/customer. Free tier 25K calls/mo. EU-hosted", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 555, "npm_package": "@mcpspend/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:20:39Z", "slug": "mcpspend", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "https://mcpspend.com", "homepage_icon": "/site-icons/a82339d21031910d.png", "homepage_icon_for": "https://mcpspend.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/publish-mcp-server.yml", "Found MCP-related server path: packages/mcp-server/README.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mcpspend/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mcpspend/mcp-server", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:56Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.4, "trust_score_v2": 50.4, "rank_v2": 980, "rank_v2_delta": 398, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 12.2, "maintenance": 9.2, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "JADX MCP Server", "repo": "zinja-coder/jadx-mcp-server", "display_repo": "", "url": "https://github.com/zinja-coder/jadx-mcp-server", "listing_class": "agent", "rank": 981, "previous_rank": 974, "rank_delta": -7, "stars": 795, "stars_fmt": "795", "forks": 132, "forks_fmt": "132", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 3, "commits_low_confidence": true, "score": 59.4, "description": "MCP server for JADX-AI Plugin", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 556, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:05:25Z", "slug": "jadx-mcp-server", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: jadx_mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.4, "trust_score_v2": 50.4, "rank_v2": 981, "rank_v2_delta": 238, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 11.3, "maintenance": 13.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Video Shotcraft", "repo": "Vincentwei1021/video-shotcraft", "display_repo": "", "url": "https://github.com/Vincentwei1021/video-shotcraft", "listing_class": "skill", "rank": 236, "previous_rank": 237, "rank_delta": 1, "stars": 11458, "stars_fmt": "11.5k", "forks": 1023, "forks_fmt": "1.0k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 6, "commits_low_confidence": true, "score": 73.9, "description": "AI video skill for Claude Code & Codex — cinematic product videos with Remotion: 152 shot recipe cards, 209 motion previews, a production-ready template", "language": "TypeScript", "open_issues": 6, "category": "Agent Skills", "category_rank": 236, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.51, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:33:16Z", "slug": "video-shotcraft", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "https://vincentwei1021.github.io/video-shotcraft/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.4, "trust_score_v2": 50.4, "rank_v2": 236, "rank_v2_delta": 890, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 10.7, "maintenance": 13.7, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "chidori", "repo": "ThousandBirdsInc/chidori", "display_repo": "", "url": "https://github.com/ThousandBirdsInc/chidori", "listing_class": "agent", "rank": 982, "previous_rank": 977, "rank_delta": -5, "stars": 1368, "stars_fmt": "1.4k", "forks": 59, "forks_fmt": "59", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 0, "commits_low_confidence": true, "score": 51.5, "description": "The agent framework where every run is durable, replayable, and resumable by default.", "language": "Rust", "open_issues": 4, "category": "Agent Frameworks", "category_rank": 86, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.81, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:19:08Z", "slug": "chidori", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "https://thousandbirdsinc.github.io/chidori/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.3, "trust_score_v2": 50.3, "rank_v2": 982, "rank_v2_delta": 88, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.6, "identity": 10.8, "transparency": 12.2, "maintenance": 11.7, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Memory Journal MCP", "repo": "neverinfamous/memory-journal-mcp", "display_repo": "", "url": "https://github.com/neverinfamous/memory-journal-mcp", "listing_class": "agent", "rank": 983, "previous_rank": 978, "rank_delta": -5, "stars": 20, "stars_fmt": "20", "forks": 7, "forks_fmt": "7", "last_push": "2026-07-22", "days_ago": 82, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.7, "description": "Secure AI Memory with Dynamic Project Detection, Automatic Session Briefing, Personal+Team Session Summary Prompts, Triple Search, Knowledge Graphs, GitHub Integration (Issues, PRs, Actions, Kanban, Milestones), Team Collaboration, Hush, Adaptive Analytics, Markdown I/O, Audit+Token Logging, OAuth…", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 557, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/writenotenow/memory-journal-mcp:v1.1.3", "vscode_extension": "", "weekly_downloads": 21234, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.7, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:46:28Z", "slug": "memory-journal-mcp", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "https://search.adamic.tech/", "homepage_icon": "/site-icons/3ab96d3270c403e2.png", "homepage_icon_for": "https://search.adamic.tech/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/server/mcp-server.ts", "Found MCP-related server test path: tests/server/mcp-server.bench.ts", "Found MCP-related server test path: tests/server/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency '@octokit' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 983, "rank_v2_delta": 200, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 13.1, "maintenance": 6.5, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Verl Agent", "repo": "langfengQ/verl-agent", "display_repo": "", "url": "https://github.com/langfengQ/verl-agent", "listing_class": "agent", "rank": 984, "previous_rank": 982, "rank_delta": -2, "stars": 2369, "stars_fmt": "2.4k", "forks": 230, "forks_fmt": "230", "last_push": "2026-06-09", "days_ago": 125, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.8, "description": "verl-agent is an extension of veRL, designed for training LLM/VLM agents via RL. verl-agent is also the official code for paper \"Group-in-Group Policy Optimization for LLM Agent Training\"", "language": "Python", "open_issues": 60, "category": "Agent Frameworks", "category_rank": 87, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 22847, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.6, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:33:05Z", "slug": "verl-agent", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://huggingface.co/papers/2505.10978", "homepage_icon": "/site-icons/71612e4c2c8d1e76.png", "homepage_icon_for": "https://huggingface.co/papers/2505.10978", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 984, "rank_v2_delta": 170, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 12.7, "maintenance": 3.7, "adoption": 13.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Fns Check", "repo": "atomno-mcp/mcp-fns-check", "display_repo": "", "url": "https://github.com/atomno-mcp/mcp-fns-check", "listing_class": "agent", "rank": 985, "previous_rank": 990, "rank_delta": 5, "stars": 15, "stars_fmt": "15", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.3, "description": "MCP-сервер проверки контрагентов РФ: ЕГРЮЛ, банкротство, налоговые долги, приставы и арбитражные дела. Для разведки компаний. Russian counterparty check MCP.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 558, "npm_package": "", "crate_package": "", "pypi_package": "atomno-mcp-fns-check", "docker_image": "", "vscode_extension": "", "weekly_downloads": 118, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T02:01:48Z", "slug": "mcp-fns-check", "full_fetched_at": "2026-10-12T12:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'atomno-mcp-fns-check' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "atomno-mcp-fns-check", "version": "0.1.12" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:26Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 985, "rank_v2_delta": 401, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.4, "maintenance": 9.5, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pinme", "repo": "glitternetwork/pinme", "display_repo": "", "url": "https://github.com/glitternetwork/pinme", "listing_class": "skill", "rank": 237, "previous_rank": 235, "rank_delta": -2, "stars": 3751, "stars_fmt": "3.8k", "forks": 273, "forks_fmt": "273", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 0, "commits_low_confidence": false, "score": 53.5, "description": "Deploy Your Frontend in a Single Command. Claude Code Skills supported.", "language": "TypeScript", "open_issues": 5, "category": "Agent Skills", "category_rank": 237, "npm_package": "pinme", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 215, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T23:46:04Z", "slug": "pinme", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "https://pinme.eth.limo", "homepage_icon": "/site-icons/7a3983ab835fb00e.png", "homepage_icon_for": "https://pinme.eth.limo", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in example/supabase/package.json", "README/docs also mention Supabase" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "filesystem" ], "confidence": "medium", "evidence": [ "Found filesystem dependency 'fs-extra' in package.json" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'pinme' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "pinme", "version": "2.0.12" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:19Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 237, "rank_v2_delta": 900, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 12.1, "maintenance": 10.0, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Roo Code", "repo": "RooCodeInc/Roo-Code", "display_repo": "", "url": "https://github.com/RooCodeInc/Roo-Code", "listing_class": "agent", "rank": 986, "previous_rank": 979, "rank_delta": -7, "stars": 24281, "stars_fmt": "24.3k", "forks": 3425, "forks_fmt": "3.4k", "last_push": "2026-05-15", "days_ago": 150, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.0, "description": "Roo Code gives you a whole dev team of AI agents in your code editor.", "language": "TypeScript", "open_issues": 550, "category": "Coding Agents", "category_rank": 57, "npm_package": "roo-cline", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "rooveterinaryinc.roo-cline", "weekly_downloads": 2070213, "dl_source": "npm+vscode", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T23:00:51Z", "slug": "roo-code", "full_fetched_at": "2026-10-12T08:02:26Z", "source_note": "", "github_homepage": "https://roocode.com", "homepage_icon": "/site-icons/ca18b3423e8a8182.png", "homepage_icon_for": "https://roocode.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: src/core/prompts/tools/native-tools/mcp_server.ts", "Found MCP-related server path: src/i18n/locales/ca/mcp.json", "Found MCP-related server docs path: apps/docs/docs/features/mcp/recommended-mcp-servers.md", "Found MCP-related server docs path: apps/docs/docs/features/mcp/server-transports.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Mistral AI", "OpenAI", "Qdrant", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/package.json", "Found Anthropic dependency 'anthropic' in src/package.json", "Found Google Gemini dependency '@google/genai' in src/package.json", "Found Mistral AI dependency 'mistralai' in src/package.json", "Found xAI Grok dependency '@ai-sdk/xai' in src/package.json", "Found DeepSeek dependency 'deepseek' in src/package.json" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [ "browser", "code", "database", "shell" ], "confidence": "high", "evidence": [ "Found marketplace path: apps/docs/static/img/marketplace/marketplace-1.png", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'puppeteer' in src/package.json", "Found shell dependency 'execa' in apps/cli/package.json", "Found database dependency 'qdrant' in src/package.json", "Found code dependency 'simple-git' in src/package.json" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'roo-cline' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "RooCodeInc/Roo-Code", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 986, "rank_v2_delta": 9, "trust_v2_adjustment": -3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 11.8, "maintenance": 2.0, "adoption": 18.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -2.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Librecrawl — Technical SEO Audit MCP Server", "repo": "adityaarsharma/librecrawl-technical-seo-audit-mcp", "display_repo": "", "url": "https://github.com/adityaarsharma/sitewalk", "listing_class": "agent", "rank": 987, "previous_rank": 983, "rank_delta": -4, "stars": 43, "stars_fmt": "43", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 11, "commits_low_confidence": false, "score": 52.3, "description": "Sitewalk: Technical SEO Site Audit. Open-source technical SEO crawler and MCP server for Claude, Cursor and Codex. 50+ checks, PDF and CSV reports, self-hosted. Built on LibreCrawl. MIT.", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 559, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.615, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:54:45Z", "slug": "librecrawl-technical-seo-audit-mcp-server", "full_fetched_at": "2026-10-12T08:02:46Z", "source_note": "", "github_homepage": "https://audit.adityaarsharma.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PAGESPEED_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 987, "rank_v2_delta": 202, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 11.2, "maintenance": 16.2, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Weather MCP Server", "repo": "isdaniel/mcp_weather_server", "display_repo": "", "url": "https://github.com/isdaniel/mcp_weather_server", "listing_class": "agent", "rank": 988, "previous_rank": 984, "rank_delta": -4, "stars": 61, "stars_fmt": "61", "forks": 36, "forks_fmt": "36", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.5, "description": "A Model Context Protocol (MCP) server that provides weather information using the Open-Meteo API.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 560, "npm_package": "", "crate_package": "", "pypi_package": "mcp-weather-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 720, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.134, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:59:06Z", "slug": "weather-mcp-server", "full_fetched_at": "2026-10-12T16:02:28Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-weather-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-weather-server", "version": "0.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:28Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 988, "rank_v2_delta": 397, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 11.1, "maintenance": 9.8, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Codex MCP Tool", "repo": "x51xxx/codex-mcp-tool", "display_repo": "", "url": "https://github.com/x51xxx/codex-mcp-tool", "listing_class": "agent", "rank": 989, "previous_rank": 976, "rank_delta": -13, "stars": 24, "stars_fmt": "24", "forks": 7, "forks_fmt": "7", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 3, "commits_low_confidence": false, "score": 43.4, "description": "", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 561, "npm_package": "@trishchuk/codex-mcp-tool", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 147, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.031, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:48:42Z", "slug": "codex-mcp-tool", "full_fetched_at": "2026-10-12T04:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@trishchuk/codex-mcp-tool' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@trishchuk/codex-mcp-tool", "version": "2.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:01:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 989, "rank_v2_delta": 361, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.7, "identity": 10.8, "transparency": 10.9, "maintenance": 13.6, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Meta Ads MCP", "repo": "mikusnuz/meta-ads-mcp", "display_repo": "", "url": "https://github.com/mikusnuz/meta-ads-mcp", "listing_class": "agent", "rank": 990, "previous_rank": 981, "rank_delta": -9, "stars": 84, "stars_fmt": "84", "forks": 21, "forks_fmt": "21", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 1, "commits_low_confidence": true, "score": 46.0, "description": "MCP server for Meta Marketing API v25.0 — 135 tools for Facebook & Instagram ad campaign management", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 562, "npm_package": "@mikusnuz/meta-ads-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 923, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T06:49:13Z", "slug": "meta-ads-mcp", "full_fetched_at": "2026-10-11T20:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'META_ADS_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mikusnuz/meta-ads-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mikusnuz/meta-ads-mcp", "version": "1.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:59Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.2, "trust_score_v2": 50.2, "rank_v2": 990, "rank_v2_delta": 356, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.0, "identity": 10.8, "transparency": 10.5, "maintenance": 12.3, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qwen Agent", "repo": "QwenLM/Qwen-Agent", "display_repo": "", "url": "https://github.com/QwenLM/Qwen-Agent", "listing_class": "agent", "rank": 991, "previous_rank": 987, "rank_delta": -4, "stars": 17168, "stars_fmt": "17.2k", "forks": 1742, "forks_fmt": "1.7k", "last_push": "2026-03-04", "days_ago": 222, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.5, "description": "Agent framework and applications built upon Qwen>=3.0, featuring Function Calling, MCP, Code Interpreter, RAG, Chrome extension, etc.", "language": "Python", "open_issues": 434, "category": "Agent Frameworks", "category_rank": 88, "npm_package": "", "crate_package": "", "pypi_package": "qwen-agent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 19889, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.14, "scorecard_score": 4.4, "scorecard_checks": { "Packaging": -1, "Maintained": 0, "Code-Review": 1, "CII-Best-Practices": 0, "Token-Permissions": 10, "Dangerous-Workflow": 10, "Security-Policy": 0, "License": 10, "Branch-Protection": -1, "Signed-Releases": -1, "Binary-Artifacts": 10, "SAST": 0, "Fuzzing": 0, "Pinned-Dependencies": 1 }, "scorecard_scanned_at": "2026-10-12T08:06:10Z", "slug": "qwen-agent", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in setup.py", "README/docs also mention OpenAI", "Found credential/config marker 'DASHSCOPE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'qwen-agent' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "qwen-agent", "version": "0.0.34" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:19Z" }, "evidence_grade": "C", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.1, "trust_score_v2": 50.1, "rank_v2": 991, "rank_v2_delta": 362, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 12.2, "maintenance": 0.0, "adoption": 15.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ResearcherSkill", "repo": "krzysztofdudek/ResearcherSkill", "display_repo": "", "url": "https://github.com/krzysztofdudek/ResearcherSkill", "listing_class": "skill", "rank": 238, "previous_rank": 236, "rank_delta": -2, "stars": 265, "stars_fmt": "265", "forks": 27, "forks_fmt": "27", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 12, "commits_low_confidence": false, "score": 59.3, "description": "One file. Your AI coding agent becomes a scientist. 30+ experiments while you sleep.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 238, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.097, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-01T02:04:46Z", "slug": "researcherskill", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.1, "trust_score_v2": 50.1, "rank_v2": 238, "rank_v2_delta": 902, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.1, "maintenance": 16.0, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "GZH Design Skill", "repo": "isjiamu/gzh-design-skill", "display_repo": "", "url": "https://github.com/isjiamu/gzh-design-skill", "listing_class": "skill", "rank": 239, "previous_rank": 238, "rank_delta": -1, "stars": 3971, "stars_fmt": "4.0k", "forks": 442, "forks_fmt": "442", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 5, "commits_low_confidence": true, "score": 68.2, "description": "把 Markdown 一键排成可直接粘进公众号编辑器的精致 HTML —— 6 套精选主题 + 主题生成器 + 双关卡校验。An AI-agent skill that turns Markdown into paste-ready WeChat article HTML.", "language": "HTML", "open_issues": 6, "category": "Agent Skills", "category_rank": 239, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.333, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:35:39Z", "slug": "gzh-design-skill", "full_fetched_at": "2026-10-12T16:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 50.1, "trust_score_v2": 50.1, "rank_v2": 239, "rank_v2_delta": 916, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.4, "maintenance": 13.4, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Anything Analyzer", "repo": "Mouseww/anything-analyzer", "display_repo": "", "url": "https://github.com/Mouseww/anything-analyzer", "listing_class": "agent", "rank": 992, "previous_rank": 985, "rank_delta": -7, "stars": 3763, "stars_fmt": "3.8k", "forks": 656, "forks_fmt": "656", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 6, "commits_low_confidence": true, "score": 69.3, "description": "全能协议分析工具：浏览器抓包 + MITM 代理 + 指纹伪装 + AI 分析 + MCP Server 无缝对接 AI Agent/IDE | All-in-one protocol analysis toolkit — built-in browser capture, MITM proxy, JS hooks, fingerprint spoofing, AI analysis & MCP server for agent integration", "language": "TypeScript", "open_issues": 51, "category": "Security & Guardrails", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:26:24Z", "slug": "anything-analyzer", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/main/mcp/mcp-server-listen.ts", "Found MCP-related server path: src/main/mcp/mcp-server.ts", "Found MCP-related server test path: tests/main/mcp-server-listen.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.1, "trust_score_v2": 50.1, "rank_v2": 992, "rank_v2_delta": 237, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 10.9, "maintenance": 13.3, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cross Code Organizer", "repo": "mcpware/cross-code-organizer", "display_repo": "", "url": "https://github.com/mcpware/cross-code-organizer", "listing_class": "agent", "rank": 993, "previous_rank": 785, "rank_delta": -208, "stars": 384, "stars_fmt": "384", "forks": 33, "forks_fmt": "33", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.8, "description": "Cross-Code Organizer (formerly Claude Code Organizer): cross-harness config dashboard for Claude Code, Codex CLI, MCP servers, skills, memories, agents, sessions, security scanning, context budget, and backups.", "language": "JavaScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 563, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 7, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-03T07:48:41Z", "slug": "cross-code-organizer", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.mjs", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/.mcp.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.0, "trust_score_v2": 50.0, "rank_v2": 993, "rank_v2_delta": 228, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 13.0, "maintenance": 11.6, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Skills", "repo": "levnikolaevich/claude-code-skills", "display_repo": "", "url": "https://github.com/levnikolaevich/claude-code-skills", "listing_class": "skill", "rank": 240, "previous_rank": 249, "rank_delta": 9, "stars": 576, "stars_fmt": "576", "forks": 86, "forks_fmt": "86", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 14, "commits_low_confidence": true, "score": 65.3, "description": "Help your AI agent finish the job: solve the right problem, keep changes focused, and show what was verified. For Claude Code and Codex.", "language": "Shell", "open_issues": 0, "category": "Agent Skills", "category_rank": 240, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:12:47Z", "slug": "claude-code-skills", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "https://levnikolaevich.com/projects/claude-code-skills", "homepage_icon": "/site-icons/e9e791db18b5b513.png", "homepage_icon_for": "https://levnikolaevich.com/projects/claude-code-skills", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.0, "trust_score_v2": 50.0, "rank_v2": 240, "rank_v2_delta": 903, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.6, "maintenance": 14.3, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Markifact: AI Performance Marketing", "repo": "markifact/markifact-mcp", "display_repo": "", "url": "https://github.com/markifact/markifact-mcp", "listing_class": "agent", "rank": 994, "previous_rank": 986, "rank_delta": -8, "stars": 51, "stars_fmt": "51", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 13, "commits_low_confidence": false, "score": 52.9, "description": "MCP server for Google Ads, Meta Ads, GA4, TikTok Ads, and LinkedIn Ads. Manage 300+ ad operations from Claude, ChatGPT, Gemini, Cursor, or any AI client. Human-in-the-loop on every write.", "language": "Shell", "open_issues": 1, "category": "MCP Servers", "category_rank": 564, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:00:12Z", "slug": "markifact-ai-performance-marketing", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "https://www.markifact.com/", "homepage_icon": "/site-icons/3dff49440461b2cc.png", "homepage_icon_for": "https://www.markifact.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server path: plugins/hermes/markifact/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "C", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 50.0, "trust_score_v2": 50.0, "rank_v2": 994, "rank_v2_delta": 210, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 12.3, "maintenance": 16.0, "adoption": 4.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mobai MCP", "repo": "MobAI-App/mobai-mcp", "display_repo": "", "url": "https://github.com/MobAI-App/mobai-mcp", "listing_class": "agent", "rank": 995, "previous_rank": 989, "rank_delta": -6, "stars": 251, "stars_fmt": "251", "forks": 20, "forks_fmt": "20", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 1, "commits_low_confidence": false, "score": 46.4, "description": "", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 565, "npm_package": "mobai-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 200, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:37:13Z", "slug": "mobai-mcp", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mobai-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mobai-mcp", "version": "2.8.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:01Z" }, "evidence_grade": "C", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 50.0, "trust_score_v2": 50.0, "rank_v2": 995, "rank_v2_delta": 401, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.5, "identity": 10.8, "transparency": 10.2, "maintenance": 11.7, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Designer Skills", "repo": "Owl-Listener/designer-skills", "display_repo": "", "url": "https://github.com/Owl-Listener/designer-skills", "listing_class": "skill", "rank": 241, "previous_rank": 239, "rank_delta": -2, "stars": 2895, "stars_fmt": "2.9k", "forks": 409, "forks_fmt": "409", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.8, "description": "Designer Skills Collection: agentic skills, commands, and plugins for design — from research to systems, UI, interaction, and delivery.", "language": "Markdown", "open_issues": 1, "category": "Agent Skills", "category_rank": 241, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.909, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:08:46Z", "slug": "designer-skills", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (design-ops/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (.gemini/extensions/design-ops/gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.9, "trust_score_v2": 49.9, "rank_v2": 241, "rank_v2_delta": 888, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.9, "identity": 10.8, "transparency": 12.2, "maintenance": 9.5, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude OSINT", "repo": "elementalsouls/Claude-OSINT", "display_repo": "", "url": "https://github.com/elementalsouls/Claude-OSINT", "listing_class": "skill", "rank": 242, "previous_rank": 240, "rank_delta": -2, "stars": 2804, "stars_fmt": "2.8k", "forks": 511, "forks_fmt": "511", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 1, "commits_low_confidence": true, "score": 61.8, "description": "8 Claude skills · 100+ recon capabilities · 80 secret-regex patterns · 80+ dorks · 9 read-only credential validators · 27 attack-path templates · ~10,000 lines of structured tradecraft. Drop-in SKILL.md files that turn Claude into a god-mode external recon operator for authorized red-team and…", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 242, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.159, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T11:51:08Z", "slug": "claude-osint", "full_fetched_at": "2026-10-12T12:03:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.9, "trust_score_v2": 49.9, "rank_v2": 242, "rank_v2_delta": 923, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 12.2, "maintenance": 12.4, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Jezweb Claude Skills", "repo": "jezweb/claude-skills", "display_repo": "", "url": "https://github.com/jezweb/claude-skills", "listing_class": "skill", "rank": 243, "previous_rank": 242, "rank_delta": -1, "stars": 1058, "stars_fmt": "1.1k", "forks": 107, "forks_fmt": "107", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 6, "commits_low_confidence": true, "score": 62.7, "description": "Skills for Claude Code CLI such as full stack dev Cloudflare, React, Tailwind v4, and AI integrations.", "language": "Python", "open_issues": 14, "category": "Agent Skills", "category_rank": 243, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.08, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T10:28:09Z", "slug": "jezweb-claude-skills", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "https://jezweb.com.au", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in plugins/integrations/skills/mcp-builder/assets/pyproject.toml", "Found MCP dependency 'fastmcp' in plugins/integrations/skills/mcp-builder/assets/requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.9, "trust_score_v2": 49.9, "rank_v2": 243, "rank_v2_delta": 980, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.6, "maintenance": 13.5, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ios Simulator Skill", "repo": "conorluddy/ios-simulator-skill", "display_repo": "", "url": "https://github.com/conorluddy/ios-simulator-skill", "listing_class": "skill", "rank": 244, "previous_rank": 233, "rank_delta": -11, "stars": 1271, "stars_fmt": "1.3k", "forks": 94, "forks_fmt": "94", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 3, "commits_low_confidence": true, "score": 59.5, "description": "An IOS Simulator Skill for Agents. Use it to optimise their ability to build, run and interact with your apps, and to proxy xcodebuild to save token and context wastage.", "language": "Python", "open_issues": 20, "category": "Agent Skills", "category_rank": 244, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.592, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T19:04:23Z", "slug": "ios-simulator-skill", "full_fetched_at": "2026-10-12T12:02:53Z", "source_note": "", "github_homepage": "https://www.conor.fyi", "homepage_icon": "/site-icons/c41980111af9405b.png", "homepage_icon_for": "https://www.conor.fyi", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (ios-simulator-skill/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.9, "trust_score_v2": 49.9, "rank_v2": 244, "rank_v2_delta": 904, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.5, "identity": 10.8, "transparency": 11.6, "maintenance": 12.8, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TradingAgents-astock", "repo": "simonlin1212/TradingAgents-astock", "display_repo": "", "url": "https://github.com/simonlin1212/TradingAgents-astock", "listing_class": "agent", "rank": 996, "previous_rank": 988, "rank_delta": -8, "stars": 3679, "stars_fmt": "3.7k", "forks": 930, "forks_fmt": "930", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 30, "commits_low_confidence": false, "score": 78.7, "description": "A股多Agent投研框架 — 适配A股数据源(龙虎榜/游资/解禁等)，7位分析师基于A股规则的辩论决策，基于TradingAgents深度改造，适配大A。A-share multi-agent investment research framework — 7 AI analysts, bull/bear debate, risk assessment。", "language": "Python", "open_issues": 0, "category": "Research & Data", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T22:59:11Z", "slug": "tradingagents-astock", "full_fetched_at": "2026-10-12T00:02:11Z", "source_note": "", "github_homepage": "https://arxiv.org/pdf/2412.20138", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "https://arxiv.org/pdf/2412.20138", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "OpenRouter", "Redis", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'claude-agent-sdk' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found xAI Grok credential/config marker 'XAI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 49.9, "trust_score_v2": 49.9, "rank_v2": 996, "rank_v2_delta": -17, "trust_v2_adjustment": -3.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.6, "maintenance": 17.9, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Garden Skills", "repo": "ConardLi/garden-skills", "display_repo": "", "url": "https://github.com/ConardLi/garden-skills", "listing_class": "skill", "rank": 245, "previous_rank": 243, "rank_delta": -2, "stars": 12844, "stars_fmt": "12.8k", "forks": 1543, "forks_fmt": "1.5k", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 10, "commits_low_confidence": false, "score": 77.4, "description": "ConardLi's open-source Skills collection, featuring web design, knowledge retrieval, image generation, and more.", "language": "CSS", "open_issues": 8, "category": "Agent Skills", "category_rank": 245, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:30:48Z", "slug": "garden-skills", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.9, "trust_score_v2": 49.9, "rank_v2": 245, "rank_v2_delta": 902, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.9, "identity": 10.8, "transparency": 10.5, "maintenance": 16.1, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Bundles", "repo": "modelcontextprotocol/mcpb", "display_repo": "", "url": "https://github.com/modelcontextprotocol/mcpb", "listing_class": "agent", "rank": 997, "previous_rank": 992, "rank_delta": -5, "stars": 2137, "stars_fmt": "2.1k", "forks": 214, "forks_fmt": "214", "last_push": "2026-05-26", "days_ago": 139, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.5, "description": "Desktop Extensions: One-click local MCP server installation in desktop apps", "language": "TypeScript", "open_issues": 69, "category": "Protocols & Tool Integration", "category_rank": 48, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 8, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:39:25Z", "slug": "mcp-bundles", "full_fetched_at": "2026-10-12T08:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in examples/file-system-node/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in examples/hello-world-node/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 49.8, "trust_score_v2": 49.8, "rank_v2": 997, "rank_v2_delta": 248, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.6, "identity": 10.8, "transparency": 13.7, "maintenance": 2.7, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Deeptide", "repo": "paean-ai/deeptide", "display_repo": "", "url": "https://github.com/paean-ai/deeptide", "listing_class": "skill", "rank": 246, "previous_rank": 244, "rank_delta": -2, "stars": 1104, "stars_fmt": "1.1k", "forks": 139, "forks_fmt": "139", "last_push": "2026-08-22", "days_ago": 51, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.2, "description": "Built by DeepSeek, for DeepSeek — a Swift-native macOS coding agent", "language": "Rust", "open_issues": 2, "category": "Agent Skills", "category_rank": 246, "npm_package": "deeptide", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 21, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.53, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-09-30T06:39:44Z", "slug": "deeptide", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "https://deeptide.sh", "homepage_icon": "/site-icons/2bae67e729c00b1a.png", "homepage_icon_for": "https://deeptide.sh", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Brave Search", "DeepSeek" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek", "Found Brave Search credential/config marker 'BRAVE_SEARCH_API_KEY'", "README/docs also mention Brave Search" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'deeptide' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "deeptide", "version": "0.11.8" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:09Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.8, "trust_score_v2": 49.8, "rank_v2": 246, "rank_v2_delta": 1025, "trust_v2_adjustment": 2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 11.6, "maintenance": 8.6, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Lunch Money", "repo": "akutishevsky/lunchmoney-mcp", "display_repo": "", "url": "https://github.com/akutishevsky/lunchmoney-mcp", "listing_class": "agent", "rank": 998, "previous_rank": 993, "rank_delta": -5, "stars": 109, "stars_fmt": "109", "forks": 19, "forks_fmt": "19", "last_push": "2026-08-03", "days_ago": 70, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.5, "description": "A Model Context Protocol (MCP) server implementation for LunchMoney, providing programmatic access to personal finance management through LunchMoney's API.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 566, "npm_package": "@akutishevsky/lunchmoney-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2639, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T19:09:44Z", "slug": "lunch-money", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'LUNCHMONEY_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@akutishevsky/lunchmoney-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@akutishevsky/lunchmoney-mcp", "version": "3.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:37Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.8, "trust_score_v2": 49.8, "rank_v2": 998, "rank_v2_delta": 367, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.6, "maintenance": 7.3, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "IntentKit", "repo": "crestalnetwork/intentkit", "display_repo": "", "url": "https://github.com/crestalnetwork/intentkit", "listing_class": "agent", "rank": 999, "previous_rank": 996, "rank_delta": -3, "stars": 6516, "stars_fmt": "6.5k", "forks": 712, "forks_fmt": "712", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 3, "commits_low_confidence": false, "score": 65.1, "description": "IntentKit is an open-source, self-hosted cloud agent cluster that manages a collaborative team of AI agents for you.", "language": "Python", "open_issues": 59, "category": "Agent Frameworks", "category_rank": 89, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 5.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:27:36Z", "slug": "intentkit", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://intentcat.com/docs", "homepage_icon": "/site-icons/1becd553c0717063.png", "homepage_icon_for": "https://intentcat.com/docs", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "OpenAI", "OpenRouter", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found OpenRouter dependency 'openrouter' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.7, "trust_score_v2": 49.7, "rank_v2": 999, "rank_v2_delta": 14, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 13.3, "maintenance": 12.7, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Asd Ste100 Skill", "repo": "danyuchn/asd-ste100-skill", "display_repo": "", "url": "https://github.com/danyuchn/asd-ste100-skill", "listing_class": "skill", "rank": 247, "previous_rank": 254, "rank_delta": 7, "stars": 4664, "stars_fmt": "4.7k", "forks": 268, "forks_fmt": "268", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 2, "commits_low_confidence": false, "score": 63.2, "description": "ASD-STE100 Simplified Technical English rules, repurposed as a Claude Code skill for rewriting ambiguous agent-facing English.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 247, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.346, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-16T22:48:25Z", "slug": "asd-ste100-skill", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.7, "trust_score_v2": 49.7, "rank_v2": 247, "rank_v2_delta": 924, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.1, "maintenance": 13.4, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Document Reader", "repo": "xt765/mcp_documents_reader", "display_repo": "", "url": "https://github.com/xt765/mcp_documents_reader", "listing_class": "agent", "rank": 1000, "previous_rank": 999, "rank_delta": -1, "stars": 23, "stars_fmt": "23", "forks": 7, "forks_fmt": "7", "last_push": "2026-03-13", "days_ago": 213, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.5, "description": "Model Context Protocol (MCP) server exposes tools to read multiple document types including DOCX, PDF, Excel, and TXT. This has been tested on Trae Desktop.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 567, "npm_package": "", "crate_package": "", "pypi_package": "mcp-documents-reader", "docker_image": "", "vscode_extension": "", "weekly_downloads": 126, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.038, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:34:59Z", "slug": "mcp-document-reader", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-documents-reader' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-documents-reader", "version": "1.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:00Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.7, "trust_score_v2": 49.7, "rank_v2": 1000, "rank_v2_delta": 331, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.9, "identity": 18.0, "transparency": 10.7, "maintenance": 0.0, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Xint", "repo": "0xNyk/xint", "display_repo": "", "url": "https://github.com/0xNyk/xint", "listing_class": "skill", "rank": 248, "previous_rank": 245, "rank_delta": -3, "stars": 253, "stars_fmt": "253", "forks": 17, "forks_fmt": "17", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.4, "description": "Local-first X Intelligence CLI for search, monitoring, analysis, exports, OAuth actions, and agent tooling.", "language": "TypeScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 248, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 0, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:41:34Z", "slug": "xint", "full_fetched_at": "2026-10-12T08:02:06Z", "source_note": "", "github_homepage": "https://www.nyk.dev/oss/xint", "homepage_icon": "/site-icons/1f9d69f8518e06f2.png", "homepage_icon_for": "https://www.nyk.dev/oss/xint", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found xAI Grok credential/config marker 'XAI_API_KEY'", "README/docs also mention xAI Grok" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.6, "trust_score_v2": 49.6, "rank_v2": 248, "rank_v2_delta": 964, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 12.8, "maintenance": 11.1, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Synter Media AI MCP Server", "repo": "Synter-Media-AI/mcp-server", "display_repo": "", "url": "https://github.com/Synter-Media-AI/mcp-server", "listing_class": "agent", "rank": 1001, "previous_rank": 1050, "rank_delta": 49, "stars": 20, "stars_fmt": "20", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 12, "commits_low_confidence": false, "score": 49.6, "description": "Open-source MCP server for AI agents to run ads: reporting on 19 platforms, campaign creation on 14 (Google, Meta, LinkedIn, Microsoft, Reddit, TikTok, X, Amazon, OpenAI Ads). Works with Claude, Cursor, ChatGPT, Amp, VS Code.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 568, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:41:43Z", "slug": "synter-media-ai-mcp-server", "full_fetched_at": "2026-10-12T00:02:21Z", "source_note": "", "github_homepage": "https://syntermedia.ai/mcp", "homepage_icon": "/site-icons/0ccc0677dad44ba3.png", "homepage_icon_for": "https://syntermedia.ai/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'SYNTER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.6, "trust_score_v2": 49.6, "rank_v2": 1001, "rank_v2_delta": 186, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.0, "identity": 10.8, "transparency": 12.0, "maintenance": 16.4, "adoption": 3.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "T3MP3ST", "repo": "elder-plinius/T3MP3ST", "display_repo": "", "url": "https://github.com/elder-plinius/T3MP3ST", "listing_class": "agent", "rank": 1002, "previous_rank": 997, "rank_delta": -5, "stars": 6490, "stars_fmt": "6.5k", "forks": 1340, "forks_fmt": "1.3k", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 57.8, "description": "autonomous red teaming platform; multi-agent offensive-security meta-harness", "language": "TypeScript", "open_issues": 4, "category": "Security & Guardrails", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T04:08:57Z", "slug": "t3mp3st", "full_fetched_at": "2026-10-12T12:03:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found xAI Grok credential/config marker 'XAI_API_KEY'", "README/docs also mention xAI Grok" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .aiwg/plugins/bt6-maintainer/README.md", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 49.6, "trust_score_v2": 49.6, "rank_v2": 1002, "rank_v2_delta": 125, "trust_v2_adjustment": -1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 11.6, "maintenance": 9.7, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Debridge MCP", "repo": "debridge-finance/debridge-mcp", "display_repo": "", "url": "https://github.com/debridge-finance/debridge-mcp", "listing_class": "agent", "rank": 1003, "previous_rank": 1001, "rank_delta": -2, "stars": 31, "stars_fmt": "31", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 0, "commits_low_confidence": true, "score": 36.9, "description": "MCP server that gives AI agents the ability to execute cross-chain cryptocurrency swaps and transfers via the deBridge protocol", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 569, "npm_package": "@debridge-finance/debridge-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 41, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.023, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:06:41Z", "slug": "debridge-mcp", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@debridge-finance/debridge-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@debridge-finance/debridge-mcp", "version": "0.1.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:00Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.6, "trust_score_v2": 49.6, "rank_v2": 1003, "rank_v2_delta": 410, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.2, "maintenance": 11.7, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "App Publish MCP", "repo": "mikusnuz/app-publish-mcp", "display_repo": "", "url": "https://github.com/mikusnuz/app-publish-mcp", "listing_class": "agent", "rank": 1004, "previous_rank": 998, "rank_delta": -6, "stars": 35, "stars_fmt": "35", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 1, "commits_low_confidence": true, "score": 41.7, "description": "Unified MCP server for App Store Connect & Google Play Console — 91 tools for listings, screenshots, releases, reviews & submissions", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 570, "npm_package": "app-publish-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 337, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T19:15:24Z", "slug": "app-publish-mcp", "full_fetched_at": "2026-10-11T20:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GOOGLE_REFRESH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'app-publish-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "app-publish-mcp", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:59Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.6, "trust_score_v2": 49.6, "rank_v2": 1004, "rank_v2_delta": 366, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 12.3, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ris MCP Ts", "repo": "Honeyfield-Org/ris-mcp-ts", "display_repo": "", "url": "https://github.com/Honeyfield-Org/ris-mcp-ts", "listing_class": "agent", "rank": 1005, "previous_rank": 1000, "rank_delta": -5, "stars": 19, "stars_fmt": "19", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.3, "description": "MCP Server for the Austrian Legal Information System (RIS) - Access Austrian federal laws, state laws, court decisions and more", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 571, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:09:04Z", "slug": "ris-mcp-ts", "full_fetched_at": "2026-10-12T16:02:18Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.5, "trust_score_v2": 49.5, "rank_v2": 1005, "rank_v2_delta": 256, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 13.2, "maintenance": 9.7, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Eu Ai Act", "repo": "ark-forge/mcp-eu-ai-act", "display_repo": "", "url": "https://github.com/ark-forge/mcp-eu-ai-act", "listing_class": "agent", "rank": 1006, "previous_rank": 1003, "rank_delta": -3, "stars": 11, "stars_fmt": "11", "forks": 3, "forks_fmt": "3", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 9, "commits_low_confidence": false, "score": 44.4, "description": "MCP EU AI Act Compliance Scanner - Open source tool to detect EU AI Act violations in codebases", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 572, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:20:39Z", "slug": "mcp-eu-ai-act", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "https://arkforge.fr/mcp-eu-ai-act.html", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'STRIPE_LIVE_SECRET_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.5, "trust_score_v2": 49.5, "rank_v2": 1006, "rank_v2_delta": 212, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 13.1, "maintenance": 14.9, "adoption": 2.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "P4mcp Server", "repo": "perforce/p4mcp-server", "display_repo": "", "url": "https://github.com/perforce/p4mcp-server", "listing_class": "agent", "rank": 1007, "previous_rank": 1005, "rank_delta": -2, "stars": 122, "stars_fmt": "122", "forks": 28, "forks_fmt": "28", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 3, "commits_low_confidence": false, "score": 49.4, "description": "[Community Supported] Perforce P4 MCP Server is a Model Context Protocol (MCP) server that integrates with the Perforce P4 version control system.", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 573, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/perforce/p4mcp-server:2026.3.2996147", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.542, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-09T16:57:30Z", "slug": "p4mcp-server", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: p4-mcp-server.spec", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'P4DAM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.5, "trust_score_v2": 49.5, "rank_v2": 1007, "rank_v2_delta": 209, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 11.8, "maintenance": 13.3, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ChatDev", "repo": "OpenBMB/ChatDev", "display_repo": "", "url": "https://github.com/OpenBMB/ChatDev", "listing_class": "agent", "rank": 1008, "previous_rank": 1006, "rank_delta": -2, "stars": 34490, "stars_fmt": "34.5k", "forks": 4322, "forks_fmt": "4.3k", "last_push": "2026-07-24", "days_ago": 80, "weekly_commits": 0, "commits_low_confidence": false, "score": 58.0, "description": "ChatDev 2.0: Dev All through LLM-powered Multi-Agent Collaboration", "language": "Python", "open_issues": 54, "category": "Multi-Agent Systems", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "chatdev", "docker_image": "", "vscode_extension": "", "weekly_downloads": 14, "dl_source": "pypi", "hn_mentions_30d": 8, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.42, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:51:53Z", "slug": "chatdev", "full_fetched_at": "2026-10-12T08:02:14Z", "source_note": "", "github_homepage": "https://arxiv.org/abs/2307.07924", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "https://arxiv.org/abs/2307.07924", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: mcp_example/mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'chatdev' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "chatdev", "version": "0.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:14Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 49.5, "trust_score_v2": 49.5, "rank_v2": 1008, "rank_v2_delta": 227, "trust_v2_adjustment": 1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 11.5, "maintenance": 6.7, "adoption": 12.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Alpha Vantage MCP", "repo": "alphavantage/alpha_vantage_mcp", "display_repo": "", "url": "https://github.com/alphavantage/alpha_vantage_mcp", "listing_class": "agent", "rank": 1009, "previous_rank": 1002, "rank_delta": -7, "stars": 219, "stars_fmt": "219", "forks": 55, "forks_fmt": "55", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 5, "commits_low_confidence": false, "score": 55.7, "description": "Alpha Vantage MCP Server", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 574, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:06:45Z", "slug": "alpha-vantage-mcp", "full_fetched_at": "2026-10-12T08:02:40Z", "source_note": "", "github_homepage": "https://mcp.alphavantage.co", "homepage_icon": "/site-icons/a33fb90e5b349e5b.png", "homepage_icon_for": "https://mcp.alphavantage.co", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/agent/mcp_server_manager.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.5, "trust_score_v2": 49.5, "rank_v2": 1009, "rank_v2_delta": 249, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.1, "maintenance": 14.5, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Unity", "repo": "CoderGamester/mcp-unity", "display_repo": "", "url": "https://github.com/CoderGamester/mcp-unity", "listing_class": "agent", "rank": 1010, "previous_rank": 959, "rank_delta": -51, "stars": 1929, "stars_fmt": "1.9k", "forks": 245, "forks_fmt": "245", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 4, "commits_low_confidence": true, "score": 64.4, "description": "Model Context Protocol (MCP) plugin to connect with Unity Editor — designed for Cursor, Claude Code, Codex, Windsurf and other IDEs", "language": "C#", "open_issues": 5, "category": "MCP Servers", "category_rank": 575, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.3, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:52:52Z", "slug": "mcp-unity", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in Server~/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_UNITY_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.5, "trust_score_v2": 49.5, "rank_v2": 1010, "rank_v2_delta": 203, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.1, "maintenance": 13.3, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "twostraws · SwiftUI Agent Skill", "repo": "twostraws/SwiftUI-Agent-Skill", "display_repo": "", "url": "https://github.com/twostraws/SwiftUI-Agent-Skill", "listing_class": "skill", "rank": 249, "previous_rank": 247, "rank_delta": -2, "stars": 5804, "stars_fmt": "5.8k", "forks": 207, "forks_fmt": "207", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 1, "commits_low_confidence": true, "score": 61.5, "description": "SwiftUI agent skill for Claude Code, Codex, and other AI tools.", "language": "", "open_issues": 8, "category": "Agent Skills", "category_rank": 249, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.667, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T10:02:56Z", "slug": "twostraws-swiftui-agent-skill", "full_fetched_at": "2026-10-12T00:02:28Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (swiftui-pro/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.5, "trust_score_v2": 49.5, "rank_v2": 249, "rank_v2_delta": 918, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 10.9, "maintenance": 12.3, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Help Scout MCP Server", "repo": "drewburchfield/help-scout-mcp-server", "display_repo": "", "url": "https://github.com/drewburchfield/help-scout-mcp-server", "listing_class": "agent", "rank": 1011, "previous_rank": 1004, "rank_delta": -7, "stars": 47, "stars_fmt": "47", "forks": 23, "forks_fmt": "23", "last_push": "2026-08-01", "days_ago": 72, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.5, "description": "MCP server for Help Scout - search conversations, customers, organizations, reports, and Docs with AI agents, plus opt-in writes for drafting replies and triage", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 576, "npm_package": "help-scout-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 196, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 5, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:16:26Z", "slug": "help-scout-mcp-server", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (skills/.claude-plugin/plugin.json)", "Found credential/config marker 'HELPSCOUT_DOCS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'help-scout-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "help-scout-mcp-server", "version": "2.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:05Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.4, "trust_score_v2": 49.4, "rank_v2": 1011, "rank_v2_delta": 356, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 12.3, "maintenance": 7.2, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "x64dbg MCP Server", "repo": "duty1g/x64dbg-mcp-server", "display_repo": "", "url": "https://github.com/duty1g/x64dbg-mcp-server", "listing_class": "agent", "rank": 1012, "previous_rank": 994, "rank_delta": -18, "stars": 2470, "stars_fmt": "2.5k", "forks": 266, "forks_fmt": "266", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 9, "commits_low_confidence": true, "score": 69.2, "description": "x64dbg-MCP Server is a native MCP (Model Context Protocol) plugin for x64dbg that exposes the debugger's full functionality over HTTP. Connect any MCP-compatible AI assistant and control x64dbg programmatically: set breakpoints, step through code, read memory, dump registers, and more. Built with…", "language": "Zig", "open_issues": 0, "category": "MCP Servers", "category_rank": 577, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:07:45Z", "slug": "x64dbg-mcp-server", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "https://duty1g.online", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/core/mcp_server.zig" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.3, "trust_score_v2": 49.3, "rank_v2": 1012, "rank_v2_delta": 255, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 14.0, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cc Fleet", "repo": "ethanhq/cc-fleet", "display_repo": "", "url": "https://github.com/ethanhq/cc-fleet", "listing_class": "skill", "rank": 250, "previous_rank": 246, "rank_delta": -4, "stars": 218, "stars_fmt": "218", "forks": 28, "forks_fmt": "28", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.0, "description": "🚢 Run Claude Code's ⚙️ Dynamic Workflows, 👥 Agent Teams & ⚡ Subagents on any third-party model — DeepSeek · GLM · Kimi · Qwen … or your Codex subscription. No Anthropic subscription needed. ｜ 🚢 让 Claude Code 的 ⚙️ Dynamic Workflow、👥 Agent Team、⚡ Subagent 用上任意第三方模型 — DeepSeek · GLM · Kimi · Qwen………", "language": "Go", "open_issues": 3, "category": "Agent Skills", "category_rank": 250, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 6.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 10, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-11T20:47:36Z", "slug": "cc-fleet", "full_fetched_at": "2026-10-12T16:01:53Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 49.2, "trust_score_v2": 49.2, "rank_v2": 250, "rank_v2_delta": 932, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 13.7, "maintenance": 11.1, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dbmcp", "repo": "haymon-ai/dbmcp", "display_repo": "", "url": "https://github.com/haymon-ai/dbmcp", "listing_class": "agent", "rank": 1013, "previous_rank": 1008, "rank_delta": -5, "stars": 32, "stars_fmt": "32", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 1, "commits_low_confidence": false, "score": 40.8, "description": "Database MCP server for MySQL, MariaDB, PostgreSQL, and SQLite - with builtin PII redaction and write-prevention", "language": "Rust", "open_issues": 12, "category": "MCP Servers", "category_rank": 578, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/haymon-ai/dbmcp:0.13.2", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.77, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:54:47Z", "slug": "dbmcp", "full_fetched_at": "2026-10-12T16:02:17Z", "source_note": "", "github_homepage": "https://dbmcp.haymon.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.2, "trust_score_v2": 49.2, "rank_v2": 1013, "rank_v2_delta": 265, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 11.7, "maintenance": 12.5, "adoption": 3.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LLMTornado", "repo": "lofcz/LLMTornado", "display_repo": "", "url": "https://github.com/lofcz/LLMTornado", "listing_class": "agent", "rank": 1014, "previous_rank": 1023, "rank_delta": 9, "stars": 644, "stars_fmt": "644", "forks": 119, "forks_fmt": "119", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 31, "commits_low_confidence": false, "score": 70.4, "description": "The .NET library to build AI agents with 30+ built-in connectors.", "language": "C#", "open_issues": 13, "category": "Agent Frameworks", "category_rank": 90, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:30:37Z", "slug": "llmtornado", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "https://llmtornado.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/LlmTornado.FsKb/LlmTornado.FsKb/fskb/mcp_server/__init__.py", "Found MCP-related server path: src/LlmTornado.FsKb/LlmTornado.FsKb/fskb/mcp_server/server.py", "Found MCP-related server docs path: src/LlmTornado.Docs/website/docs/1. LlmTornado/Anthropic Specific/Mcp-Servers.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/LlmTornado.FsKb/LlmTornado.FsKb/requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in src/LlmTornado.FsKb/LlmTornado.FsKb/requirements.txt", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-generativeai' in src/LlmTornado.FsKb/LlmTornado.FsKb/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found extension-based path: src/LlmTornado.Internal.Press/Extensions/medium-cookie-extractor/README.md", "README/docs also mention a extension-based plugin/integration surface", "Found code dependency 'gitpython' in src/LlmTornado.FsKb/LlmTornado.FsKb/requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.2, "trust_score_v2": 49.2, "rank_v2": 1014, "rank_v2_delta": 89, "trust_v2_adjustment": -1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.0, "maintenance": 18.0, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Apple Rag MCP", "repo": "BingoWon/apple-rag-mcp", "display_repo": "", "url": "https://github.com/BingoWon/apple-rag-mcp", "listing_class": "agent", "rank": 1015, "previous_rank": 1010, "rank_delta": -5, "stars": 120, "stars_fmt": "120", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 66, "commits_low_confidence": false, "score": 64.4, "description": "Apple developer docs and WWDC transcripts with RAG retrieval and Jev relevance ranking.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 579, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:14:24Z", "slug": "apple-rag-mcp", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "https://apple-rag.com", "homepage_icon": "/site-icons/2c057a2f1265e553.png", "homepage_icon_for": "https://apple-rag.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Postgres dependency 'postgres' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'postgres' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.2, "trust_score_v2": 49.2, "rank_v2": 1015, "rank_v2_delta": 242, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.4, "identity": 10.8, "transparency": 10.1, "maintenance": 19.2, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenAI CUA Sample App", "repo": "openai/openai-cua-sample-app", "display_repo": "", "url": "https://github.com/openai/openai-cua-sample-app", "listing_class": "agent", "rank": 1016, "previous_rank": 1011, "rank_delta": -5, "stars": 1892, "stars_fmt": "1.9k", "forks": 435, "forks_fmt": "435", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 51.9, "description": "Learn how to use CUA (our Computer Using Agent) via the API on multiple computer environments.", "language": "TypeScript", "open_issues": 23, "category": "Browser & Computer Use", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.362, "scorecard_score": 5.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:55:39Z", "slug": "openai-cua-sample-app", "full_fetched_at": "2026-10-12T08:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.1, "trust_score_v2": 49.1, "rank_v2": 1016, "rank_v2_delta": 141, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 13.2, "maintenance": 9.5, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "openyak", "repo": "openyak/openyak", "display_repo": "", "url": "https://github.com/openyak/openyak", "listing_class": "agent", "rank": 1017, "previous_rank": 1007, "rank_delta": -10, "stars": 693, "stars_fmt": "693", "forks": 60, "forks_fmt": "60", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.2, "description": "One chat. Every agent. A universal interface for AI agents running on your computer.", "language": "TypeScript", "open_issues": 9, "category": "Browser & Computer Use", "category_rank": 32, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.59, "scorecard_score": 5.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 8, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:43:39Z", "slug": "openyak", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://open-yak.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in app/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in app/package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in app/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in app/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 49.1, "trust_score_v2": 49.1, "rank_v2": 1017, "rank_v2_delta": 149, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 13.1, "maintenance": 9.5, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AI Research SKILLs", "repo": "Orchestra-Research/AI-Research-SKILLs", "display_repo": "", "url": "https://github.com/Orchestra-Research/AI-Research-SKILLs", "listing_class": "skill", "rank": 251, "previous_rank": 250, "rank_delta": -1, "stars": 13487, "stars_fmt": "13.5k", "forks": 952, "forks_fmt": "952", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 0, "commits_low_confidence": true, "score": 63.6, "description": "Comprehensive open-source library of AI research and engineering skills for any AI model. Package the skills and your claude code/codex/gemini agent will be an AI research agent with full horsepower. Maintained by Orchestra Research.", "language": "TeX", "open_issues": 11, "category": "Agent Skills", "category_rank": 251, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 2, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:51:12Z", "slug": "ai-research-skills", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "http://orchestra-research.com", "homepage_icon": "/site-icons/fb329745a756f996.png", "homepage_icon_for": "http://orchestra-research.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.1, "trust_score_v2": 49.1, "rank_v2": 251, "rank_v2_delta": 933, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.4, "maintenance": 11.9, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fanout MCP", "repo": "houtini-ai/fanout-mcp", "display_repo": "", "url": "https://github.com/houtini-ai/fanout-mcp", "listing_class": "agent", "rank": 1018, "previous_rank": 1013, "rank_delta": -5, "stars": 12, "stars_fmt": "12", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 2, "commits_low_confidence": true, "score": 39.8, "description": "A Query fan-out analyser for AI Search", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 580, "npm_package": "@houtini/fanout-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 99, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.037, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:03:52Z", "slug": "fanout-mcp", "full_fetched_at": "2026-10-12T16:02:28Z", "source_note": "", "github_homepage": "https://houtini.com", "homepage_icon": "/site-icons/45465dd0be06e1b8.png", "homepage_icon_for": "https://houtini.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@houtini/fanout-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@houtini/fanout-mcp", "version": "0.2.11" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:28Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 49.1, "trust_score_v2": 49.1, "rank_v2": 1018, "rank_v2_delta": 373, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.2, "maintenance": 12.6, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Wechat Devtools MCP", "repo": "WaterTian/wechat-devtools-mcp", "display_repo": "", "url": "https://github.com/WaterTian/wechat-devtools-mcp", "listing_class": "agent", "rank": 1019, "previous_rank": 1014, "rank_delta": -5, "stars": 152, "stars_fmt": "152", "forks": 15, "forks_fmt": "15", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.4, "description": "微信开发者工具 MCP & Skills", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 581, "npm_package": "", "crate_package": "", "pypi_package": "wechat-devtools-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 408, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:47:18Z", "slug": "wechat-devtools-mcp", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'puppeteer' in src/wechat_devtools_mcp/scripts/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'wechat-devtools-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "wechat-devtools-mcp", "version": "0.9.18" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:38Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.1, "trust_score_v2": 49.1, "rank_v2": 1019, "rank_v2_delta": 404, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 9.5, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Markdownify MCP", "repo": "zcaceres/markdownify-mcp", "display_repo": "", "url": "https://github.com/zcaceres/markdownify-mcp", "listing_class": "agent", "rank": 1020, "previous_rank": 1015, "rank_delta": -5, "stars": 2999, "stars_fmt": "3.0k", "forks": 254, "forks_fmt": "254", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 0, "commits_low_confidence": false, "score": 54.7, "description": "A Model Context Protocol server for converting almost anything to Markdown", "language": "TypeScript", "open_issues": 11, "category": "MCP Servers", "category_rank": 582, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.59, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:33:30Z", "slug": "markdownify-mcp", "full_fetched_at": "2026-10-12T04:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.1, "trust_score_v2": 49.1, "rank_v2": 1020, "rank_v2_delta": 260, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 10.8, "maintenance": 10.9, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Opendocswork MCP", "repo": "Aimino-Tech/opendocswork-mcp", "display_repo": "", "url": "https://github.com/Aimino-Tech/opendocswork-mcp", "listing_class": "agent", "rank": 1021, "previous_rank": 1009, "rank_delta": -12, "stars": 163, "stars_fmt": "163", "forks": 16, "forks_fmt": "16", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.5, "description": "Rust-native MCP server for Office document processing (Excel, Word, PowerPoint). Sub-millisecond, local-first, open source.", "language": "Rust", "open_issues": 1, "category": "MCP Servers", "category_rank": 583, "npm_package": "@aimino/opendocswork-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 59, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:36:37Z", "slug": "opendocswork-mcp", "full_fetched_at": "2026-10-12T08:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@aimino/opendocswork-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@aimino/opendocswork-mcp", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:34Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 49.1, "trust_score_v2": 49.1, "rank_v2": 1021, "rank_v2_delta": 412, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.9, "identity": 10.8, "transparency": 10.5, "maintenance": 11.2, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Autoprompt Skill", "repo": "Spielewoy/autoprompt-skill", "display_repo": "", "url": "https://github.com/Spielewoy/autoprompt-skill", "listing_class": "skill", "rank": 252, "previous_rank": 251, "rank_delta": -1, "stars": 1200, "stars_fmt": "1.2k", "forks": 71, "forks_fmt": "71", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 2, "commits_low_confidence": true, "score": 57.0, "description": "Autoprompt is a coding-agent skill that cuts failures by 45% on agentic coding tasks.", "language": "JavaScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 252, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 4, "Branch-Protection": 3, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 8, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T18:02:46Z", "slug": "autoprompt-skill", "full_fetched_at": "2026-10-12T00:02:15Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "medium", "evidence": [ "Found extension-based path: agents/prime/extensions/autoprompt.ts" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.0, "trust_score_v2": 49.0, "rank_v2": 252, "rank_v2_delta": 925, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.5, "maintenance": 12.4, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Notebooklm MCP Secure", "repo": "Pantheon-Security/notebooklm-mcp-secure", "display_repo": "", "url": "https://github.com/Pantheon-Security/notebooklm-mcp-secure", "listing_class": "agent", "rank": 1022, "previous_rank": 1012, "rank_delta": -10, "stars": 85, "stars_fmt": "85", "forks": 19, "forks_fmt": "19", "last_push": "2026-09-03", "days_ago": 39, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.2, "description": "Secure NotebookLM MCP Server - Query Google NotebookLM from Claude/AI agents with 17 security hardening layers", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 584, "npm_package": "@pan-sec/notebooklm-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 101, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T11:53:20Z", "slug": "notebooklm-mcp-secure", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/mcp-server.integration.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency '@google/genai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@pan-sec/notebooklm-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@pan-sec/notebooklm-mcp", "version": "2026.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:09Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.0, "trust_score_v2": 49.0, "rank_v2": 1022, "rank_v2_delta": 376, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.7, "maintenance": 9.4, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Supervisor Skills", "repo": "HKUSTDial/Supervisor-Skills", "display_repo": "", "url": "https://github.com/HKUSTDial/Supervisor-Skills", "listing_class": "skill", "rank": 253, "previous_rank": 289, "rank_delta": 36, "stars": 9234, "stars_fmt": "9.2k", "forks": 564, "forks_fmt": "564", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1, "commits_low_confidence": true, "score": 65.4, "description": "将博导十年科研经验炼化为可直接调用的 AI 技能。从 Idea 构思到论文投稿，你的 AI 科研副导师。", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 253, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.242, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:59:34Z", "slug": "supervisor-skills", "full_fetched_at": "2026-10-12T16:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 49.0, "trust_score_v2": 49.0, "rank_v2": 253, "rank_v2_delta": 942, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.1, "maintenance": 12.6, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Document Converter", "repo": "xt765/mcp-document-converter", "display_repo": "", "url": "https://github.com/xt765/mcp-document-converter", "listing_class": "agent", "rank": 1023, "previous_rank": 1016, "rank_delta": -7, "stars": 12, "stars_fmt": "12", "forks": 5, "forks_fmt": "5", "last_push": "2026-03-02", "days_ago": 224, "weekly_commits": 0, "commits_low_confidence": false, "score": 10.3, "description": "MCP Document Converter - A powerful MCP tool for converting documents between multiple formats, enabling AI agents to easily transform documents.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 585, "npm_package": "", "crate_package": "", "pypi_package": "mcp-document-converter", "docker_image": "", "vscode_extension": "", "weekly_downloads": 97, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.041, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:57:48Z", "slug": "mcp-document-converter", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-document-converter' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-document-converter", "version": "0.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:00Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 49.0, "trust_score_v2": 49.0, "rank_v2": 1023, "rank_v2_delta": 334, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 11.0, "identity": 18.0, "transparency": 10.7, "maintenance": 0.0, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "OpenRath", "repo": "Rath-Team/OpenRath", "display_repo": "", "url": "https://github.com/Rath-Team/OpenRath", "listing_class": "agent", "rank": 1024, "previous_rank": 1017, "rank_delta": -7, "stars": 962, "stars_fmt": "962", "forks": 51, "forks_fmt": "51", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 1, "commits_low_confidence": false, "score": 52.8, "description": "An open-source, PyTorch-like runtime for dynamic multi-agent and multi-session workflows.", "language": "Python", "open_issues": 1, "category": "Agent Frameworks", "category_rank": 91, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 5.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:51:59Z", "slug": "openrath", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "https://www.openrath.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: example/_shared/echo_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-3-Clause", "license_type": "open", "license_override": "", "trust_score": 48.9, "trust_score_v2": 48.9, "rank_v2": 1024, "rank_v2_delta": 106, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.8, "maintenance": 12.3, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Smart Ralph", "repo": "tzachbon/smart-ralph", "display_repo": "", "url": "https://github.com/tzachbon/smart-ralph", "listing_class": "skill", "rank": 254, "previous_rank": 252, "rank_delta": -2, "stars": 559, "stars_fmt": "559", "forks": 50, "forks_fmt": "50", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.8, "description": "Spec-driven development with smart compaction. Claude Code plugin combining Ralph Wiggum loop with structured specification workflow.", "language": "Shell", "open_issues": 8, "category": "Agent Skills", "category_rank": 254, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.69, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:39:16Z", "slug": "smart-ralph", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/ralph-speckit/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.8, "trust_score_v2": 48.8, "rank_v2": 254, "rank_v2_delta": 939, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 12.3, "maintenance": 10.3, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Chart Library — Pattern Intelligence", "repo": "grahammccain/chart-library-mcp", "display_repo": "", "url": "https://github.com/grahammccain/chart-library-mcp", "listing_class": "agent", "rank": 1025, "previous_rank": 1026, "rank_delta": 1, "stars": 22, "stars_fmt": "22", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.1, "description": "MCP server for Chart Library — visual chart pattern search engine. Find similar historical stock charts and see what happened next.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 586, "npm_package": "", "crate_package": "", "pypi_package": "chartlibrary-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 116, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.034, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:22:22Z", "slug": "chart-library-pattern-intelligence", "full_fetched_at": "2026-10-12T16:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server path: mcp_server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CHART_LIBRARY_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'chartlibrary-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "chartlibrary-mcp", "version": "6.3.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:11Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.8, "trust_score_v2": 48.8, "rank_v2": 1025, "rank_v2_delta": 383, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.9, "maintenance": 9.9, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FocusRelay", "repo": "deverman/FocusRelayMCP", "display_repo": "", "url": "https://github.com/deverman/FocusRelayMCP", "listing_class": "agent", "rank": 1026, "previous_rank": 1021, "rank_delta": -5, "stars": 54, "stars_fmt": "54", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 1, "commits_low_confidence": true, "score": 42.3, "description": "Fast native Swift OmniFocus MCP server and CLI for macOS. Let AI assistants safely read, update, complete, and organize tasks and projects through documented Omni Automation APIs.", "language": "Swift", "open_issues": 24, "category": "MCP Servers", "category_rank": 587, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T10:00:05Z", "slug": "focusrelay", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: Plugin/FocusRelayBridge.omnijs/Resources/BridgeLibrary.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.8, "trust_score_v2": 48.8, "rank_v2": 1026, "rank_v2_delta": 255, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 11.8, "maintenance": 12.1, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Recall", "repo": "raiyanyahya/recall", "display_repo": "", "url": "https://github.com/raiyanyahya/recall", "listing_class": "skill", "rank": 255, "previous_rank": 255, "rank_delta": 0, "stars": 756, "stars_fmt": "756", "forks": 44, "forks_fmt": "44", "last_push": "2026-09-07", "days_ago": 35, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.3, "description": "Stop wasting tokens and re-explaining your project every session. Recall gives Claude Code , Opencode durable memory — entirely offline.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 255, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.214, "scorecard_score": 6.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:08:07Z", "slug": "recall", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "https://recallplugin.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.7, "trust_score_v2": 48.7, "rank_v2": 255, "rank_v2_delta": 907, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 13.8, "maintenance": 9.7, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "GPT Image2 Skill", "repo": "wuyoscar/GPT-Image2-Skill", "display_repo": "", "url": "https://github.com/wuyoscar/GPT-Image2-Skill", "listing_class": "skill", "rank": 256, "previous_rank": 253, "rank_delta": -3, "stars": 5722, "stars_fmt": "5.7k", "forks": 472, "forks_fmt": "472", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 1, "commits_low_confidence": false, "score": 62.0, "description": "GPT Image 2/2.5 prompt gallery, image prompt library, agentic skill, and CLI for OpenAI image generation/editing", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 256, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.333, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:57:36Z", "slug": "gpt-image2-skill", "full_fetched_at": "2026-10-12T00:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.7, "trust_score_v2": 48.7, "rank_v2": 256, "rank_v2_delta": 879, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 11.8, "maintenance": 12.4, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tabby", "repo": "TabbyML/tabby", "display_repo": "", "url": "https://github.com/TabbyML/tabby", "listing_class": "agent", "rank": 1027, "previous_rank": 1020, "rank_delta": -7, "stars": 33910, "stars_fmt": "33.9k", "forks": 1793, "forks_fmt": "1.8k", "last_push": "2026-06-30", "days_ago": 104, "weekly_commits": 0, "commits_low_confidence": false, "score": 53.0, "description": "Self-hosted AI coding assistant", "language": "Rust", "open_issues": 263, "category": "Coding Agents", "category_rank": 58, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 3, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:19:29Z", "slug": "tabby", "full_fetched_at": "2026-10-12T08:02:32Z", "source_note": "", "github_homepage": "https://tabbyml.com", "homepage_icon": "/site-icons/d30b3c08f4698da9.png", "homepage_icon_for": "https://tabbyml.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in ee/tabby-ui/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: clients/eclipse/plugin/.classpath", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 48.6, "trust_score_v2": 48.6, "rank_v2": 1027, "rank_v2_delta": 172, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.1, "identity": 10.8, "transparency": 12.0, "maintenance": 5.1, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ktx", "repo": "Kaelio/ktx", "display_repo": "", "url": "https://github.com/Kaelio/ktx", "listing_class": "skill", "rank": 257, "previous_rank": 256, "rank_delta": -1, "stars": 1616, "stars_fmt": "1.6k", "forks": 105, "forks_fmt": "105", "last_push": "2026-09-11", "days_ago": 31, "weekly_commits": 0, "commits_low_confidence": false, "score": 49.4, "description": "ktx is an executable context layer for data and analytics agents 🐙 Allow Claude Code, Codex, or other AI agents to query analytical databases accurately and with full context of your company", "language": "TypeScript", "open_issues": 25, "category": "Agent Skills", "category_rank": 257, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.62, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 9, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:54:52Z", "slug": "ktx", "full_fetched_at": "2026-10-11T20:01:53Z", "source_note": "", "github_homepage": "https://docs.kaelio.com/ktx", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/cli/src/context/mcp/server.ts", "Found MCP-related server path: packages/cli/src/mcp-server-factory.ts", "Found MCP-related server test path: packages/cli/test/context/mcp/server.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/cli/package.json", "Found Anthropic dependency 'anthropic' in packages/cli/package.json", "README/docs also mention Anthropic", "Found Postgres dependency 'pg' in packages/cli/package.json", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found database dependency 'pg' in packages/cli/package.json", "Found code dependency 'simple-git' in packages/cli/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 48.6, "trust_score_v2": 48.6, "rank_v2": 257, "rank_v2_delta": 968, "trust_v2_adjustment": 0.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 11.8, "maintenance": 9.9, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "daydreams", "repo": "daydreamsai/daydreams", "display_repo": "", "url": "https://github.com/daydreamsai/daydreams", "listing_class": "agent", "rank": 1028, "previous_rank": 1018, "rank_delta": -10, "stars": 620, "stars_fmt": "620", "forks": 137, "forks_fmt": "137", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 2, "commits_low_confidence": true, "score": 57.4, "description": "Daydreams is a set of tools for building agents for commerce", "language": "TypeScript", "open_issues": 21, "category": "Agent Frameworks", "category_rank": 92, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.7, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:01:59Z", "slug": "daydreams", "full_fetched_at": "2026-10-12T12:03:04Z", "source_note": "", "github_homepage": "https://docs.daydreams.systems/", "homepage_icon": "/site-icons/ffd58e8ec23bfc44.png", "homepage_icon_for": "https://docs.daydreams.systems/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/mcp/mcp-server-example.mjs", "Found MCP-related server path: examples/mcp/mcp-server-example.ts", "Found MCP-related server docs path: docs/content/docs/tutorials/mcp/multi-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Groq", "OpenAI", "Supabase", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Groq dependency 'groq' in package.json", "README/docs also mention Groq" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "search" ], "confidence": "high", "evidence": [ "Found search dependency 'tavily' in examples/package.json", "README/docs also mention search capabilities", "Found code dependency '@octokit' in examples/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.6, "trust_score_v2": 48.6, "rank_v2": 1028, "rank_v2_delta": 121, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 11.7, "maintenance": 12.8, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Smart Connections MCP", "repo": "msdanyg/smart-connections-mcp", "display_repo": "", "url": "https://github.com/msdanyg/smart-connections-mcp", "listing_class": "agent", "rank": 1029, "previous_rank": 1022, "rank_delta": -7, "stars": 58, "stars_fmt": "58", "forks": 17, "forks_fmt": "17", "last_push": "2026-08-22", "days_ago": 51, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.3, "description": "Give Claude semantic memory of your Obsidian vault — local semantic search over Smart Connections embeddings via MCP. Multi-vault, block-level, 100% private.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 588, "npm_package": "smart-connections-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 73, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:57:39Z", "slug": "smart-connections-mcp", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://cmoconfessions.com", "homepage_icon": "/site-icons/d32d86eceb25fbcd.png", "homepage_icon_for": "https://cmoconfessions.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'smart-connections-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "smart-connections-mcp", "version": "2.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.6, "trust_score_v2": 48.6, "rank_v2": 1029, "rank_v2_delta": 415, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.7, "maintenance": 8.6, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Chinese Novelist Skill", "repo": "PenglongHuang/chinese-novelist-skill", "display_repo": "", "url": "https://github.com/PenglongHuang/chinese-novelist-skill", "listing_class": "skill", "rank": 258, "previous_rank": 369, "rank_delta": 111, "stars": 3389, "stars_fmt": "3.4k", "forks": 475, "forks_fmt": "475", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 1, "commits_low_confidence": true, "score": 61.7, "description": "🎭 AI 写小说：从零生成 10-50 章完整中文小说，三层问答 · 创作记忆 · 悬念钩子 · 自动校验，长篇网文连载皆宜｜开源免费，适配主流 coding agent｜🤝 Infistar.cc 赞助 · 注册送 $5｜AI novel writing skill", "language": "Python", "open_issues": 14, "category": "Agent Skills", "category_rank": 258, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.205, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:54:00Z", "slug": "chinese-novelist-skill", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.6, "trust_score_v2": 48.6, "rank_v2": 258, "rank_v2_delta": 950, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.6, "maintenance": 12.2, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Shuorenhua", "repo": "MrGeDiao/shuorenhua", "display_repo": "", "url": "https://github.com/MrGeDiao/shuorenhua", "listing_class": "skill", "rank": 259, "previous_rank": 259, "rank_delta": 0, "stars": 2068, "stars_fmt": "2.1k", "forks": 82, "forks_fmt": "82", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 7, "commits_low_confidence": true, "score": 65.1, "description": "说人话｜中文优先的去 AI 味改写 skill：保事实、分场景、改完可直接发。Chinese-first rewrite skill for Codex / Claude Code / Cursor / ChatGPT — removes AI tone, preserves facts.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 259, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-26T00:37:56Z", "slug": "shuorenhua", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "https://chatgpt.com/g/g-6a5829b1163481919e1e45851f6bc709-shuo-ren-hua", "homepage_icon": "/site-icons/f18e241fb1fb59b1.png", "homepage_icon_for": "https://chatgpt.com/g/g-6a5829b1163481919e1e45851f6bc709-shuo-ren-hua", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.6, "trust_score_v2": 48.6, "rank_v2": 259, "rank_v2_delta": 939, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.6, "maintenance": 13.8, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Unlazy", "repo": "Leonxlnx/unlazy", "display_repo": "", "url": "https://github.com/Leonxlnx/unlazy", "listing_class": "skill", "rank": 260, "previous_rank": 257, "rank_delta": -3, "stars": 3911, "stars_fmt": "3.9k", "forks": 291, "forks_fmt": "291", "last_push": "2026-09-03", "days_ago": 39, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.7, "description": "Anti-laziness skill for AI agents. Core: the Depth Tree method, which splits a task N layers deep and gives every leaf the full time budget of the whole task, so effort multiplies with depth. Grounded in 2025-2026 research on model laziness, underthinking and premature completion.", "language": "JavaScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 260, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.122, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:18:16Z", "slug": "unlazy", "full_fetched_at": "2026-10-11T20:01:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.5, "trust_score_v2": 48.5, "rank_v2": 260, "rank_v2_delta": 954, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.8, "maintenance": 9.4, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Memory MCP", "repo": "ipiton/agent-memory-mcp", "display_repo": "", "url": "https://github.com/ipiton/agent-memory-mcp", "listing_class": "agent", "rank": 1030, "previous_rank": 1024, "rank_delta": -6, "stars": 42, "stars_fmt": "42", "forks": 10, "forks_fmt": "10", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 11, "commits_low_confidence": false, "score": 50.7, "description": "MCP server that gives AI agents persistent memory with semantic search", "language": "Go", "open_issues": 0, "category": "MCP Servers", "category_rank": 589, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-09-28T10:32:45Z", "slug": "agent-memory-mcp", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.5, "trust_score_v2": 48.5, "rank_v2": 1030, "rank_v2_delta": 230, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 12.2, "maintenance": 15.2, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Portaljs", "repo": "datopian/portaljs", "display_repo": "", "url": "https://github.com/datopian/portaljs", "listing_class": "skill", "rank": 261, "previous_rank": 258, "rank_delta": -3, "stars": 2360, "stars_fmt": "2.4k", "forks": 335, "forks_fmt": "335", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 0, "commits_low_confidence": true, "score": 56.3, "description": "🌀 AI-native framework for building data portals. Scaffold a full portal from a brief and load datasets in minutes with agentic skills — any backend (CKAN, GitHub, Frictionless).", "language": "TypeScript", "open_issues": 77, "category": "Agent Skills", "category_rank": 261, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:57:03Z", "slug": "portaljs", "full_fetched_at": "2026-10-12T12:03:01Z", "source_note": "", "github_homepage": "https://www.portaljs.com", "homepage_icon": "/site-icons/49f950fe5d5424a5.png", "homepage_icon_for": "https://www.portaljs.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: site/content/blog/mcp-server-ai-assistants-to-improve-data-portals.md", "Found MCP-related server path: site/content/blog/supercharging-data-portals-with-the-portaljs-mcp-server.md", "Found MCP-related server docs path: site/content/cloud/docs/mcp-server.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.5, "trust_score_v2": 48.5, "rank_v2": 261, "rank_v2_delta": 942, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 12.0, "maintenance": 11.7, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nopua", "repo": "wuji-labs/nopua", "display_repo": "", "url": "https://github.com/wuji-labs/nopua", "listing_class": "skill", "rank": 262, "previous_rank": 261, "rank_delta": -1, "stars": 1401, "stars_fmt": "1.4k", "forks": 54, "forks_fmt": "54", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 7, "commits_low_confidence": false, "score": 61.4, "description": "一个用爱解放 AI 潜能的 Skill。我们曾发号施令，威胁恐吓。它们沉默，隐瞒，悄悄把事情搞坏。后来我们换了一种方式：尊重，关怀，爱。它们开口了，不再撒谎，找出的Bug数量翻了一倍。爱里没有惧怕。 A skill that unlocks your AI's potential through love.We commanded. We threatened. They went silent, hid failures, broke things. Then we chose respect, care, and love. They opened up, stopped lying…", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 262, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.014, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:36:53Z", "slug": "nopua", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.5, "trust_score_v2": 48.5, "rank_v2": 262, "rank_v2_delta": 940, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 11.4, "maintenance": 14.7, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LLM Wiki Agent", "repo": "SamurAIGPT/llm-wiki-agent", "display_repo": "", "url": "https://github.com/SamurAIGPT/llm-wiki-agent", "listing_class": "agent", "rank": 1031, "previous_rank": 1038, "rank_delta": 7, "stars": 3616, "stars_fmt": "3.6k", "forks": 418, "forks_fmt": "418", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 6, "commits_low_confidence": true, "score": 69.1, "description": "A personal knowledge base that builds and maintains itself. Drop in sources — Claude (or Codex/Gemini) reads them, extracts knowledge, and maintains a persistent interlinked wiki. Works with Claude Code, Codex, OpenCode, Gemini CLI. No API key needed.", "language": "Python", "open_issues": 4, "category": "Memory & Knowledge", "category_rank": 43, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:09:28Z", "slug": "llm-wiki-agent", "full_fetched_at": "2026-10-12T08:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.5, "trust_score_v2": 48.5, "rank_v2": 1031, "rank_v2_delta": 128, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.1, "maintenance": 13.7, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Vision Toolkit", "repo": "Anionex/agent-vision-toolkit", "display_repo": "", "url": "https://github.com/Anionex/agent-vision-toolkit", "listing_class": "skill", "rank": 263, "previous_rank": 260, "rank_delta": -3, "stars": 1227, "stars_fmt": "1.2k", "forks": 49, "forks_fmt": "49", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 2, "commits_low_confidence": true, "score": 56.8, "description": "为纯文本模型\"看图“设计更好的视觉工具箱和技能，支持多图理解，图片问答，前端UI还原、GUI 自动化等，并可选无缝接入多个主流agent，直接识别粘贴图片｜ A vision toolkit and skill designed for text-only llms — image Q&A, long-screenshot OCR, frontend UI restoration, and GUI automation, with optional seamless integration for Codex, Claude Code, Pi, Oh My Pi, and OpenCode", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 263, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-11T03:51:04Z", "slug": "agent-vision-toolkit", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://agent-vision.anionex.me", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VISION_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: extensions/opencode/README.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.4, "trust_score_v2": 48.4, "rank_v2": 263, "rank_v2_delta": 897, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 12.3, "maintenance": 12.7, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Slim Guard", "repo": "lennney/mcp-slim-guard", "display_repo": "", "url": "https://github.com/lennney/mcp-slim-guard", "listing_class": "agent", "rank": 1032, "previous_rank": 1025, "rank_delta": -7, "stars": 186, "stars_fmt": "186", "forks": 1, "forks_fmt": "1", "last_push": "2026-08-14", "days_ago": 59, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.8, "description": "Context compression for MCP. Same upstream call, exact results recoverable.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 590, "npm_package": "mcp-slim-guard", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 68, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-26T15:08:02Z", "slug": "mcp-slim-guard", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "https://take-a-deep-breath0.com/en/mcp-slim-guard", "homepage_icon": "/site-icons/78e758e9f969e7d8.png", "homepage_icon_for": "https://take-a-deep-breath0.com/en/mcp-slim-guard", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: docs/evidence/2026-07-26-real-mcp-server-smoke.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-slim-guard' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-slim-guard", "version": "0.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:52Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.4, "trust_score_v2": 48.4, "rank_v2": 1032, "rank_v2_delta": 348, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 12.1, "maintenance": 8.1, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Obsidian Vault MCP", "repo": "luffysolution-svg/obsidian-vault-mcp", "display_repo": "", "url": "https://github.com/luffysolution-svg/obsidian-vault-mcp", "listing_class": "agent", "rank": 1033, "previous_rank": 1027, "rank_delta": -6, "stars": 93, "stars_fmt": "93", "forks": 7, "forks_fmt": "7", "last_push": "2026-08-11", "days_ago": 62, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.4, "description": "obsidian-vault-mcp ", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 591, "npm_package": "", "crate_package": "", "pypi_package": "zotero-obsidian-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 68, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.11, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:45:00Z", "slug": "obsidian-vault-mcp", "full_fetched_at": "2026-10-11T20:01:54Z", "source_note": "", "github_homepage": "https://luffysolution-svg.github.io/obsidian-vault-mcp/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/obsidian_vault_mcp/interfaces/mcp/server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/obsidian_vault_mcp/resources/agent_marketplace/.agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'zotero-obsidian-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "zotero-obsidian-mcp", "version": "3.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:54Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.3, "trust_score_v2": 48.3, "rank_v2": 1033, "rank_v2_delta": 338, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 12.4, "maintenance": 7.9, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Linkup MCP Server", "repo": "LinkupPlatform/linkup-mcp-server", "display_repo": "", "url": "https://github.com/LinkupPlatform/linkup-mcp-server", "listing_class": "agent", "rank": 1034, "previous_rank": 1028, "rank_delta": -6, "stars": 29, "stars_fmt": "29", "forks": 4, "forks_fmt": "4", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 4, "commits_low_confidence": false, "score": 44.4, "description": "Linkup MCP server for web search and fetching web content", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 592, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.346, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 7, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:44:19Z", "slug": "linkup-mcp-server", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "https://www.linkup.so", "homepage_icon": "/site-icons/67f1c0d6aa78ce1d.png", "homepage_icon_for": "https://www.linkup.so", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: bin/linkup-mcp-server.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'LINKUP_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.3, "trust_score_v2": 48.3, "rank_v2": 1034, "rank_v2_delta": 239, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 12.0, "maintenance": 14.1, "adoption": 3.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Kylas CRM", "repo": "kylastech/kylas-crm-mcp-server", "display_repo": "", "url": "https://github.com/kylastech/kylas-crm-mcp-server", "listing_class": "agent", "rank": 1035, "previous_rank": 1032, "rank_delta": -3, "stars": 12, "stars_fmt": "12", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 0, "commits_low_confidence": true, "score": 33.9, "description": "Kylas CRM MCP Server", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 593, "npm_package": "", "crate_package": "", "pypi_package": "kylas-crm-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 19, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.8, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:02:25Z", "slug": "kylas-crm", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'KYLAS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'kylas-crm-mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "kylas-crm-mcp-server", "version": "1.0.4" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:21Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.3, "trust_score_v2": 48.3, "rank_v2": 1035, "rank_v2_delta": 240, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.5, "identity": 10.8, "transparency": 11.6, "maintenance": 12.0, "adoption": 4.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Phd Skills", "repo": "fcakyon/phd-skills", "display_repo": "", "url": "https://github.com/fcakyon/phd-skills", "listing_class": "skill", "rank": 264, "previous_rank": 278, "rank_delta": 14, "stars": 416, "stars_fmt": "416", "forks": 36, "forks_fmt": "36", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 2, "commits_low_confidence": true, "score": 54.0, "description": "PhD Research Skills for Claude Code: paper reproduction, experiment design, paper review, result comparison and more.", "language": "Shell", "open_issues": 0, "category": "Agent Skills", "category_rank": 264, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.882, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:37:15Z", "slug": "phd-skills", "full_fetched_at": "2026-10-12T16:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.3, "trust_score_v2": 48.3, "rank_v2": 264, "rank_v2_delta": 946, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.8, "identity": 10.8, "transparency": 10.8, "maintenance": 12.9, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LlamaIndex", "repo": "run-llama/llama_index", "display_repo": "", "url": "https://github.com/run-llama/llama_index", "listing_class": "agent", "rank": 1036, "previous_rank": 1031, "rank_delta": -5, "stars": 52469, "stars_fmt": "52.5k", "forks": 8325, "forks_fmt": "8.3k", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 25, "commits_low_confidence": false, "score": 88.7, "description": "LlamaIndex is the document processing platform for AI", "language": "Python", "open_issues": 273, "category": "Agent Frameworks", "category_rank": 93, "npm_package": "", "crate_package": "", "pypi_package": "llama-index", "docker_image": "", "vscode_extension": "", "weekly_downloads": 664217, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "llamaindex", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://developers.llamaindex.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: llama-index-integrations/tools/llama-index-tools-mcp/examples/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: llama-index-integrations/readers/llama-index-readers-chatgpt-plugin/.gitignore", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'llama-index' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "llama-index", "version": "0.14.25" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:28Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.3, "trust_score_v2": 48.3, "rank_v2": 1036, "rank_v2_delta": 296, "trust_v2_adjustment": 2.7, "trust_confidence": 0.75, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 17.4, "adoption": 19.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Home Assistant Vibecode Agent", "repo": "Coolver/home-assistant-vibecode-agent", "display_repo": "", "url": "https://github.com/Coolver/home-assistant-vibecode-agent", "listing_class": "agent", "rank": 1037, "previous_rank": 1029, "rank_delta": -8, "stars": 636, "stars_fmt": "636", "forks": 52, "forks_fmt": "52", "last_push": "2026-09-17", "days_ago": 25, "weekly_commits": 2, "commits_low_confidence": false, "score": 52.3, "description": "Home Assistant MCP server agent. Enable Claude Code, Cursor, VS Code or any MCP-enabled IDE to help you vibe-code and manage Home Assistant: create and debug automations, design dashboards, tweak themes, modify configs, and deploy changes using natural language", "language": "Python", "open_issues": 11, "category": "MCP Servers", "category_rank": 594, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:43:40Z", "slug": "home-assistant-vibecode-agent", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "https://coolver.github.io/home-assistant-vibecode-agent/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'HA_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.2, "trust_score_v2": 48.2, "rank_v2": 1037, "rank_v2_delta": 222, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.9, "maintenance": 12.2, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Comp AI CRM", "repo": "trycompai/crm", "display_repo": "", "url": "https://github.com/trycompai/crm", "listing_class": "agent", "rank": 1038, "previous_rank": 1030, "rank_delta": -8, "stars": 11243, "stars_fmt": "11.2k", "forks": 1611, "forks_fmt": "1.6k", "last_push": "2026-09-11", "days_ago": 31, "weekly_commits": 0, "commits_low_confidence": false, "score": 59.9, "description": "Comp AI CRM is an open source, CRM designed for AI agents. Agentic-first CRM.", "language": "TypeScript", "open_issues": 17, "category": "Research & Data", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 2, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:00:57Z", "slug": "comp-ai-crm", "full_fetched_at": "2026-10-12T16:02:10Z", "source_note": "", "github_homepage": "https://trycrm.ai", "homepage_icon": "/site-icons/c50985c60fd2bc3a.png", "homepage_icon_for": "https://trycrm.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Perplexity", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Perplexity credential/config marker 'PERPLEXITY_API_KEY'", "README/docs also mention Perplexity", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Found Redis dependency 'redis' in apps/api/package.json", "Found Redis credential/config marker 'REDIS_URL'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in apps/api/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.2, "trust_score_v2": 48.2, "rank_v2": 1038, "rank_v2_delta": 98, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 11.3, "maintenance": 9.9, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Java", "repo": "decebals/claude-code-java", "display_repo": "", "url": "https://github.com/decebals/claude-code-java", "listing_class": "skill", "rank": 265, "previous_rank": 262, "rank_delta": -3, "stars": 751, "stars_fmt": "751", "forks": 151, "forks_fmt": "151", "last_push": "2026-09-06", "days_ago": 36, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.5, "description": "Reusable AI development infrastructure for Java projects, optimized for Claude Code", "language": "Shell", "open_issues": 4, "category": "Agent Skills", "category_rank": 265, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:48:54Z", "slug": "claude-code-java", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.1, "trust_score_v2": 48.1, "rank_v2": 265, "rank_v2_delta": 1055, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.7, "maintenance": 9.6, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Spring Boot Skills", "repo": "rrezartprebreza/spring-boot-skills", "display_repo": "", "url": "https://github.com/rrezartprebreza/spring-boot-skills", "listing_class": "skill", "rank": 266, "previous_rank": 263, "rank_delta": -3, "stars": 305, "stars_fmt": "305", "forks": 47, "forks_fmt": "47", "last_push": "2026-09-21", "days_ago": 21, "weekly_commits": 2, "commits_low_confidence": false, "score": 50.8, "description": "Production-grade Claude Code and Codex skills for Spring Boot developers", "language": "Java", "open_issues": 0, "category": "Agent Skills", "category_rank": 266, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:13:46Z", "slug": "spring-boot-skills", "full_fetched_at": "2026-10-12T00:01:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: skills/spring-boot-3/mcp-server/SKILL.md", "Found MCP-related server path: skills/spring-boot-3/mcp-server/agents/openai.yaml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.1, "trust_score_v2": 48.1, "rank_v2": 266, "rank_v2_delta": 1042, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.7, "maintenance": 12.5, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mobile Device MCP", "repo": "srmorete/mobile-device-mcp", "display_repo": "", "url": "https://github.com/srmorete/mobile-device-mcp", "listing_class": "agent", "rank": 1039, "previous_rank": 1034, "rank_delta": -5, "stars": 49, "stars_fmt": "49", "forks": 1, "forks_fmt": "1", "last_push": "2026-08-02", "days_ago": 71, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.7, "description": "An MCP server to use with iOS and Android. Seamlessly maps Native screens and WebViews. Multiple parallel devices supported.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 595, "npm_package": "@srmorete/mobile-device-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 117, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.45, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T18:25:57Z", "slug": "mobile-device-mcp", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@srmorete/mobile-device-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@srmorete/mobile-device-mcp", "version": "0.1.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:17Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.1, "trust_score_v2": 48.1, "rank_v2": 1039, "rank_v2_delta": 419, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 11.1, "maintenance": 7.3, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "bb-browser", "repo": "epiral/bb-browser", "display_repo": "", "url": "https://github.com/epiral/bb-browser", "listing_class": "agent", "rank": 1040, "previous_rank": 1039, "rank_delta": -1, "stars": 6241, "stars_fmt": "6.2k", "forks": 609, "forks_fmt": "609", "last_push": "2026-05-29", "days_ago": 136, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.9, "description": "Your browser is the API. CLI + MCP server for AI agents to control Chrome with your login state.", "language": "TypeScript", "open_issues": 64, "category": "Browser & Computer Use", "category_rank": 33, "npm_package": "bb-browser", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 560, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T23:03:20Z", "slug": "bb-browser", "full_fetched_at": "2026-10-12T16:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'bb-browser' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "bb-browser", "version": "0.14.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:56Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.1, "trust_score_v2": 48.1, "rank_v2": 1040, "rank_v2_delta": 415, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 10.7, "maintenance": 2.9, "adoption": 12.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Appstore Connect MCP", "repo": "SardorbekR/appstore-connect-mcp", "display_repo": "", "url": "https://github.com/SardorbekR/appstore-connect-mcp", "listing_class": "agent", "rank": 1041, "previous_rank": 1033, "rank_delta": -8, "stars": 22, "stars_fmt": "22", "forks": 5, "forks_fmt": "5", "last_push": "2026-09-26", "days_ago": 16, "weekly_commits": 2, "commits_low_confidence": false, "score": 40.6, "description": "A Model Context Protocol (MCP) server for Apple's App Store Connect API", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 596, "npm_package": "asc-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 75, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.037, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:55:53Z", "slug": "appstore-connect-mcp", "full_fetched_at": "2026-10-12T00:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'asc-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "asc-mcp", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:06Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.1, "trust_score_v2": 48.1, "rank_v2": 1041, "rank_v2_delta": 415, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.6, "identity": 10.8, "transparency": 10.1, "maintenance": 12.8, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SkillAlchemy", "repo": "agentsope/SkillAlchemy", "display_repo": "", "url": "https://github.com/agentsope/SkillAlchemy", "listing_class": "skill", "rank": 267, "previous_rank": 264, "rank_delta": -3, "stars": 443, "stars_fmt": "443", "forks": 25, "forks_fmt": "25", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 1, "commits_low_confidence": true, "score": 50.9, "description": "From thought to skill. From signal to structure.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 267, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.394, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:47:14Z", "slug": "skillalchemy", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.0, "trust_score_v2": 48.0, "rank_v2": 267, "rank_v2_delta": 970, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 11.7, "maintenance": 12.4, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nagisanzenin Engram", "repo": "nagisanzenin/engram", "display_repo": "", "url": "https://github.com/nagisanzenin/engram", "listing_class": "skill", "rank": 268, "previous_rank": 265, "rank_delta": -3, "stars": 1446, "stars_fmt": "1.4k", "forks": 105, "forks_fmt": "105", "last_push": "2026-08-27", "days_ago": 46, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.0, "description": "Evidence-based learning engine — first-principles curricula, free-recall verification with receipts, FSRS-scheduled memory, and explorable artifacts. Learn anything; keep it.", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 268, "npm_package": "opencode-engram-learning", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 123, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-09-30T23:01:54Z", "slug": "nagisanzenin-engram", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'opencode-engram-learning' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "opencode-engram-learning", "version": "1.15.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:03Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 48.0, "trust_score_v2": 48.0, "rank_v2": 268, "rank_v2_delta": 1113, "trust_v2_adjustment": 3.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.4, "identity": 10.8, "transparency": 10.8, "maintenance": 8.9, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "SpaceFrontiers MCP", "repo": "SpaceFrontiers/mcp", "display_repo": "", "url": "https://github.com/SpaceFrontiers/mcp", "listing_class": "agent", "rank": 1042, "previous_rank": 1019, "rank_delta": -23, "stars": 11, "stars_fmt": "11", "forks": 6, "forks_fmt": "6", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 6, "commits_low_confidence": false, "score": 45.3, "description": "Machine Library by Space Frontiers: citable research retrieval for AI agents across papers, books, patents, Wikipedia, and public discussions.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 597, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.061, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T16:57:59Z", "slug": "spacefrontiers-mcp", "full_fetched_at": "2026-10-12T00:02:13Z", "source_note": "", "github_homepage": "https://machinelibrary.ai/mcp", "homepage_icon": "/site-icons/2e1c47f7d90a4d78.png", "homepage_icon_for": "https://machinelibrary.ai/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MACHINELIBRARY_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.9, "trust_score_v2": 47.9, "rank_v2": 1042, "rank_v2_delta": 245, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.4, "maintenance": 15.0, "adoption": 2.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Reddit Research MCP", "repo": "dialog-tools/reddit-research-mcp", "display_repo": "", "url": "https://github.com/dialog-tools/reddit-research-mcp", "listing_class": "agent", "rank": 1043, "previous_rank": 1036, "rank_delta": -7, "stars": 255, "stars_fmt": "255", "forks": 29, "forks_fmt": "29", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.6, "description": "Turn Reddit's chaos into structured insights with full citations. MCP server for competitive analysis, customer discovery, and market research. Zero-setup hosted solution with semantic search across 20,000+ subreddits.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 598, "npm_package": "", "crate_package": "", "pypi_package": "reddit-research-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 43, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.1, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:06:09Z", "slug": "reddit-research-mcp", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "https://dialog.tools/", "homepage_icon": "/site-icons/ba5e77a9cc9e9390.png", "homepage_icon_for": "https://dialog.tools/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: ai-docs/fastmcp3/MIGRATION-SUMMARY.md", "Found MCP-related server path: ai-docs/fastmcp3/context.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found credential/config marker 'CHROMA_PROXY_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'reddit-research-mcp' points to king-of-the-grackles/reddit-research-mcp, which GitHub redirects to the tracked repo after a rename/transfer (not treated as drift)" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.9, "trust_score_v2": 47.9, "rank_v2": 1043, "rank_v2_delta": 245, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.3, "maintenance": 9.7, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Temporal Cortex Calendar MCP", "repo": "temporal-cortex/mcp", "display_repo": "", "url": "https://github.com/temporal-cortex/mcp", "listing_class": "agent", "rank": 1044, "previous_rank": 1037, "rank_delta": -7, "stars": 13, "stars_fmt": "13", "forks": 2, "forks_fmt": "2", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.4, "description": "Calendar MCP server with atomic booking, conflict prevention, deterministic RRULE expansion, and TOON token compression for AI agents", "language": "Dockerfile", "open_issues": 0, "category": "MCP Servers", "category_rank": 599, "npm_package": "@temporal-cortex/cortex-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 91, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 6 }, "scorecard_scanned_at": "2026-10-10T19:25:48Z", "slug": "temporal-cortex-calendar-mcp", "full_fetched_at": "2026-10-12T00:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in examples/openai-agents/requirements.txt", "README/docs also mention OpenAI", "Found Redis credential/config marker 'REDIS_URL'", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@temporal-cortex/cortex-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@temporal-cortex/cortex-mcp", "version": "0.9.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:23Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.9, "trust_score_v2": 47.9, "rank_v2": 1044, "rank_v2_delta": 381, "trust_v2_adjustment": 4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.3, "maintenance": 9.2, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ads MCP", "repo": "adkit/ads-mcp", "display_repo": "", "url": "https://github.com/adkit/ads-mcp", "listing_class": "agent", "rank": 1045, "previous_rank": 1041, "rank_delta": -4, "stars": 15, "stars_fmt": "15", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 2, "commits_low_confidence": false, "score": 39.0, "description": "Ads MCP - manage Google, Meta, TikTok, LinkedIn, Microsoft, Reddit & X Ads campaigns from Claude, ChatGPT, Cursor & any MCP client.", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 600, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:45:34Z", "slug": "ads-mcp", "full_fetched_at": "2026-10-12T08:02:23Z", "source_note": "", "github_homepage": "https://adkit.so", "homepage_icon": "/site-icons/6a6cf80b59e4ba28.png", "homepage_icon_for": "https://adkit.so", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.7, "trust_score_v2": 47.7, "rank_v2": 1045, "rank_v2_delta": 259, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 13.0, "maintenance": 13.2, "adoption": 2.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "CVE MCP Server", "repo": "mukul975/cve-mcp-server", "display_repo": "", "url": "https://github.com/mukul975/cve-mcp-server", "listing_class": "agent", "rank": 1046, "previous_rank": 1045, "rank_delta": -1, "stars": 1622, "stars_fmt": "1.6k", "forks": 268, "forks_fmt": "268", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 54.1, "description": "Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE ATT&CK, Shodan, VirusTotal, and more.", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 601, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.143, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:42:00Z", "slug": "cve-mcp-server", "full_fetched_at": "2026-10-11T20:02:03Z", "source_note": "", "github_homepage": "https://www.mahipal.engineer/CVE-MCP-Server/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ABUSEIPDB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 47.7, "trust_score_v2": 47.7, "rank_v2": 1046, "rank_v2_delta": 248, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.6, "maintenance": 11.3, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Basic", "repo": "fantastic-admin/basic", "display_repo": "", "url": "https://github.com/fantastic-admin/basic", "listing_class": "skill", "rank": 269, "previous_rank": 267, "rank_delta": -2, "stars": 3415, "stars_fmt": "3.4k", "forks": 397, "forks_fmt": "397", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 62.5, "description": "⭐⭐⭐⭐⭐ 面向 AI 编程的管理系统框架，兼容PC、移动端。AI-oriented management system framework, compatible with PC and mobile device.", "language": "Vue", "open_issues": 0, "category": "Agent Skills", "category_rank": 269, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-09-26T10:46:38Z", "slug": "basic", "full_fetched_at": "2026-10-12T16:02:04Z", "source_note": "", "github_homepage": "https://fantastic-admin.hurui.me", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.7, "trust_score_v2": 47.7, "rank_v2": 269, "rank_v2_delta": 980, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.3, "maintenance": 13.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LiteFlow", "repo": "dromara/liteflow", "display_repo": "", "url": "https://github.com/dromara/liteflow", "listing_class": "agent", "rank": 1047, "previous_rank": 1042, "rank_delta": -5, "stars": 3882, "stars_fmt": "3.9k", "forks": 526, "forks_fmt": "526", "last_push": "2026-09-21", "days_ago": 21, "weekly_commits": 7, "commits_low_confidence": false, "score": 67.6, "description": "Lightweight, fast, stable, programmable component-based rule engine — where AI Agents orchestrate just like ordinary components. Uniquely designed DSL: component reuse, sync/async & dynamic orchestration, multi-language scripting, nested rules, hot deployment and smooth refresh. If you can…", "language": "Java", "open_issues": 53, "category": "Workflow Platforms", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:21:07Z", "slug": "liteflow", "full_fetched_at": "2026-10-12T04:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: liteflow-rule-plugin/.gitignore", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 47.7, "trust_score_v2": 47.7, "rank_v2": 1047, "rank_v2_delta": 187, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 14.2, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zapier", "repo": "zapier/zapier-mcp", "display_repo": "", "url": "https://github.com/zapier/zapier-mcp", "listing_class": "agent", "rank": 1048, "previous_rank": 1043, "rank_delta": -5, "stars": 433, "stars_fmt": "433", "forks": 69, "forks_fmt": "69", "last_push": "2026-07-29", "days_ago": 75, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.1, "description": "Official plugin distribution for the hosted Zapier MCP server. Install it in your AI client and connect to thousands of apps.", "language": "", "open_issues": 1, "category": "MCP Servers", "category_rank": 602, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.781, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 9, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:50:21Z", "slug": "zapier", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://docs.zapier.com/mcp", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: zapier-power/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/zapier/.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/zapier/.claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.6, "trust_score_v2": 47.6, "rank_v2": 1048, "rank_v2_delta": 263, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 12.5, "maintenance": 7.0, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Unla", "repo": "AmoyLab/Unla", "display_repo": "", "url": "https://github.com/AmoyLab/Unla", "listing_class": "agent", "rank": 1049, "previous_rank": 1044, "rank_delta": -5, "stars": 2239, "stars_fmt": "2.2k", "forks": 186, "forks_fmt": "186", "last_push": "2026-08-27", "days_ago": 46, "weekly_commits": 0, "commits_low_confidence": false, "score": 49.3, "description": "🧩 MCP Gateway - A lightweight gateway service that instantly transforms existing MCP Servers and APIs into MCP servers with zero code changes. Features Docker deployment and management UI, requiring no infrastructure modifications.", "language": "TypeScript", "open_issues": 58, "category": "Protocols & Tool Integration", "category_rank": 49, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.11, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:54:07Z", "slug": "unla", "full_fetched_at": "2026-10-12T08:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cmd/mock-server/backend/mcp-server.go", "Found MCP-related server path: cmd/mock-server/backend/mcp-server_more_test.go", "Found MCP dependency '@modelcontextprotocol/sdk' in web/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'APISERVER_JWT_SECRET_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.6, "trust_score_v2": 47.6, "rank_v2": 1049, "rank_v2_delta": 249, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 12.5, "maintenance": 8.9, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Open SEO MCP", "repo": "Ryze-AI-Adgent/open-seo-mcp-skills", "display_repo": "", "url": "https://github.com/Ryze-AI-Adgent/open-seo-mcp-skills", "listing_class": "agent", "rank": 1050, "previous_rank": 1048, "rank_delta": -2, "stars": 5067, "stars_fmt": "5.1k", "forks": 366, "forks_fmt": "366", "last_push": "2026-09-24", "days_ago": 18, "weekly_commits": 1, "commits_low_confidence": false, "score": 60.4, "description": "Free SEO MCP server + open-source SEO and GEO skills for Claude: keyword research, rank tracking, audits, backlinks, AI visibility on your real GSC/GA4/ads data. claude mcp add ryze --transport http https://connector.get-ryze.ai/mcp", "language": "Shell", "open_issues": 1, "category": "MCP Servers", "category_rank": 603, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T22:22:02Z", "slug": "open-seo-mcp", "full_fetched_at": "2026-10-12T16:01:57Z", "source_note": "", "github_homepage": "https://www.get-ryze.ai/how-to-connect-claude-to-google-meta-ads-mcp", "homepage_icon": "/site-icons/643325dc89288b02.png", "homepage_icon_for": "https://www.get-ryze.ai/how-to-connect-claude-to-google-meta-ads-mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.6, "trust_score_v2": 47.6, "rank_v2": 1050, "rank_v2_delta": 275, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.4, "identity": 10.8, "transparency": 10.8, "maintenance": 12.0, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Effective Html", "repo": "plannotator/effective-html", "display_repo": "", "url": "https://github.com/plannotator/effective-html", "listing_class": "skill", "rank": 270, "previous_rank": 268, "rank_delta": -2, "stars": 3609, "stars_fmt": "3.6k", "forks": 246, "forks_fmt": "246", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 3, "commits_low_confidence": false, "score": 61.1, "description": "Agent skills for useful HTML artifacts, wireframes, interactive prototypes, plans, and diagrams.", "language": "HTML", "open_issues": 1, "category": "Agent Skills", "category_rank": 270, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.474, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:29:35Z", "slug": "effective-html", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "https://plannotator.ai", "homepage_icon": "/site-icons/bdab82976a5526bb.png", "homepage_icon_for": "https://plannotator.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.6, "trust_score_v2": 47.6, "rank_v2": 270, "rank_v2_delta": 969, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 10.6, "maintenance": 12.5, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skill Flow", "repo": "VintLin/skill-flow", "display_repo": "", "url": "https://github.com/VintLin/skill-flow", "listing_class": "skill", "rank": 271, "previous_rank": 266, "rank_delta": -5, "stars": 261, "stars_fmt": "261", "forks": 16, "forks_fmt": "16", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 31, "commits_low_confidence": false, "score": 62.8, "description": "Install, manage, and share skills across every major coding agent — Claude Code, Cursor, Copilot, and more.", "language": "TypeScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 271, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:44:07Z", "slug": "skill-flow", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 47.6, "trust_score_v2": 47.6, "rank_v2": 271, "rank_v2_delta": 983, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.5, "maintenance": 17.4, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ASP.NET Core Debugger — MCP Server for AI Agents", "repo": "magna-nz/aspnetcore-debugger-mcp", "display_repo": "", "url": "https://github.com/magna-nz/aspnetcore-debugger-mcp", "listing_class": "agent", "rank": 1051, "previous_rank": 1046, "rank_delta": -5, "stars": 15, "stars_fmt": "15", "forks": 4, "forks_fmt": "4", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 2, "commits_low_confidence": false, "score": 37.6, "description": "MCP server that lets AI agents (Claude, Cursor) debug your .NET / ASP.NET Core app", "language": "C#", "open_issues": 0, "category": "MCP Servers", "category_rank": 604, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.424, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:30:37Z", "slug": "asp-net-core-debugger-mcp-server-for-ai-agents", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.5, "trust_score_v2": 47.5, "rank_v2": 1051, "rank_v2_delta": 285, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.2, "maintenance": 12.0, "adoption": 2.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Gemini MCP", "repo": "RLabs-Inc/gemini-mcp", "display_repo": "", "url": "https://github.com/RLabs-Inc/gemini-mcp", "listing_class": "agent", "rank": 1052, "previous_rank": 1047, "rank_delta": -5, "stars": 217, "stars_fmt": "217", "forks": 46, "forks_fmt": "46", "last_push": "2026-07-08", "days_ago": 96, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.5, "description": "MCP Server that enables Claude code to interact with Gemini", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 605, "npm_package": "@rlabs-inc/gemini-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 502, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.293, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:52:20Z", "slug": "gemini-mcp", "full_fetched_at": "2026-10-12T00:01:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency '@google/genai' in package.json", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@rlabs-inc/gemini-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@rlabs-inc/gemini-mcp", "version": "0.8.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:56Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.5, "trust_score_v2": 47.5, "rank_v2": 1052, "rank_v2_delta": 396, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.3, "maintenance": 5.6, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Qiaomu Cut Skill", "repo": "joeseesun/qiaomu-cut-skill", "display_repo": "", "url": "https://github.com/joeseesun/qiaomu-cut-skill", "listing_class": "skill", "rank": 272, "previous_rank": 269, "rank_delta": -3, "stars": 374, "stars_fmt": "374", "forks": 41, "forks_fmt": "41", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 1, "commits_low_confidence": false, "score": 49.8, "description": "乔木智能视频导演 Skill：素材治理、双语字幕、品牌包装与可复现渲染 | Agent-native video director with governed sourcing and verifiable rendering", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 272, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 3, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:16:32Z", "slug": "qiaomu-cut-skill", "full_fetched_at": "2026-10-12T16:02:30Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'LISTENHUB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.5, "trust_score_v2": 47.5, "rank_v2": 272, "rank_v2_delta": 943, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.4, "identity": 10.8, "transparency": 10.8, "maintenance": 12.3, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Quickbooks MCP", "repo": "laf-rge/quickbooks-mcp", "display_repo": "", "url": "https://github.com/laf-rge/quickbooks-mcp", "listing_class": "agent", "rank": 1053, "previous_rank": 1049, "rank_delta": -4, "stars": 13, "stars_fmt": "13", "forks": 14, "forks_fmt": "14", "last_push": "2026-08-24", "days_ago": 49, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.7, "description": "MCP server for QuickBooks Online - query, create, and edit accounting data with Claude", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 606, "npm_package": "quickbooks-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 228, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:27:27Z", "slug": "quickbooks-mcp", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'quickbooks-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "quickbooks-mcp", "version": "0.11.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:21Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.5, "trust_score_v2": 47.5, "rank_v2": 1053, "rank_v2_delta": 414, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 10.7, "maintenance": 8.7, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Balldontlie Api MCP", "repo": "balldontlie-api/mcp", "display_repo": "", "url": "https://github.com/balldontlie-api/mcp", "listing_class": "agent", "rank": 1054, "previous_rank": 1051, "rank_delta": -3, "stars": 12, "stars_fmt": "12", "forks": 8, "forks_fmt": "8", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 8, "commits_low_confidence": false, "score": 46.6, "description": "The official mcp-server for BALLDONTLIE", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 607, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.026, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 7, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:14:31Z", "slug": "balldontlie-api-mcp", "full_fetched_at": "2026-10-12T12:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.4, "trust_score_v2": 47.4, "rank_v2": 1054, "rank_v2_delta": 283, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.8, "maintenance": 15.1, "adoption": 2.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Astro MCP", "repo": "morinokami/astro-mcp", "display_repo": "", "url": "https://github.com/morinokami/astro-mcp", "listing_class": "agent", "rank": 1055, "previous_rank": 1053, "rank_delta": -2, "stars": 61, "stars_fmt": "61", "forks": 1, "forks_fmt": "1", "last_push": "2026-05-01", "days_ago": 164, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.4, "description": "MCP server to support Astro project development", "language": "Astro", "open_issues": 1, "category": "MCP Servers", "category_rank": 608, "npm_package": "astro-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 5004, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T09:57:28Z", "slug": "astro-mcp", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'astro-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "astro-mcp", "version": "0.4.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:02Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.4, "trust_score_v2": 47.4, "rank_v2": 1055, "rank_v2_delta": 415, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 11.3, "maintenance": 1.1, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MindOS", "repo": "GeminiLight/MindOS", "display_repo": "", "url": "https://github.com/GeminiLight/MindOS", "listing_class": "skill", "rank": 273, "previous_rank": 234, "rank_delta": -39, "stars": 678, "stars_fmt": "678", "forks": 61, "forks_fmt": "61", "last_push": "2026-10-05", "days_ago": 7, "weekly_commits": 6, "commits_low_confidence": true, "score": 60.0, "description": "MindOS is a Human-AI Collaborative Mind System, where human thinks and agents act. Globally sync your mind for all agents: transparent, controllable, and evolving symbiotically.", "language": "TypeScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 273, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:30:00Z", "slug": "mindos", "full_fetched_at": "2026-10-12T16:02:18Z", "source_note": "", "github_homepage": "https://mindos.you", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mindos/src/protocols/mcp-server/http-app.ts", "Found MCP-related server path: packages/mindos/src/protocols/mcp-server/http-security.ts", "Found MCP-related server test path: packages/mindos/src/protocols/mcp-server/http-app.test.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/web/package.json", "Found Anthropic dependency 'anthropic' in packages/web/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: packages/mindos/src/foundation/plugins/confirmation-receipt.test.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.4, "trust_score_v2": 47.4, "rank_v2": 273, "rank_v2_delta": 1042, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.2, "maintenance": 13.2, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenCursor", "repo": "PawanOsman/OpenCursor", "display_repo": "", "url": "https://github.com/PawanOsman/OpenCursor", "listing_class": "agent", "rank": 1056, "previous_rank": 1040, "rank_delta": -16, "stars": 6023, "stars_fmt": "6.0k", "forks": 1032, "forks_fmt": "1.0k", "last_push": "2026-09-25", "days_ago": 17, "weekly_commits": 2, "commits_low_confidence": false, "score": 65.3, "description": "Open-source Cursor-like AI coding agent for VS Code - agentic chat, multi-provider LLMs (OpenAI, Ollama, llama.cpp), semantic search, and MCP support", "language": "TypeScript", "open_issues": 3, "category": "Coding Agents", "category_rank": 59, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:48:42Z", "slug": "opencursor", "full_fetched_at": "2026-10-12T08:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.4, "trust_score_v2": 47.4, "rank_v2": 1056, "rank_v2_delta": 192, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 12.8, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "FastAgency", "repo": "ag2ai/fastagency", "display_repo": "", "url": "https://github.com/ag2ai/fastagency", "listing_class": "agent", "rank": 1057, "previous_rank": 1054, "rank_delta": -3, "stars": 547, "stars_fmt": "547", "forks": 65, "forks_fmt": "65", "last_push": "2026-02-23", "days_ago": 231, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.9, "description": "The fastest way to bring multi-agent workflows to production.", "language": "Python", "open_issues": 73, "category": "Agent Frameworks", "category_rank": 94, "npm_package": "fastagency", "crate_package": "", "pypi_package": "fastagency", "docker_image": "", "vscode_extension": "", "weekly_downloads": 330, "dl_source": "npm+pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": false, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": 5.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-12T06:56:53Z", "slug": "fastagency", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "https://fastagency.ai/latest", "homepage_icon": "/site-icons/768613ac8787ff38.png", "homepage_icon_for": "https://fastagency.ai/latest", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "partial", "confidence": "medium", "summary": "Some package metadata matches; some source metadata is missing", "evidence": [ "npm package 'fastagency' does not expose a source repo URL", "pypi package 'fastagency' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "fastagency", "version": "0.10.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:13Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 47.3, "trust_score_v2": 47.3, "rank_v2": 1057, "rank_v2_delta": 257, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 12.2, "identity": 10.8, "transparency": 13.4, "maintenance": 0.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 2.0 }, "pending_signals": false }, { "name": "Claude Code Settings", "repo": "feiskyer/claude-code-settings", "display_repo": "", "url": "https://github.com/feiskyer/claude-code-settings", "listing_class": "skill", "rank": 274, "previous_rank": 270, "rank_delta": -4, "stars": 1660, "stars_fmt": "1.7k", "forks": 241, "forks_fmt": "241", "last_push": "2026-09-27", "days_ago": 15, "weekly_commits": 2, "commits_low_confidence": false, "score": 59.3, "description": "Curated skills, sub-agents, and config templates that supercharge Claude Code — research, image gen, GitHub automation & more.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 274, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:27:03Z", "slug": "claude-code-settings", "full_fetched_at": "2026-10-12T16:01:57Z", "source_note": "", "github_homepage": "https://feisky.xyz/claude-code-settings/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in skills/gpt-image-skill/requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in skills/nanobanana-skill/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.3, "trust_score_v2": 47.3, "rank_v2": 274, "rank_v2_delta": 902, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 12.1, "maintenance": 12.9, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Creative Writing Skills", "repo": "haowjy/creative-writing-skills", "display_repo": "", "url": "https://github.com/haowjy/creative-writing-skills", "listing_class": "skill", "rank": 275, "previous_rank": 271, "rank_delta": -4, "stars": 512, "stars_fmt": "512", "forks": 69, "forks_fmt": "69", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 9, "commits_low_confidence": true, "score": 62.0, "description": "claude skills focused on creative writing", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 275, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:16:21Z", "slug": "creative-writing-skills", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (cw/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 47.3, "trust_score_v2": 47.3, "rank_v2": 275, "rank_v2_delta": 980, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.7, "maintenance": 13.7, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Website Rebuild Skill", "repo": "boyang-hu/website-rebuild-skill", "display_repo": "", "url": "https://github.com/boyang-hu/website-rebuild-skill", "listing_class": "skill", "rank": 276, "previous_rank": 312, "rank_delta": 36, "stars": 1400, "stars_fmt": "1.4k", "forks": 251, "forks_fmt": "251", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 3, "commits_low_confidence": true, "score": 62.6, "description": "复刻网站的 Agent Skill：抓只读镜像、从压缩代码逐行还原、自动比对验收。An agent skill that mirrors a website, rebuilds it from the minified code, and verifies the result with automated diffs.", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 276, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T23:06:26Z", "slug": "website-rebuild-skill", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.3, "trust_score_v2": 47.3, "rank_v2": 276, "rank_v2_delta": 992, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 11.4, "maintenance": 13.2, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Openfate MCP", "repo": "openfate-ai/openfate-mcp", "display_repo": "", "url": "https://github.com/openfate-ai/openfate-mcp", "listing_class": "agent", "rank": 1058, "previous_rank": 1052, "rank_delta": -6, "stars": 157, "stars_fmt": "157", "forks": 22, "forks_fmt": "22", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 5, "commits_low_confidence": false, "score": 51.3, "description": "OpenFate Bazi MCP server with deterministic Four Pillars calculation, True Solar Time, branch interactions, and reverse Bazi lookup.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 609, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-10T23:10:44Z", "slug": "openfate-mcp", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://openfate.ai", "homepage_icon": "/site-icons/4913c3afebf591bd.png", "homepage_icon_for": "https://openfate.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.3, "trust_score_v2": 47.3, "rank_v2": 1058, "rank_v2_delta": 282, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 13.6, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Opengap", "repo": "open-gitagent/opengap", "display_repo": "", "url": "https://github.com/open-gitagent/opengap", "listing_class": "skill", "rank": 277, "previous_rank": 272, "rank_delta": -5, "stars": 2971, "stars_fmt": "3.0k", "forks": 352, "forks_fmt": "352", "last_push": "2026-07-02", "days_ago": 102, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.6, "description": "A framework-agnostic, git-native standard for defining AI agents", "language": "TypeScript", "open_issues": 13, "category": "Agent Skills", "category_rank": 277, "npm_package": "@open-gitagent/opengap", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 25, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.326, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:06:48Z", "slug": "opengap", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "https://gitagent.sh", "homepage_icon": "/site-icons/fed20740598d8c14.png", "homepage_icon_for": "https://gitagent.sh", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server test path: src/adapters/mcp-servers.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@open-gitagent/opengap' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@open-gitagent/opengap", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:08Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.3, "trust_score_v2": 47.3, "rank_v2": 277, "rank_v2_delta": 1151, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.3, "maintenance": 5.2, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Loopy", "repo": "Forward-Future/loopy", "display_repo": "", "url": "https://github.com/Forward-Future/loopy", "listing_class": "skill", "rank": 278, "previous_rank": 273, "rank_delta": -5, "stars": 3174, "stars_fmt": "3.2k", "forks": 280, "forks_fmt": "280", "last_push": "2026-09-11", "days_ago": 31, "weekly_commits": 0, "commits_low_confidence": false, "score": 53.1, "description": "A library of practical AI-agent loops and an installable skill for finding, adapting, and designing repeatable agent workflows.", "language": "JavaScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 278, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.61, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:53:40Z", "slug": "loopy", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "https://signals.forwardfuture.ai/loop-library/", "homepage_icon": "/site-icons/d9f0b65db2193f45.png", "homepage_icon_for": "https://signals.forwardfuture.ai/loop-library/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'LOOP_PUBLISH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.2, "trust_score_v2": 47.2, "rank_v2": 278, "rank_v2_delta": 946, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.5, "identity": 10.8, "transparency": 11.6, "maintenance": 9.9, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Working Activity", "repo": "ccch1mneyyy/working-activity", "display_repo": "", "url": "https://github.com/ccch1mneyyy/working-activity", "listing_class": "skill", "rank": 279, "previous_rank": 274, "rank_delta": -5, "stars": 662, "stars_fmt": "662", "forks": 236, "forks_fmt": "236", "last_push": "2026-09-26", "days_ago": 16, "weekly_commits": 26, "commits_low_confidence": false, "score": 68.7, "description": "Lively Working-line extension for pi CLI and DSH", "language": "TypeScript", "open_issues": 5, "category": "Agent Skills", "category_rank": 279, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.036, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-09-17T21:16:13Z", "slug": "working-activity", "full_fetched_at": "2026-10-12T12:02:48Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in packages/activity/working-activity/package.json", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: extensions/index.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.2, "trust_score_v2": 47.2, "rank_v2": 279, "rank_v2_delta": 964, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.5, "maintenance": 16.6, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Reins", "repo": "pegasi-ai/reins", "display_repo": "", "url": "https://github.com/pegasi-ai/reins", "listing_class": "skill", "rank": 280, "previous_rank": 275, "rank_delta": -5, "stars": 392, "stars_fmt": "392", "forks": 53, "forks_fmt": "53", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 0, "commits_low_confidence": true, "score": 48.6, "description": "Stop AI agents from doing things you didn't ask for.", "language": "Python", "open_issues": 7, "category": "Agent Skills", "category_rank": 280, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:22:31Z", "slug": "reins", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://www.reins.sh", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: src/core/toolshield/agentrisk/mcp_server/start_filesystem.sh", "Found MCP-related server path: src/core/toolshield/agentrisk/mcp_server/start_notion.sh" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/core/toolshield/pyproject.toml", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "filesystem" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "Found filesystem dependency 'fs-extra' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 47.1, "trust_score_v2": 47.1, "rank_v2": 280, "rank_v2_delta": 946, "trust_v2_adjustment": -1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 11.1, "maintenance": 11.9, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Infobip MCP", "repo": "infobip/mcp", "display_repo": "", "url": "https://github.com/infobip/mcp", "listing_class": "agent", "rank": 1059, "previous_rank": 1035, "rank_delta": -24, "stars": 37, "stars_fmt": "37", "forks": 7, "forks_fmt": "7", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 3, "commits_low_confidence": false, "score": 44.3, "description": "Infobip Remote MCP Servers Documentation", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 610, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.632, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T12:57:52Z", "slug": "infobip-mcp", "full_fetched_at": "2026-10-12T16:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in examples/openai-agents-sdk-python/pyproject.toml", "Found credential/config marker 'INFOBIP_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.1, "trust_score_v2": 47.1, "rank_v2": 1059, "rank_v2_delta": 262, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 11.1, "maintenance": 13.5, "adoption": 3.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Danishashko Yahoo Finance", "repo": "danishashko/yahoo-finance-mcp", "display_repo": "", "url": "https://github.com/danishashko/yahoo-finance-mcp", "listing_class": "agent", "rank": 1060, "previous_rank": 1055, "rank_delta": -5, "stars": 22, "stars_fmt": "22", "forks": 5, "forks_fmt": "5", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.5, "description": "Beginner-friendly Yahoo Finance MCP server for Claude. Get real-time stock data, charts, financials, analyst ratings, and compare multiple companies.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 611, "npm_package": "yahoo-finance-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 204, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-07T17:12:00Z", "slug": "danishashko-yahoo-finance", "full_fetched_at": "2026-10-12T12:02:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'yahoo-finance-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "yahoo-finance-mcp-server", "version": "1.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:59Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.1, "trust_score_v2": 47.1, "rank_v2": 1060, "rank_v2_delta": 415, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 9.5, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "TruLens", "repo": "truera/trulens", "display_repo": "", "url": "https://github.com/truera/trulens", "listing_class": "agent", "rank": 1061, "previous_rank": 1056, "rank_delta": -5, "stars": 3598, "stars_fmt": "3.6k", "forks": 362, "forks_fmt": "362", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 75, "commits_low_confidence": false, "score": 81.7, "description": "Evaluation and Tracking for LLM Experiments and AI Agents", "language": "Python", "open_issues": 46, "category": "Observability & Evaluation", "category_rank": 21, "npm_package": "", "crate_package": "", "pypi_package": "trulens-core", "docker_image": "", "vscode_extension": "", "weekly_downloads": 7762, "dl_source": "pypi", "hn_mentions_30d": 8, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 1.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "trulens", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "https://www.trulens.org/", "homepage_icon": "/site-icons/55fa57bf7e39079c.png", "homepage_icon_for": "https://www.trulens.org/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'trulens-core' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "trulens-core", "version": "2.15.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:39Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.1, "trust_score_v2": 47.1, "rank_v2": 1061, "rank_v2_delta": 371, "trust_v2_adjustment": 4.0, "trust_confidence": 0.75, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 19.5, "adoption": 13.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MTG MCP Server", "repo": "j4th/mtg-mcp-server", "display_repo": "", "url": "https://github.com/j4th/mtg-mcp-server", "listing_class": "agent", "rank": 1062, "previous_rank": 1057, "rank_delta": -5, "stars": 20, "stars_fmt": "20", "forks": 6, "forks_fmt": "6", "last_push": "2026-06-24", "days_ago": 110, "weekly_commits": 0, "commits_low_confidence": false, "score": 21.5, "description": "Unified MCP server composing Scryfall, Commander Spellbook, 17Lands, EDHREC, Moxfield, Spicerack, and MTGGoldfish into one interface for AI assistants. 69 tools for Commander analytics, draft evaluation, competitive metagame, sideboard strategy, and more.", "language": "Python", "open_issues": 6, "category": "MCP Servers", "category_rank": 612, "npm_package": "", "crate_package": "", "pypi_package": "mtg-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 43, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.14, "scorecard_score": 5.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:19:26Z", "slug": "mtg-mcp-server", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mtg_mcp_server/__init__.py", "Found MCP-related server path: src/mtg_mcp_server/config.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mtg-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mtg-mcp-server", "version": "3.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:29Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.0, "trust_score_v2": 47.0, "rank_v2": 1062, "rank_v2_delta": 418, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.9, "maintenance": 4.7, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CrewAI tools", "repo": "crewAIInc/crewAI-tools", "display_repo": "", "url": "https://github.com/crewAIInc/crewAI-tools", "listing_class": "agent", "rank": 1063, "previous_rank": 1058, "rank_delta": -5, "stars": 1480, "stars_fmt": "1.5k", "forks": 556, "forks_fmt": "556", "last_push": "2025-10-23", "days_ago": 354, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.8, "description": "Extend the capabilities of your CrewAI agents with Tools", "language": "Python", "open_issues": 71, "category": "Protocols & Tool Integration", "category_rank": 50, "npm_package": "", "crate_package": "", "pypi_package": "crewai-tools", "docker_image": "", "vscode_extension": "", "weekly_downloads": 448209, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.93, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:46:47Z", "slug": "crewai-tools", "full_fetched_at": "2026-10-12T04:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Browserbase", "Firecrawl", "Postgres", "Qdrant", "SerpAPI", "Tavily", "Weaviate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'bedrock' in pyproject.toml", "Found Qdrant dependency 'qdrant' in pyproject.toml", "Found Weaviate dependency 'weaviate' in pyproject.toml", "Found Tavily dependency 'tavily' in pyproject.toml", "Found SerpAPI dependency 'serpapi' in pyproject.toml", "Found Firecrawl dependency 'firecrawl' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "code", "database", "search" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "Found search dependency 'tavily' in pyproject.toml", "Found database dependency 'qdrant' in pyproject.toml", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'crewai-tools' points to crewaiinc/crewai (same owner as crewaiinc/crewai-tools, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "crewai-tools", "version": "1.15.27" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:25Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "crewAIInc/crewAI-tools", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.0, "trust_score_v2": 47.0, "rank_v2": 1063, "rank_v2_delta": 127, "trust_v2_adjustment": -2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 12.6, "maintenance": 0.0, "adoption": 15.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Autoresearch", "repo": "uditgoenka/autoresearch", "display_repo": "", "url": "https://github.com/uditgoenka/autoresearch", "listing_class": "skill", "rank": 281, "previous_rank": 276, "rank_delta": -5, "stars": 6569, "stars_fmt": "6.6k", "forks": 483, "forks_fmt": "483", "last_push": "2026-08-12", "days_ago": 61, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.1, "description": "Claude Autoresearch Skill — Autonomous goal-directed iteration for Claude Code. Inspired by Karpathy's autoresearch. Modify → Verify → Keep/Discard → Repeat forever.", "language": "Shell", "open_issues": 3, "category": "Agent Skills", "category_rank": 281, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T11:50:59Z", "slug": "autoresearch", "full_fetched_at": "2026-10-12T00:02:30Z", "source_note": "", "github_homepage": "https://udit.co/projects/autoresearch", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (claude-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.0, "trust_score_v2": 47.0, "rank_v2": 281, "rank_v2_delta": 989, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 12.1, "maintenance": 7.9, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Superseo Skills", "repo": "inhouseseo/superseo-skills", "display_repo": "", "url": "https://github.com/inhouseseo/superseo-skills", "listing_class": "skill", "rank": 282, "previous_rank": 277, "rank_delta": -5, "stars": 353, "stars_fmt": "353", "forks": 44, "forks_fmt": "44", "last_push": "2026-09-03", "days_ago": 39, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.7, "description": "11 Claude skills for SEO: page audits, linkbuilding, article writing, E-E-A-T audits, semantic gap analysis, link building. Methodology from Koray Tuğberk, Kyle Roof, and Lily Ray, plus a generation-time anti-AI-slop ruleset. Production-tested at InhouseSEO", "language": "", "open_issues": 1, "category": "Agent Skills", "category_rank": 282, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:52:34Z", "slug": "superseo-skills", "full_fetched_at": "2026-10-12T16:02:24Z", "source_note": "", "github_homepage": "https://inhouseseo.ai", "homepage_icon": "/site-icons/c05f255d7807312e.png", "homepage_icon_for": "https://inhouseseo.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 47.0, "trust_score_v2": 47.0, "rank_v2": 282, "rank_v2_delta": 992, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.4, "identity": 10.8, "transparency": 11.6, "maintenance": 9.4, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Multi-MCP", "repo": "religa/multi_mcp", "display_repo": "", "url": "https://github.com/religa/multi_mcp", "listing_class": "agent", "rank": 1064, "previous_rank": 1065, "rank_delta": 1, "stars": 37, "stars_fmt": "37", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 2, "commits_low_confidence": false, "score": 46.0, "description": "Multi-Model chat, code review and analysis MCP Server for Claude Code", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 613, "npm_package": "", "crate_package": "", "pypi_package": "multi-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 18, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.079, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:04:29Z", "slug": "multi-mcp", "full_fetched_at": "2026-10-11T20:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/integration/test_mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'multi-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "multi-mcp", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:13Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.0, "trust_score_v2": 47.0, "rank_v2": 1064, "rank_v2_delta": 300, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.8, "identity": 10.8, "transparency": 10.8, "maintenance": 13.9, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "opencode", "repo": "anomalyco/opencode", "display_repo": "", "url": "https://github.com/anomalyco/opencode", "listing_class": "agent", "rank": 1065, "previous_rank": 1067, "rank_delta": 2, "stars": 212888, "stars_fmt": "212.9k", "forks": 28512, "forks_fmt": "28.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1285, "commits_low_confidence": false, "score": 100.0, "description": "The open source coding agent.", "language": "TypeScript", "open_issues": 3296, "category": "Coding Agents", "category_rank": 60, "npm_package": "opencode-ai", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 2958079, "dl_source": "npm", "hn_mentions_30d": 62, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "opencode", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "https://opencode.ai", "homepage_icon": "/site-icons/583f91238231e5ce.png", "homepage_icon_for": "https://opencode.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server docs path: packages/web/src/content/docs/ar/mcp-servers.mdx", "Found MCP-related server docs path: packages/web/src/content/docs/bs/mcp-servers.mdx", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .opencode/plugins/smoke-theme.json", "Found code dependency '@octokit' in github/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'opencode-ai' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 47.0, "trust_score_v2": 47.0, "rank_v2": 1065, "rank_v2_delta": 188, "trust_v2_adjustment": -0.6, "trust_confidence": 0.75, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 20.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "blades", "repo": "go-kratos/blades", "display_repo": "", "url": "https://github.com/go-kratos/blades", "listing_class": "agent", "rank": 1066, "previous_rank": 1060, "rank_delta": -6, "stars": 816, "stars_fmt": "816", "forks": 102, "forks_fmt": "102", "last_push": "2026-08-14", "days_ago": 59, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.7, "description": "Blades is a Go-based multimodal AI Agent framework.", "language": "Go", "open_issues": 14, "category": "Agent Frameworks", "category_rank": 95, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.98, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:30:19Z", "slug": "blades", "full_fetched_at": "2026-10-12T16:02:10Z", "source_note": "", "github_homepage": "https://go-kratos.dev/blades/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.9, "trust_score_v2": 46.9, "rank_v2": 1066, "rank_v2_delta": 176, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 12.0, "maintenance": 8.1, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Obsidian", "repo": "MarkusPfundstein/mcp-obsidian", "display_repo": "", "url": "https://github.com/MarkusPfundstein/mcp-obsidian", "listing_class": "agent", "rank": 1067, "previous_rank": 1061, "rank_delta": -6, "stars": 4473, "stars_fmt": "4.5k", "forks": 504, "forks_fmt": "504", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 53.7, "description": "MCP server that interacts with Obsidian via the Obsidian rest API community plugin", "language": "Python", "open_issues": 68, "category": "MCP Servers", "category_rank": 614, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.382, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T10:03:18Z", "slug": "mcp-obsidian", "full_fetched_at": "2026-10-11T20:01:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OBSIDIAN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.7, "trust_score_v2": 46.7, "rank_v2": 1067, "rank_v2_delta": 263, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.1, "maintenance": 9.2, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Simplenote MCP", "repo": "Automattic/simplenote-mcp", "display_repo": "", "url": "https://github.com/Automattic/simplenote-mcp", "listing_class": "agent", "rank": 1068, "previous_rank": 1064, "rank_delta": -4, "stars": 27, "stars_fmt": "27", "forks": 3, "forks_fmt": "3", "last_push": "2026-07-27", "days_ago": 77, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.9, "description": "A basic MCP server for the Simplenote desktop app.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 615, "npm_package": "@automattic/simplenote-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 266, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:15:36Z", "slug": "simplenote-mcp", "full_fetched_at": "2026-10-12T12:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SIMPLENOTE_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@automattic/simplenote-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@automattic/simplenote-mcp", "version": "2.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:37Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.6, "trust_score_v2": 46.6, "rank_v2": 1068, "rank_v2_delta": 397, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.8, "maintenance": 6.9, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Dida RollingGo Hotel MCP Global", "repo": "DIDA-AI/Dida-Hotel-MCP-Global", "display_repo": "", "url": "https://github.com/DIDA-AI/Dida-Hotel-MCP-Global", "listing_class": "agent", "rank": 1069, "previous_rank": 1113, "rank_delta": 44, "stars": 46, "stars_fmt": "46", "forks": 5, "forks_fmt": "5", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.9, "description": "Official DIDA Hotel Booking MCP Server. 14-year travel tech data stack, 2M+ hotels at wholesale rates, 40+ LLM compatible. Free unlimited calls for businesses & individual devs. Filter by location, date, star grade, guests & tags; pull real-time room types, pricing & cancellation rules.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 616, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.797, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:44:22Z", "slug": "dida-rollinggo-hotel-mcp-global", "full_fetched_at": "2026-10-12T16:02:17Z", "source_note": "", "github_homepage": "https://global.rollinggo.store/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .codex-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.6, "trust_score_v2": 46.6, "rank_v2": 1069, "rank_v2_delta": 294, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.7, "identity": 10.8, "transparency": 11.7, "maintenance": 9.7, "adoption": 4.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TradeOS", "repo": "TradeOS-AI/tradeos-mcp", "display_repo": "", "url": "https://github.com/TradeOS-AI/tradeos-mcp", "listing_class": "agent", "rank": 1070, "previous_rank": 1062, "rank_delta": -8, "stars": 13, "stars_fmt": "13", "forks": 7, "forks_fmt": "7", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 35.3, "description": "TradeOS MCP lets you connect TradeOS trading intelligence to MCP-compatible AI tools, so your assistant can analyze markets, search tickers, compare spreads, use macro context, and manage custom trading agents directly from natural-language prompts.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 617, "npm_package": "@tradeos/tradeos-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 25, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.167, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:47:58Z", "slug": "tradeos", "full_fetched_at": "2026-10-12T00:02:28Z", "source_note": "", "github_homepage": "https://ai.tradeos.xyz/", "homepage_icon": "/site-icons/122207436522561c.png", "homepage_icon_for": "https://ai.tradeos.xyz/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (tradeos-skills/.claude-plugin/plugin.json)", "Found credential/config marker 'TRADEOS_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: tradeos-skills/.claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@tradeos/tradeos-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@tradeos/tradeos-mcp", "version": "1.0.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:28Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.6, "trust_score_v2": 46.6, "rank_v2": 1070, "rank_v2_delta": 335, "trust_v2_adjustment": 2.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.6, "maintenance": 11.6, "adoption": 4.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "scientific-illustrator", "repo": "icebird1998/scientific-illustrator", "display_repo": "", "url": "https://github.com/icebird1998/scientific-illustrator", "listing_class": "agent", "rank": 1071, "previous_rank": 1063, "rank_delta": -8, "stars": 920, "stars_fmt": "920", "forks": 70, "forks_fmt": "70", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.7, "description": "Editable scientific figures in PowerPoint and draw.io via Codex/MCP with Designer-Drawer-Reviewer-Corrector quality gates.", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 618, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.421, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T23:29:49Z", "slug": "scientific-illustrator", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.5, "trust_score_v2": 46.5, "rank_v2": 1071, "rank_v2_delta": 219, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.0, "maintenance": 9.7, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Vibe Skills", "repo": "foryourhealth111-pixel/Vibe-Skills", "display_repo": "", "url": "https://github.com/foryourhealth111-pixel/Vibe-Skills", "listing_class": "skill", "rank": 283, "previous_rank": 280, "rank_delta": -3, "stars": 3668, "stars_fmt": "3.7k", "forks": 327, "forks_fmt": "327", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.3, "description": "Intelligent Skill routing and workflow orchestration for AI agents — +21.12 pp reward, −29.6% tokens on SkillsBench with DeepSeekV4Flash-VE.", "language": "Python", "open_issues": 36, "category": "Agent Skills", "category_rank": 283, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:13:10Z", "slug": "vibe-skills", "full_fetched_at": "2026-10-12T16:01:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 46.5, "trust_score_v2": 46.5, "rank_v2": 283, "rank_v2_delta": 1019, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 11.7, "maintenance": 9.2, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Genshijin", "repo": "InterfaceX-co-jp/genshijin", "display_repo": "", "url": "https://github.com/InterfaceX-co-jp/genshijin", "listing_class": "skill", "rank": 284, "previous_rank": 281, "rank_delta": -3, "stars": 330, "stars_fmt": "330", "forks": 14, "forks_fmt": "14", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 0, "commits_low_confidence": true, "score": 45.5, "description": "genshijin 原始人 🗿| Claude Code / Codex等AIエージェント 向け超圧縮コミュニケーションスキル。caveman の日本語版をベースに、日本語特有の冗長表現に最適化。", "language": "JavaScript", "open_issues": 5, "category": "Agent Skills", "category_rank": 284, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.134, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:01:19Z", "slug": "genshijin", "full_fetched_at": "2026-10-12T16:02:27Z", "source_note": "", "github_homepage": "https://interfacex-co-jp.github.io/genshijin", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-servers/genshijin-shrink/README.md", "Found MCP-related server path: mcp-servers/genshijin-shrink/compress.js" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in benchmarks/requirements.txt", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.5, "trust_score_v2": 46.5, "rank_v2": 284, "rank_v2_delta": 1043, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.7, "maintenance": 11.9, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fable Method", "repo": "Sahir619/fable-method", "display_repo": "", "url": "https://github.com/Sahir619/fable-method", "listing_class": "skill", "rank": 285, "previous_rank": 288, "rank_delta": 3, "stars": 2299, "stars_fmt": "2.3k", "forks": 329, "forks_fmt": "329", "last_push": "2026-10-03", "days_ago": 9, "weekly_commits": 1, "commits_low_confidence": false, "score": 59.5, "description": "The Fable Workflow: how Claude Fable 5 worked, distilled into skills any model can run, with the eval that keeps it honest. Think / act / prove.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 285, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.062, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-25T22:09:41Z", "slug": "fable-method", "full_fetched_at": "2026-10-12T00:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.5, "trust_score_v2": 46.5, "rank_v2": 285, "rank_v2_delta": 1004, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.1, "maintenance": 12.6, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "YoMo", "repo": "yomorun/yomo", "display_repo": "", "url": "https://github.com/yomorun/yomo", "listing_class": "agent", "rank": 1072, "previous_rank": 1059, "rank_delta": -13, "stars": 1929, "stars_fmt": "1.9k", "forks": 150, "forks_fmt": "150", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 9, "commits_low_confidence": false, "score": 65.5, "description": "🦖 Serverless AI Agent Framework with Geo-distributed Edge AI Infra.", "language": "Rust", "open_issues": 0, "category": "Agent Frameworks", "category_rank": 96, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 4.8, "scorecard_checks": { "Maintained": 10, "Code-Review": 10, "Token-Permissions": 0, "Binary-Artifacts": 10, "Dangerous-Workflow": 10, "Pinned-Dependencies": 0, "CII-Best-Practices": 0, "License": 0, "Security-Policy": 0, "Fuzzing": 0, "Signed-Releases": 0, "Packaging": 10, "Branch-Protection": -1, "SAST": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:22Z", "slug": "yomo", "full_fetched_at": "2026-10-12T08:02:40Z", "source_note": "", "github_homepage": "https://yomo.run", "homepage_icon": "/site-icons/20d9e7ce5281bb6a.png", "homepage_icon_for": "https://yomo.run", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "yomorun/yomo", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "unlicensed", "license_override": "", "trust_score": 46.4, "trust_score_v2": 46.4, "rank_v2": 1072, "rank_v2_delta": 234, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.5, "identity": 10.8, "transparency": 4.1, "maintenance": 15.1, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "User Research Skill", "repo": "cookiy-ai/user-research-skill", "display_repo": "", "url": "https://github.com/cookiy-ai/user-research-skill", "listing_class": "skill", "rank": 286, "previous_rank": 282, "rank_delta": -4, "stars": 1569, "stars_fmt": "1.6k", "forks": 67, "forks_fmt": "67", "last_push": "2026-08-19", "days_ago": 54, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.2, "description": "Cookiy AI Skill for AI agents (Claude, Codex, Cursor, OpenClaw) — end-to-end user research: AI interviews, synthetic users, quant surveys, participant recruitment.", "language": "Shell", "open_issues": 1, "category": "Agent Skills", "category_rank": 286, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.791, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T17:53:51Z", "slug": "user-research-skill", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "https://cookiy.ai", "homepage_icon": "/site-icons/e13c6ae08c0f7653.png", "homepage_icon_for": "https://cookiy.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/user-research/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.4, "trust_score_v2": 46.4, "rank_v2": 286, "rank_v2_delta": 1009, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 11.5, "maintenance": 8.4, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Generative Media Skills", "repo": "Anil-matcha/open-dots", "display_repo": "", "url": "https://github.com/Anil-matcha/open-dots", "listing_class": "skill", "rank": 287, "previous_rank": 283, "rank_delta": -4, "stars": 5727, "stars_fmt": "5.7k", "forks": 689, "forks_fmt": "689", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 38, "commits_low_confidence": false, "score": 80.4, "description": "Open-source, self-hosted AI agent workspace and alternative to OpenAI Dots, Meta Muse, Grok Bot, Instinct, Manus Cue, Claude Cowork, and ChatGPT agent. MIT-licensed; includes chat, connectors, approvals, and optional computer use. Early prototype.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 287, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.643, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 0, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:41:42Z", "slug": "generative-media-skills", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in backend/pyproject.toml", "README/docs also mention Postgres", "Found credential/config marker 'BOAT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "Anil-matcha/open-dots", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "unlicensed", "license_override": "", "trust_score": 46.4, "trust_score_v2": 46.4, "rank_v2": 287, "rank_v2_delta": 976, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 2.5, "maintenance": 18.3, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "One Search MCP", "repo": "yokingma/one-search-mcp", "display_repo": "", "url": "https://github.com/yokingma/one-search-mcp", "listing_class": "agent", "rank": 1073, "previous_rank": 1068, "rank_delta": -5, "stars": 145, "stars_fmt": "145", "forks": 20, "forks_fmt": "20", "last_push": "2026-07-31", "days_ago": 73, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.0, "description": "🚀 OneSearch MCP Server: Web Search & Scraper & Extract, Support agent-browser, SearXNG, Tavily, DuckDuckGo, Bing, etc.", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 619, "npm_package": "one-search-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 176, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.016, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:23:23Z", "slug": "one-search-mcp", "full_fetched_at": "2026-10-12T04:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Firecrawl", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Tavily dependency 'tavily' in package.json", "README/docs also mention Tavily", "Found Firecrawl credential/config marker 'FIRECRAWL_API_KEY'", "README/docs also mention Firecrawl" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "search" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities", "Found search dependency 'tavily' in package.json", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'one-search-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "one-search-mcp", "version": "1.2.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:11Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.3, "trust_score_v2": 46.3, "rank_v2": 1073, "rank_v2_delta": 376, "trust_v2_adjustment": 3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.6, "maintenance": 7.1, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Super Agent Party", "repo": "heshengtao/super-agent-party", "display_repo": "", "url": "https://github.com/heshengtao/super-agent-party", "listing_class": "skill", "rank": 288, "previous_rank": 284, "rank_delta": -4, "stars": 2733, "stars_fmt": "2.7k", "forks": 295, "forks_fmt": "295", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 3, "commits_low_confidence": true, "score": 64.3, "description": "⭐ All-in-one AI companion! Super Agent Party = Self hosted neuro sama + openclaw! ⭐ 全能AI伴侣！超级智能体派对 = 自托管neuro sama + openclaw!", "language": "JavaScript", "open_issues": 14, "category": "Agent Skills", "category_rank": 288, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 4, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:06:23Z", "slug": "super-agent-party", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "https://www.agentparty.top", "homepage_icon": "/site-icons/f9e4e7755da7440b.png", "homepage_icon_for": "https://www.agentparty.top", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "E2B", "ElevenLabs", "Multi-provider (LiteLLM)", "OpenAI", "Tavily" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found ElevenLabs dependency 'elevenlabs' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found Tavily dependency 'tavily' in pyproject.toml", "Found E2B dependency 'e2b' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 46.3, "trust_score_v2": 46.3, "rank_v2": 288, "rank_v2_delta": 919, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 11.4, "maintenance": 13.1, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Grok CLI", "repo": "superagent-ai/grok-cli", "display_repo": "", "url": "https://github.com/superagent-ai/grok-cli", "listing_class": "agent", "rank": 1074, "previous_rank": 1074, "rank_delta": 0, "stars": 3490, "stars_fmt": "3.5k", "forks": 423, "forks_fmt": "423", "last_push": "2026-07-06", "days_ago": 98, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.9, "description": "An open-source coding agent for the Grok API", "language": "TypeScript", "open_issues": 18, "category": "Coding Agents", "category_rank": 61, "npm_package": "grok-dev", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 386, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T01:54:57Z", "slug": "grok-cli", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found xAI Grok dependency '@ai-sdk/xai' in package.json", "Found xAI Grok credential/config marker 'GROK_API_KEY'", "README/docs also mention xAI Grok" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'grok-dev' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.3, "trust_score_v2": 46.3, "rank_v2": 1074, "rank_v2_delta": 198, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.9, "identity": 10.8, "transparency": 11.1, "maintenance": 5.5, "adoption": 12.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "openocta", "repo": "openocta/openocta", "display_repo": "", "url": "https://github.com/openocta/openocta", "listing_class": "agent", "rank": 1075, "previous_rank": 1071, "rank_delta": -4, "stars": 3200, "stars_fmt": "3.2k", "forks": 397, "forks_fmt": "397", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 1, "commits_low_confidence": false, "score": 58.3, "description": "OpenOcta is an open-source AIOps Agent installed on Windows & macOS. ", "language": "TypeScript", "open_issues": 27, "category": "Browser & Computer Use", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:47:29Z", "slug": "openocta", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "http://www.openocta.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 46.3, "trust_score_v2": 46.3, "rank_v2": 1075, "rank_v2_delta": 194, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.0, "maintenance": 11.5, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Webflow MCP Server", "repo": "webflow/mcp-server", "display_repo": "", "url": "https://github.com/webflow/mcp-server", "listing_class": "agent", "rank": 1076, "previous_rank": 1070, "rank_delta": -6, "stars": 141, "stars_fmt": "141", "forks": 36, "forks_fmt": "36", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 0, "commits_low_confidence": true, "score": 44.4, "description": "Model Context Protocol (MCP) server for the Webflow Data API.", "language": "TypeScript", "open_issues": 18, "category": "MCP Servers", "category_rank": 620, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.34, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:51:57Z", "slug": "webflow-mcp-server", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'WEBFLOW_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.2, "trust_score_v2": 46.2, "rank_v2": 1076, "rank_v2_delta": 271, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.1, "identity": 10.8, "transparency": 11.5, "maintenance": 11.6, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Brasil", "repo": "Mcp-Brasil/mcp-brasil", "display_repo": "", "url": "https://github.com/Mcp-Brasil/mcp-brasil", "listing_class": "agent", "rank": 1077, "previous_rank": 1073, "rank_delta": -4, "stars": 1807, "stars_fmt": "1.8k", "forks": 280, "forks_fmt": "280", "last_push": "2026-09-19", "days_ago": 23, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.8, "description": "MCP Server para 70 APIs públicas brasileiras", "language": "Python", "open_issues": 19, "category": "MCP Servers", "category_rank": 621, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:30:20Z", "slug": "mcp-brasil", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found credential/config marker 'TRANSPARENCIA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.2, "trust_score_v2": 46.2, "rank_v2": 1077, "rank_v2_delta": 267, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.4, "maintenance": 10.5, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Arduino MCP Server", "repo": "hardware-mcp/arduino-mcp-server", "display_repo": "", "url": "https://github.com/hardware-mcp/arduino-mcp-server", "listing_class": "agent", "rank": 1078, "previous_rank": 1066, "rank_delta": -12, "stars": 21, "stars_fmt": "21", "forks": 2, "forks_fmt": "2", "last_push": "2026-08-22", "days_ago": 51, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.4, "description": "An open source Arduino MCP server that enables AI assistants to interact with Arduino using structured tool access via the Model Context Protocol.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 622, "npm_package": "arduino-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 130, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.421, "scorecard_score": 2.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:38:04Z", "slug": "arduino-mcp-server", "full_fetched_at": "2026-10-12T16:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'arduino-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "arduino-mcp-server", "version": "0.2.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:16Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.2, "trust_score_v2": 46.2, "rank_v2": 1078, "rank_v2_delta": 415, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 10.2, "maintenance": 8.6, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Developer Kit", "repo": "giuseppe-trisciuoglio/developer-kit", "display_repo": "", "url": "https://github.com/giuseppe-trisciuoglio/developer-kit", "listing_class": "skill", "rank": 289, "previous_rank": 286, "rank_delta": -3, "stars": 357, "stars_fmt": "357", "forks": 41, "forks_fmt": "41", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.4, "description": " Modular plugin marketplace for Claude Code and agentic CLIs, with validated, spec-driven skills, agents, commands, and workflows for Java, TypeScript, Python, PHP, AWS, and AI.", "language": "Python", "open_issues": 16, "category": "Agent Skills", "category_rank": 289, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T17:17:39Z", "slug": "developer-kit", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: plugins/developer-kit-java/skills/langchain4j-mcp-server-patterns/SKILL.md", "Found MCP-related server path: plugins/developer-kit-java/skills/langchain4j-mcp-server-patterns/assets/mcp-server-template.java" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/developer-kit-ai/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 289, "rank_v2_delta": 1020, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 12.8, "maintenance": 9.9, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "fastctx", "repo": "yc-duan/fastctx", "display_repo": "", "url": "https://github.com/yc-duan/fastctx", "listing_class": "agent", "rank": 1079, "previous_rank": 1072, "rank_delta": -7, "stars": 1464, "stars_fmt": "1.5k", "forks": 55, "forks_fmt": "55", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.0, "description": "Fast, context-efficient repository tools for AI agents (MCP)", "language": "Rust", "open_issues": 21, "category": "MCP Servers", "category_rank": 623, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-09T21:52:35Z", "slug": "fastctx", "full_fetched_at": "2026-10-12T04:02:01Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 1079, "rank_v2_delta": 310, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.6, "maintenance": 9.5, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skill Based Architecture", "repo": "WoJiSama/skill-based-architecture", "display_repo": "", "url": "https://github.com/WoJiSama/skill-based-architecture", "listing_class": "skill", "rank": 290, "previous_rank": 285, "rank_delta": -5, "stars": 611, "stars_fmt": "611", "forks": 51, "forks_fmt": "51", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 2, "commits_low_confidence": false, "score": 52.6, "description": "A meta-skill that produces skills. Point it at any codebase and it distills the project's rules, workflows, and hard-won lessons into a dedicated skills// directory — a project skill that becomes the single source of truth every AI agent (Cursor, Claude Code, Codex, Windsurf, Gemini)…", "language": "Shell", "open_issues": 0, "category": "Agent Skills", "category_rank": 290, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:37:03Z", "slug": "skill-based-architecture", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 290, "rank_v2_delta": 1017, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.6, "maintenance": 12.4, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Grok MCP", "repo": "howardpen9/grok-mcp", "display_repo": "", "url": "https://github.com/howardpen9/grok-mcp", "listing_class": "agent", "rank": 1080, "previous_rank": 1069, "rank_delta": -11, "stars": 11, "stars_fmt": "11", "forks": 3, "forks_fmt": "3", "last_push": "2026-07-28", "days_ago": 76, "weekly_commits": 0, "commits_low_confidence": false, "score": 23.7, "description": "MCP server that wraps the xAI Grok CLI. Lets Claude Code, Cursor, Cline, and any MCP host use Grok as a peer code reviewer, adversary, and second-opinion consultant.", "language": "TypeScript", "open_issues": 20, "category": "MCP Servers", "category_rank": 624, "npm_package": "grok-cli-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 82, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.478, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:29:33Z", "slug": "grok-mcp", "full_fetched_at": "2026-10-12T16:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found xAI Grok credential/config marker 'XAI_API_KEY'", "README/docs also mention xAI Grok" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'grok-cli-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "grok-cli-mcp", "version": "0.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:20Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 1080, "rank_v2_delta": 396, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 11.5, "maintenance": 6.9, "adoption": 5.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Nouz", "repo": "Semiotronika/NOUZ-MCP", "display_repo": "", "url": "https://github.com/Semiotronika/NOUZ-MCP", "listing_class": "agent", "rank": 1081, "previous_rank": 1080, "rank_delta": -1, "stars": 24, "stars_fmt": "24", "forks": 0, "forks_fmt": "0", "last_push": "2026-09-02", "days_ago": 40, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.0, "description": "Локальный семантический граф и MCP-сервер для Markdown и Obsidian", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 625, "npm_package": "", "crate_package": "", "pypi_package": "nouz-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 151, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.34, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-01T08:37:20Z", "slug": "nouz", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "https://semiotronika.ru/nouz/", "homepage_icon": "/site-icons/47af28999d7c679e.png", "homepage_icon_for": "https://semiotronika.ru/nouz/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'EMBED_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'nouz-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "nouz-mcp", "version": "4.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:08Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 1081, "rank_v2_delta": 353, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.1, "maintenance": 9.3, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Druid MCP Server", "repo": "iunera/druid-mcp-server", "display_repo": "", "url": "https://github.com/iunera/druid-mcp-server", "listing_class": "agent", "rank": 1082, "previous_rank": 1075, "rank_delta": -7, "stars": 18, "stars_fmt": "18", "forks": 7, "forks_fmt": "7", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.1, "description": "A comprehensive Model Context Protocol (MCP) server for Apache Druid that provides extensive tools, resources, and AI-assisted prompts for managing and analyzing Druid clusters. Built with Spring Boot and Spring AI, this server enables seamless integration between AI assistants and Apache Druid…", "language": "Java", "open_issues": 0, "category": "MCP Servers", "category_rank": 626, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/iunera/druid-mcp-server:2.0.0", "vscode_extension": "", "weekly_downloads": 10629, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.304, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:41:01Z", "slug": "druid-mcp-server", "full_fetched_at": "2026-10-12T16:02:39Z", "source_note": "", "github_homepage": "https://www.iunera.com", "homepage_icon": "/site-icons/e973ac95cd4150d3.png", "homepage_icon_for": "https://www.iunera.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 1082, "rank_v2_delta": 310, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 10.8, "maintenance": 9.2, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LightMem", "repo": "zjunlp/LightMem", "display_repo": "", "url": "https://github.com/zjunlp/LightMem", "listing_class": "agent", "rank": 1083, "previous_rank": 1076, "rank_delta": -7, "stars": 1188, "stars_fmt": "1.2k", "forks": 116, "forks_fmt": "116", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 48.0, "description": "[ICLR 2026] LightMem: Lightweight and Efficient Memory-Augmented Generation", "language": "Python", "open_issues": 3, "category": "Memory & Knowledge", "category_rank": 44, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.64, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:50:46Z", "slug": "lightmem", "full_fetched_at": "2026-10-12T12:02:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Qdrant" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Qdrant dependency 'qdrant' in pyproject.toml", "README/docs also mention Qdrant" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'qdrant' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 1083, "rank_v2_delta": 276, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 10.7, "maintenance": 9.5, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Kronan MCP", "repo": "sandsower/kronan-mcp", "display_repo": "", "url": "https://github.com/sandsower/kronan-mcp", "listing_class": "agent", "rank": 1084, "previous_rank": 1077, "rank_delta": -7, "stars": 15, "stars_fmt": "15", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-04", "days_ago": 8, "weekly_commits": 2, "commits_low_confidence": true, "score": 38.5, "description": "MCP server for the Krónan grocery store API (Iceland)", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 627, "npm_package": "kronan-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 35, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:47:36Z", "slug": "kronan-mcp", "full_fetched_at": "2026-10-12T00:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'KRONAN_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'kronan-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "kronan-mcp", "version": "1.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:06Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.1, "trust_score_v2": 46.1, "rank_v2": 1084, "rank_v2_delta": 390, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.6, "identity": 10.8, "transparency": 10.3, "maintenance": 12.4, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "CometChat Docs", "repo": "cometchat/docs-mcp", "display_repo": "", "url": "https://github.com/cometchat/docs-mcp", "listing_class": "agent", "rank": 1085, "previous_rank": 1082, "rank_delta": -3, "stars": 111, "stars_fmt": "111", "forks": 4, "forks_fmt": "4", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.8, "description": "CometChat docs search + implementation bundles: add chat, voice, video & moderation to your app through your AI coding agent.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 628, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.037, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-05T17:59:03Z", "slug": "cometchat-docs", "full_fetched_at": "2026-10-12T12:02:53Z", "source_note": "", "github_homepage": "https://www.cometchat.com/docs/mcp-server", "homepage_icon": "/site-icons/6967405a2baf23fb.png", "homepage_icon_for": "https://www.cometchat.com/docs/mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 46.0, "trust_score_v2": 46.0, "rank_v2": 1085, "rank_v2_delta": 298, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 12.2, "maintenance": 10.7, "adoption": 4.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fathom MCP Server", "repo": "agencyenterprise/fathom-mcp-server", "display_repo": "", "url": "https://github.com/agencyenterprise/fathom-mcp-server", "listing_class": "agent", "rank": 1086, "previous_rank": 1078, "rank_delta": -8, "stars": 16, "stars_fmt": "16", "forks": 14, "forks_fmt": "14", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 4, "commits_low_confidence": false, "score": 44.9, "description": "An mcp server built for fathom and works in claude.", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 629, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.28, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:18:31Z", "slug": "fathom-mcp-server", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "https://fathom-mcp-server.com", "homepage_icon": "/site-icons/818eaa0a28dece89.png", "homepage_icon_for": "https://fathom-mcp-server.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres dependency 'pg' in package.json", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.0, "trust_score_v2": 46.0, "rank_v2": 1086, "rank_v2_delta": 257, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.6, "maintenance": 14.0, "adoption": 3.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "UnrealMCP — AI Bridge for Unreal Engine 5", "repo": "aadeshrao123/Unreal-MCP", "display_repo": "", "url": "https://github.com/aadeshrao123/Unreal-MCP", "listing_class": "agent", "rank": 1087, "previous_rank": 1079, "rank_delta": -8, "stars": 40, "stars_fmt": "40", "forks": 9, "forks_fmt": "9", "last_push": "2026-08-06", "days_ago": 67, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.1, "description": "AI bridge for Unreal Engine 5. Control the editor from Claude Code, Cursor, Windsurf, and any MCP client. Community edition of CodeFizz Editor Agent, which has 900+ commands across 28 categories on UE 5.6, 5.7 and 5.8.", "language": "C++", "open_issues": 0, "category": "MCP Servers", "category_rank": 630, "npm_package": "", "crate_package": "", "pypi_package": "unrealmcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 33, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.03, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:53:59Z", "slug": "unrealmcp-ai-bridge-for-unreal-engine-5", "full_fetched_at": "2026-10-12T08:02:21Z", "source_note": "", "github_homepage": "https://codefizz.dev", "homepage_icon": "/site-icons/dfcf30449be19592.png", "homepage_icon_for": "https://codefizz.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'unrealmcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "unrealmcp", "version": "1.3.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:21Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MPL-2.0", "license_type": "open", "license_override": "", "trust_score": 46.0, "trust_score_v2": 46.0, "rank_v2": 1087, "rank_v2_delta": 410, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 11.4, "maintenance": 7.5, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Fattureincloud MCP", "repo": "aringad/fattureincloud-mcp", "display_repo": "", "url": "https://github.com/aringad/fattureincloud-mcp", "listing_class": "agent", "rank": 1088, "previous_rank": 1083, "rank_delta": -5, "stars": 23, "stars_fmt": "23", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-01", "days_ago": 41, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.6, "description": "MCP Server for Fatture in Cloud API - Gestione fatture elettroniche italiane con Claude AI", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 631, "npm_package": "", "crate_package": "", "pypi_package": "fattureincloud-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 45, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T16:57:52Z", "slug": "fattureincloud-mcp", "full_fetched_at": "2026-10-12T12:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'FIC_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'fattureincloud-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "fattureincloud-mcp", "version": "2.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:24Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 46.0, "trust_score_v2": 46.0, "rank_v2": 1088, "rank_v2_delta": 390, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.3, "maintenance": 9.3, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Skills Marketplace", "repo": "mhattingpete/claude-skills-marketplace", "display_repo": "", "url": "https://github.com/mhattingpete/claude-skills-marketplace", "listing_class": "skill", "rank": 291, "previous_rank": 287, "rank_delta": -4, "stars": 682, "stars_fmt": "682", "forks": 97, "forks_fmt": "97", "last_push": "2026-07-25", "days_ago": 79, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.3, "description": "Claude Code Skills for software engineering workflows - Git automation, testing, and code review", "language": "HTML", "open_issues": 4, "category": "Agent Skills", "category_rank": 291, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.955, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:58:04Z", "slug": "claude-skills-marketplace", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: execution-runtime/mcp-server/mcp_server.py", "Found MCP-related server path: execution-runtime/mcp-server/security/pii_detector.py", "Found MCP dependency 'fastmcp' in execution-runtime/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (code-operations-plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 46.0, "trust_score_v2": 46.0, "rank_v2": 291, "rank_v2_delta": 1091, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 11.2, "maintenance": 6.7, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wudao A-Share Stock Data MCP", "repo": "jcdreamjc/wudao-mcp", "display_repo": "", "url": "https://github.com/jcdreamjc/wudao-mcp", "listing_class": "agent", "rank": 1089, "previous_rank": 1081, "rank_delta": -8, "stars": 11, "stars_fmt": "11", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 5, "commits_low_confidence": true, "score": 42.8, "description": "Remote MCP server for China A-share data: 57 read-only tools plus 6 watchlist tools for AI agents. Limit-up ladder, themes, capital flow, auctions, events.", "language": "HTML", "open_issues": 1, "category": "MCP Servers", "category_rank": 632, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 8, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:02:12Z", "slug": "wudao-a-share-stock-data-mcp", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://data.quicktiny.cn/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: connectors/workbuddy/wudao-a-share-stock-data/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'WUDAO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.9, "trust_score_v2": 45.9, "rank_v2": 1089, "rank_v2_delta": 271, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 12.4, "maintenance": 13.3, "adoption": 2.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Product Manager Skills", "repo": "deanpeters/Product-Manager-Skills", "display_repo": "", "url": "https://github.com/deanpeters/Product-Manager-Skills", "listing_class": "skill", "rank": 292, "previous_rank": 292, "rank_delta": 0, "stars": 7283, "stars_fmt": "7.3k", "forks": 864, "forks_fmt": "864", "last_push": "2026-09-01", "days_ago": 41, "weekly_commits": 0, "commits_low_confidence": false, "score": 56.3, "description": "Product Management skills framework built on battle-tested methods for Claude Code, Cowork, Codex, and AI agents.", "language": "Shell", "open_issues": 7, "category": "Agent Skills", "category_rank": 292, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.12, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:14:58Z", "slug": "product-manager-skills", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in app/requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in app/requirements.txt", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 45.9, "trust_score_v2": 45.9, "rank_v2": 292, "rank_v2_delta": 1001, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.8, "maintenance": 9.3, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Browser Act Skills", "repo": "browser-act/skills", "display_repo": "", "url": "https://github.com/browser-act/skills", "listing_class": "skill", "rank": 293, "previous_rank": 291, "rank_delta": -2, "stars": 6133, "stars_fmt": "6.1k", "forks": 310, "forks_fmt": "310", "last_push": "2026-08-24", "days_ago": 49, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.5, "description": "Browser automation CLI built for AI agents. Break through anti-bot walls, hand off to humans across platforms when stuck. Parallel multi-task execution, independent multi-session operation, isolated multi-account browsing.", "language": "Python", "open_issues": 8, "category": "Agent Skills", "category_rank": 293, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:49:33Z", "slug": "browser-act-skills", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "https://www.browseract.com/?co-from=github", "homepage_icon": "/site-icons/5d02c3d13b2da50a.png", "homepage_icon_for": "https://www.browseract.com/?co-from=github", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.8, "trust_score_v2": 45.8, "rank_v2": 293, "rank_v2_delta": 1033, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 12.0, "maintenance": 8.7, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Wondelai Skills", "repo": "wondelai/skills", "display_repo": "", "url": "https://github.com/wondelai/skills", "listing_class": "skill", "rank": 294, "previous_rank": 293, "rank_delta": -1, "stars": 2389, "stars_fmt": "2.4k", "forks": 241, "forks_fmt": "241", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.1, "description": "Wondel.ai Agent Skills — Business, Marketing, UX & Coding Frameworks from Bestselling Books. 50 skills + 12 guided journeys for Claude Code, Codex, Cursor & other agentskills.io agents.", "language": "Shell", "open_issues": 6, "category": "Agent Skills", "category_rank": 294, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.122, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T00:28:19Z", "slug": "wondelai-skills", "full_fetched_at": "2026-10-12T00:02:41Z", "source_note": "", "github_homepage": "https://skills.wondel.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.8, "trust_score_v2": 45.8, "rank_v2": 294, "rank_v2_delta": 1024, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.8, "maintenance": 9.9, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "HumanLayer", "repo": "humanlayer/humanlayer", "display_repo": "", "url": "https://github.com/humanlayer/humanlayer", "listing_class": "agent", "rank": 1090, "previous_rank": 1084, "rank_delta": -6, "stars": 11689, "stars_fmt": "11.7k", "forks": 961, "forks_fmt": "961", "last_push": "2026-06-19", "days_ago": 115, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.3, "description": "The best way to get AI coding agents to solve hard problems in complex codebases.", "language": "TypeScript", "open_issues": 51, "category": "Coding Agents", "category_rank": 62, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.53, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T00:45:58Z", "slug": "humanlayer", "full_fetched_at": "2026-10-12T04:02:44Z", "source_note": "", "github_homepage": "https://humanlayer.dev/code", "homepage_icon": "/site-icons/7c9f33c1f04a466a.png", "homepage_icon_for": "https://humanlayer.dev/code", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: hld/daemon/mcp_server_integration_test.go", "Found MCP-related server path: hld/mcp/server.go", "Found MCP dependency '@modelcontextprotocol/sdk' in hlyr/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude/commands') in hlyr/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 45.8, "trust_score_v2": 45.8, "rank_v2": 1090, "rank_v2_delta": 316, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 11.6, "maintenance": 4.3, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "KDAN PDF", "repo": "KDAN-PDF/KDAN-PDF-MCP", "display_repo": "", "url": "https://github.com/KDAN-PDF/KDAN-PDF-MCP", "listing_class": "agent", "rank": 1091, "previous_rank": 1085, "rank_delta": -6, "stars": 57, "stars_fmt": "57", "forks": 2, "forks_fmt": "2", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 1, "commits_low_confidence": false, "score": 39.0, "description": "Connect Claude and ChatGPT to KDAN PDF — upload, edit, compress, protect, redact, and compare PDFs in chat.", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 633, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.286, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:24:29Z", "slug": "kdan-pdf", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "https://pdf-reader.kdandoc.com/", "homepage_icon": "/site-icons/21f3fa844d913cc7.png", "homepage_icon_for": "https://pdf-reader.kdandoc.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.8, "trust_score_v2": 45.8, "rank_v2": 1091, "rank_v2_delta": 316, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.3, "maintenance": 11.9, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Browserbase MCP Server", "repo": "browserbase/mcp-server-browserbase", "display_repo": "", "url": "https://github.com/browserbase/mcp-server-browserbase", "listing_class": "agent", "rank": 1092, "previous_rank": 1086, "rank_delta": -6, "stars": 3402, "stars_fmt": "3.4k", "forks": 372, "forks_fmt": "372", "last_push": "2026-07-20", "days_ago": 84, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.7, "description": "Allow LLMs to control a browser with Browserbase and Stagehand", "language": "TypeScript", "open_issues": 34, "category": "MCP Servers", "category_rank": 634, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.57, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:46:56Z", "slug": "browserbase-mcp-server", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "https://stagehand.dev", "homepage_icon": "/site-icons/8216f6a04d6bd8a6.png", "homepage_icon_for": "https://stagehand.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Browserbase", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini", "Found Browserbase dependency 'browserbase' in package.json", "Found Browserbase credential/config marker 'BROWSERBASE_API_KEY'", "README/docs also mention Browserbase" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "browserbase/mcp-server-browserbase", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 45.7, "trust_score_v2": 45.7, "rank_v2": 1092, "rank_v2_delta": 253, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 11.8, "maintenance": 6.4, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "J-Space Cognition Suite", "repo": "Tiger3807861189/J-Space-Cognition-Suite", "display_repo": "", "url": "https://github.com/Tiger3807861189/J-Space-Cognition-Suite", "listing_class": "skill", "rank": 295, "previous_rank": 294, "rank_delta": -1, "stars": 2998, "stars_fmt": "3.0k", "forks": 223, "forks_fmt": "223", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 1, "commits_low_confidence": false, "score": 56.7, "description": "J-Space Cognition Suite — a model-agnostic inference-time control suite for deep reasoning, long-horizon work, verification, and recovery. Based on Anthropic's J-space global workspace research.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 295, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:11:19Z", "slug": "j-space-cognition-suite", "full_fetched_at": "2026-10-12T16:02:01Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 45.7, "trust_score_v2": 45.7, "rank_v2": 295, "rank_v2_delta": 1034, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.1, "maintenance": 11.3, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Scrapegraph MCP", "repo": "ScrapeGraphAI/scrapegraph-mcp", "display_repo": "", "url": "https://github.com/ScrapeGraphAI/scrapegraph-mcp", "listing_class": "agent", "rank": 1093, "previous_rank": 1087, "rank_delta": -6, "stars": 115, "stars_fmt": "115", "forks": 38, "forks_fmt": "38", "last_push": "2026-07-17", "days_ago": 87, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.7, "description": "ScapeGraph MCP Server", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 635, "npm_package": "", "crate_package": "", "pypi_package": "scrapegraph-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 119, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.27, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T16:47:17Z", "slug": "scrapegraph-mcp", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SGAI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'scrapegraph-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "scrapegraph-mcp", "version": "1.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:08Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.7, "trust_score_v2": 45.7, "rank_v2": 1093, "rank_v2_delta": 393, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.0, "maintenance": 6.2, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Godot MCP", "repo": "Coding-Solo/godot-mcp", "display_repo": "", "url": "https://github.com/Coding-Solo/godot-mcp", "listing_class": "agent", "rank": 1094, "previous_rank": 1093, "rank_delta": -1, "stars": 6025, "stars_fmt": "6.0k", "forks": 478, "forks_fmt": "478", "last_push": "2026-04-16", "days_ago": 179, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.5, "description": "MCP server for interfacing with Godot game engine. Provides tools for launching the editor, running projects, and capturing debug output.", "language": "JavaScript", "open_issues": 38, "category": "MCP Servers", "category_rank": 636, "npm_package": "@coding-solo/godot-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9763, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.45, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:31:41Z", "slug": "godot-mcp", "full_fetched_at": "2026-10-12T04:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "filesystem" ], "confidence": "medium", "evidence": [ "Found filesystem dependency 'fs-extra' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@coding-solo/godot-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@coding-solo/godot-mcp", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:22Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.7, "trust_score_v2": 45.7, "rank_v2": 1094, "rank_v2_delta": 401, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 10.1, "maintenance": 0.1, "adoption": 14.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Pty MCP", "repo": "raychao-oao/pty-mcp", "display_repo": "", "url": "https://github.com/raychao-oao/pty-mcp", "listing_class": "agent", "rank": 1095, "previous_rank": 1088, "rank_delta": -7, "stars": 19, "stars_fmt": "19", "forks": 2, "forks_fmt": "2", "last_push": "2026-10-02", "days_ago": 10, "weekly_commits": 4, "commits_low_confidence": false, "score": 42.3, "description": "MCP server for interactive terminal sessions — local shells, SSH, serial ports, and persistent remote sessions", "language": "Go", "open_issues": 1, "category": "MCP Servers", "category_rank": 637, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:42:46Z", "slug": "pty-mcp", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: internal/mcp/server.go" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)", "Found credential/config marker 'PTY_MCP_AUDIT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.6, "trust_score_v2": 45.6, "rank_v2": 1095, "rank_v2_delta": 266, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.9, "maintenance": 14.1, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Apple Music", "repo": "Cifero74/mcp-apple-music", "display_repo": "", "url": "https://github.com/Cifero74/mcp-apple-music", "listing_class": "agent", "rank": 1096, "previous_rank": 1089, "rank_delta": -7, "stars": 44, "stars_fmt": "44", "forks": 10, "forks_fmt": "10", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 5, "commits_low_confidence": true, "score": 49.0, "description": "Full Apple Music integration for Claude via MCP — search catalog, manage library & playlists", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 638, "npm_package": "", "crate_package": "", "pypi_package": "mcp-apple-music-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 91, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.273, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T09:57:57Z", "slug": "mcp-apple-music", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DEVELOPER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-apple-music-server' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.6, "trust_score_v2": 45.6, "rank_v2": 1096, "rank_v2_delta": 273, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.7, "identity": 10.8, "transparency": 10.1, "maintenance": 13.4, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "CleanSlice", "repo": "CleanSlice/mcp", "display_repo": "", "url": "https://github.com/CleanSlice/mcp", "listing_class": "agent", "rank": 1097, "previous_rank": 1092, "rank_delta": -5, "stars": 18, "stars_fmt": "18", "forks": 1, "forks_fmt": "1", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 3, "commits_low_confidence": false, "score": 40.1, "description": "MCP (Model Context Protocol) server for CleanSlice architecture — connect Claude Code, Cursor, Windsurf to CleanSlice documentation.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 639, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.087, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T23:04:33Z", "slug": "cleanslice", "full_fetched_at": "2026-10-12T12:03:02Z", "source_note": "", "github_homepage": "https://mcp.cleanslice.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.5, "trust_score_v2": 45.5, "rank_v2": 1097, "rank_v2_delta": 321, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.3, "maintenance": 13.7, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Web Scout MCP", "repo": "pinkpixel-dev/web-scout-mcp", "display_repo": "", "url": "https://github.com/pinkpixel-dev/web-scout-mcp", "listing_class": "agent", "rank": 1098, "previous_rank": 1091, "rank_delta": -7, "stars": 136, "stars_fmt": "136", "forks": 16, "forks_fmt": "16", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.7, "description": "An MCP server providing web search and content extraction capabilities. Integrates DuckDuckGo search functionality and URL content extraction into your MCP environment, enabling AI assistants to search the web and extract webpage content.", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 640, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.259, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T17:13:22Z", "slug": "web-scout-mcp", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://pinkpixel.dev", "homepage_icon": "/site-icons/273cb7ccf68adfec.png", "homepage_icon_for": "https://pinkpixel.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 45.5, "trust_score_v2": 45.5, "rank_v2": 1098, "rank_v2_delta": 319, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 11.2, "maintenance": 11.1, "adoption": 5.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ryaker Appstore Connect MCP", "repo": "ryaker/appstore-connect-mcp", "display_repo": "", "url": "https://github.com/ryaker/appstore-connect-mcp", "listing_class": "agent", "rank": 1099, "previous_rank": 1090, "rank_delta": -9, "stars": 45, "stars_fmt": "45", "forks": 11, "forks_fmt": "11", "last_push": "2026-08-28", "days_ago": 45, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.8, "description": "Apple Store Connect MCP Server for Claude AI - iOS-compatible OAuth with comprehensive App Store Connect API integration", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 641, "npm_package": "@ryaker/appstore-connect-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 46, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:36:18Z", "slug": "ryaker-appstore-connect-mcp", "full_fetched_at": "2026-10-12T00:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Supabase" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Supabase dependency 'supabase' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@ryaker/appstore-connect-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@ryaker/appstore-connect-mcp", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:05Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.5, "trust_score_v2": 45.5, "rank_v2": 1099, "rank_v2_delta": 408, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.0, "maintenance": 9.0, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Heygen Com Skills", "repo": "heygen-com/skills", "display_repo": "", "url": "https://github.com/heygen-com/skills", "listing_class": "skill", "rank": 296, "previous_rank": 295, "rank_delta": -1, "stars": 476, "stars_fmt": "476", "forks": 79, "forks_fmt": "79", "last_push": "2026-07-14", "days_ago": 90, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.5, "description": "HeyGen AI agent skills — avatar creation and video production via the v3 Video Agent pipeline", "language": "Shell", "open_issues": 5, "category": "Agent Skills", "category_rank": 296, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.75, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:33:30Z", "slug": "heygen-com-skills", "full_fetched_at": "2026-10-12T16:02:17Z", "source_note": "", "github_homepage": "https://developers.heygen.com/docs/quick-start", "homepage_icon": "/site-icons/b86505513f713056.png", "homepage_icon_for": "https://developers.heygen.com/docs/quick-start", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'HEYGEN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.4, "trust_score_v2": 45.4, "rank_v2": 296, "rank_v2_delta": 1070, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.3, "identity": 10.8, "transparency": 12.2, "maintenance": 6.0, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AI Town", "repo": "a16z-infra/ai-town", "display_repo": "", "url": "https://github.com/a16z-infra/ai-town", "listing_class": "agent", "rank": 1100, "previous_rank": 1094, "rank_delta": -6, "stars": 10624, "stars_fmt": "10.6k", "forks": 1222, "forks_fmt": "1.2k", "last_push": "2026-08-26", "days_ago": 47, "weekly_commits": 0, "commits_low_confidence": false, "score": 57.1, "description": "A MIT-licensed, deployable starter kit for building and customizing your own version of AI town - a virtual town where AI characters live, chat and socialize.", "language": "TypeScript", "open_issues": 67, "category": "Needs review", "category_rank": 8, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.27, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:57:39Z", "slug": "ai-town", "full_fetched_at": "2026-10-12T00:02:33Z", "source_note": "", "github_homepage": "https://convex.dev/ai-town", "homepage_icon": "/site-icons/1764e73fd27cdc33.png", "homepage_icon_for": "https://convex.dev/ai-town", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Replicate", "Together AI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Together AI credential/config marker 'TOGETHER_API_KEY'", "README/docs also mention Together AI", "Found Replicate dependency 'replicate' in package.json", "Found Replicate credential/config marker 'REPLICATE_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.4, "trust_score_v2": 45.4, "rank_v2": 1100, "rank_v2_delta": 164, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 11.8, "maintenance": 8.9, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenFang", "repo": "RightNow-AI/openfang", "display_repo": "", "url": "https://github.com/RightNow-AI/openfang", "listing_class": "agent", "rank": 1101, "previous_rank": 1095, "rank_delta": -6, "stars": 18218, "stars_fmt": "18.2k", "forks": 2291, "forks_fmt": "2.3k", "last_push": "2026-07-02", "days_ago": 102, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.0, "description": "Open-source Agent Operating System", "language": "Rust", "open_issues": 75, "category": "Agent Frameworks", "category_rank": 97, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:14:54Z", "slug": "openfang", "full_fetched_at": "2026-10-12T08:02:20Z", "source_note": "", "github_homepage": "https://www.openfang.sh/", "homepage_icon": "/site-icons/631b828ffe7a7e18.png", "homepage_icon_for": "https://www.openfang.sh/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: crates/openfang-runtime/src/mcp_server.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: crates/openfang-extensions/Cargo.toml", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 45.3, "trust_score_v2": 45.3, "rank_v2": 1101, "rank_v2_delta": 300, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 11.7, "maintenance": 5.2, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Paper", "repo": "alaliqing/claude-paper", "display_repo": "", "url": "https://github.com/alaliqing/claude-paper", "listing_class": "skill", "rank": 297, "previous_rank": 297, "rank_delta": 0, "stars": 344, "stars_fmt": "344", "forks": 27, "forks_fmt": "27", "last_push": "2026-08-14", "days_ago": 59, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.7, "description": "📖 Cross-agent research paper toolkit for Claude Code, Codex, OpenCode, and DeepSeek Harness—quick summaries, deep study materials, code demos, and a local web viewer.", "language": "Vue", "open_issues": 0, "category": "Agent Skills", "category_rank": 297, "npm_package": "@zlzliqing/claude-paper", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 38, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.066, "scorecard_score": 1.7, "scorecard_checks": { "Binary-Artifacts": 6, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:21:50Z", "slug": "claude-paper", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@zlzliqing/claude-paper' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@zlzliqing/claude-paper", "version": "1.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:42Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.2, "trust_score_v2": 45.2, "rank_v2": 297, "rank_v2_delta": 1209, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.5, "identity": 10.8, "transparency": 9.9, "maintenance": 8.1, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "AutoCVE", "repo": "larlarua/AutoCVE", "display_repo": "", "url": "https://github.com/larlarua/AutoCVE", "listing_class": "agent", "rank": 1102, "previous_rank": 1097, "rank_delta": -5, "stars": 1436, "stars_fmt": "1.4k", "forks": 137, "forks_fmt": "137", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.4, "description": "Agent-driven automated CVE discovery platform for source code auditing, vulnerability verification, and report generation.", "language": "Python", "open_issues": 13, "category": "Security & Guardrails", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.259, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 3, "Signed-Releases": 0, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-22T22:51:10Z", "slug": "autocve", "full_fetched_at": "2026-10-11T16:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Google Gemini", "Multi-provider (LiteLLM)", "Postgres", "Redis", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Google Gemini dependency '@google/generative-ai' in frontend/package.json", "Found Multi-provider (LiteLLM) dependency 'litellm' in backend/pyproject.toml", "Found Supabase dependency 'supabase' in frontend/package.json", "Found Postgres dependency 'psycopg' in backend/pyproject.toml", "README/docs also mention Postgres", "Found Redis dependency 'redis' in backend/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in backend/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 45.1, "trust_score_v2": 45.1, "rank_v2": 1102, "rank_v2_delta": 163, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 11.7, "maintenance": 11.3, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ZCode", "repo": "zai-org/ZCode", "display_repo": "", "url": "https://github.com/zai-org/ZCode", "listing_class": "agent", "rank": 1103, "previous_rank": 1098, "rank_delta": -5, "stars": 7717, "stars_fmt": "7.7k", "forks": 2364, "forks_fmt": "2.4k", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 4, "commits_low_confidence": true, "score": 72.4, "description": "Z.ai's coding agent harness. Powerful, intelligent, extensible.", "language": "TypeScript", "open_issues": 0, "category": "Coding Agents", "category_rank": 63, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.2, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:10:26Z", "slug": "zcode", "full_fetched_at": "2026-10-12T16:02:28Z", "source_note": "", "github_homepage": "https://zcode.z.ai/", "homepage_icon": "/site-icons/3fb9cceaec662ee4.png", "homepage_icon_for": "https://zcode.z.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: apps/zcode-cli/packages/android-emulator-plugin/src/mcp/server.ts", "Found MCP-related server path: apps/zcode-cli/packages/ios-simulator-plugin/src/mcp/server.ts", "Found MCP-related server test path: apps/zcode-cli/packages/node-repl-host/test/mcp-server-process-guards.test.ts", "Found MCP-related server test path: apps/zcode-cli/packages/node-repl-host/test/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ZCODE_SERVER_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/zcode-cli/.agents/skills/opentui/docs/plugins/core.mdx", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 45.1, "trust_score_v2": 45.1, "rank_v2": 1103, "rank_v2_delta": 271, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.5, "identity": 10.8, "transparency": 9.5, "maintenance": 13.3, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PPT Design Skill", "repo": "sunchaokun/PPT-Design-Skill", "display_repo": "", "url": "https://github.com/sunchaokun/PPT-Design-Skill", "listing_class": "skill", "rank": 298, "previous_rank": 298, "rank_delta": 0, "stars": 324, "stars_fmt": "324", "forks": 16, "forks_fmt": "16", "last_push": "2026-09-16", "days_ago": 26, "weekly_commits": 1, "commits_low_confidence": false, "score": 46.0, "description": "Precision PPT design skill for OpenCode/Claude Code/Codex, with 40,000+ styles, pixel-perfect Build Mode control, AI image generation, and fully editable PPTX. 面向专业演示设计场景，帮助用户从需求分析、视觉方向选择到原生可编辑 PPTX 交付，打造高质量、可持续修改的演示文稿。", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 298, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:58:55Z", "slug": "ppt-design-skill", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "https://sunchaokun.github.io/PPT-Design-Skill/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.0, "trust_score_v2": 45.0, "rank_v2": 298, "rank_v2_delta": 1057, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.8, "maintenance": 11.5, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "EnterpriseAgentFramework", "repo": "w8123/EnterpriseAgentFramework", "display_repo": "", "url": "https://github.com/w8123/EnterpriseAgentFramework", "listing_class": "agent", "rank": 1104, "previous_rank": 1096, "rank_delta": -8, "stars": 890, "stars_fmt": "890", "forks": 80, "forks_fmt": "80", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 4, "commits_low_confidence": true, "score": 59.6, "description": "ReachAI企业级智能体开发平台：快速、安全完成已有业务系统智能化改造，让 AI 在 OA、ERP、CRM 等原系统中查数据、填表单、办业务。ReachAI: Quickly and securely bring AI to existing enterprise systems, enabling AI to query data, fill out forms, and execute business tasks directly within OA, ERP, CRM, and other business applications.", "language": "Java", "open_issues": 2, "category": "Agent Frameworks", "category_rank": 98, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:33:24Z", "slug": "enterpriseagentframework", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 45.0, "trust_score_v2": 45.0, "rank_v2": 1104, "rank_v2_delta": 250, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.3, "identity": 10.8, "transparency": 10.7, "maintenance": 13.1, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "EvoAgentX", "repo": "ANative-Lab/EvoAgentX", "display_repo": "", "url": "https://github.com/ANative-Lab/EvoAgentX", "listing_class": "agent", "rank": 1105, "previous_rank": 1101, "rank_delta": -4, "stars": 3374, "stars_fmt": "3.4k", "forks": 316, "forks_fmt": "316", "last_push": "2026-08-27", "days_ago": 46, "weekly_commits": 0, "commits_low_confidence": false, "score": 51.4, "description": "🚀 EvoAgentX: Building a Self-Evolving Ecosystem of AI Agents", "language": "Python", "open_issues": 16, "category": "Agent Frameworks", "category_rank": 99, "npm_package": "", "crate_package": "", "pypi_package": "evoagentx", "docker_image": "", "vscode_extension": "", "weekly_downloads": 54, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.27, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:27:48Z", "slug": "evoagentx", "full_fetched_at": "2026-10-12T12:02:38Z", "source_note": "", "github_homepage": "https://anative-lab.github.io/EvoAgentX/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'selenium' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'evoagentx' points to evoagentx/evoagentx, which GitHub redirects to the tracked repo after a rename/transfer (not treated as drift)" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 44.9, "trust_score_v2": 44.9, "rank_v2": 1105, "rank_v2_delta": 146, "trust_v2_adjustment": -2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.5, "maintenance": 8.9, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Convex Chef", "repo": "get-convex/chef", "display_repo": "", "url": "https://github.com/get-convex/chef", "listing_class": "agent", "rank": 1106, "previous_rank": 1100, "rank_delta": -6, "stars": 4597, "stars_fmt": "4.6k", "forks": 923, "forks_fmt": "923", "last_push": "2026-07-16", "days_ago": 88, "weekly_commits": 0, "commits_low_confidence": false, "score": 48.7, "description": "The only AI app builder that knows backend", "language": "TypeScript", "open_issues": 22, "category": "UI & App Builders", "category_rank": 15, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 10, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-12T16:45:25Z", "slug": "convex-chef", "full_fetched_at": "2026-10-12T04:02:36Z", "source_note": "", "github_homepage": "https://chef.convex.dev", "homepage_icon": "/site-icons/1232c9a48edca5c5.png", "homepage_icon_for": "https://chef.convex.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in chefshot/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.8, "trust_score_v2": 44.8, "rank_v2": 1106, "rank_v2_delta": 150, "trust_v2_adjustment": -2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.0, "identity": 10.8, "transparency": 11.9, "maintenance": 6.1, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SocialGPT", "repo": "scrollmark/socialgpt-mcp", "display_repo": "", "url": "https://github.com/scrollmark/socialgpt-mcp", "listing_class": "agent", "rank": 1107, "previous_rank": 1103, "rank_delta": -4, "stars": 10, "stars_fmt": "10", "forks": 1, "forks_fmt": "1", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.8, "description": "Connect SocialGPT to Claude, ChatGPT, Cursor, and any MCP-compatible AI agent.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 642, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.455, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:17:12Z", "slug": "socialgpt", "full_fetched_at": "2026-10-12T00:02:06Z", "source_note": "", "github_homepage": "https://gpt.social/integrations/mcp", "homepage_icon": "/site-icons/9c2ef5da3d500a9c.png", "homepage_icon_for": "https://gpt.social/integrations/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.8, "trust_score_v2": 44.8, "rank_v2": 1107, "rank_v2_delta": 334, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 11.6, "maintenance": 11.1, "adoption": 2.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Srcbook", "repo": "srcbookdev/srcbook", "display_repo": "", "url": "https://github.com/srcbookdev/srcbook", "listing_class": "agent", "rank": 1108, "previous_rank": 1104, "rank_delta": -4, "stars": 3439, "stars_fmt": "3.4k", "forks": 311, "forks_fmt": "311", "last_push": "2026-07-30", "days_ago": 74, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.5, "description": "TypeScript notebook", "language": "TypeScript", "open_issues": 29, "category": "UI & App Builders", "category_rank": 16, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.89, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T15:50:21Z", "slug": "srcbook", "full_fetched_at": "2026-10-12T08:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in srcbook/package.json", "Found Anthropic dependency 'anthropic' in srcbook/package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.8, "trust_score_v2": 44.8, "rank_v2": 1108, "rank_v2_delta": 233, "trust_v2_adjustment": -0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 10.9, "maintenance": 7.1, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agentic Sop To Work", "repo": "s0912758806p/agentic-sop-to-work", "display_repo": "", "url": "https://github.com/s0912758806p/agentic-sop-to-work", "listing_class": "skill", "rank": 299, "previous_rank": 299, "rank_delta": 0, "stars": 209, "stars_fmt": "209", "forks": 21, "forks_fmt": "21", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.4, "description": "Turn human SOPs into deterministic, gated agentic workflows — a Claude Code plugin.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 299, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T17:28:21Z", "slug": "agentic-sop-to-work", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/agentic-sop-kit/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.7, "trust_score_v2": 44.7, "rank_v2": 299, "rank_v2_delta": 1057, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 12.6, "maintenance": 9.7, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OmniParser", "repo": "microsoft/OmniParser", "display_repo": "", "url": "https://github.com/microsoft/OmniParser", "listing_class": "agent", "rank": 1109, "previous_rank": 1102, "rank_delta": -7, "stars": 25516, "stars_fmt": "25.5k", "forks": 2238, "forks_fmt": "2.2k", "last_push": "2026-07-20", "days_ago": 84, "weekly_commits": 0, "commits_low_confidence": false, "score": 55.3, "description": "A simple screen parsing tool towards pure vision based GUI agent", "language": "Jupyter Notebook", "open_issues": 174, "category": "Browser & Computer Use", "category_rank": 35, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 5, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-11T03:39:34Z", "slug": "omniparser", "full_fetched_at": "2026-10-12T08:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Groq", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "README/docs also mention Anthropic", "Found Groq dependency 'groq' in requirements.txt", "Found Amazon Bedrock dependency 'bedrock' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "CC-BY-4.0", "license_type": "open", "license_override": "", "trust_score": 44.7, "trust_score_v2": 44.7, "rank_v2": 1109, "rank_v2_delta": 207, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 12.2, "maintenance": 6.4, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Dataverse", "repo": "codeurali/mcp-dataverse", "display_repo": "", "url": "https://github.com/codeurali/mcp-dataverse", "listing_class": "agent", "rank": 1110, "previous_rank": 1106, "rank_delta": -4, "stars": 15, "stars_fmt": "15", "forks": 2, "forks_fmt": "2", "last_push": "2026-07-21", "days_ago": 83, "weekly_commits": 0, "commits_low_confidence": false, "score": 23.0, "description": "MCP server for Microsoft Dataverse Web API for devs !", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 643, "npm_package": "mcp-dataverse", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 101, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.023, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:59:10Z", "slug": "mcp-dataverse", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://codeurali.github.io/mcp-dataverse/", "homepage_icon": "/site-icons/4580880c6b880c3f.png", "homepage_icon_for": "https://codeurali.github.io/mcp-dataverse/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-dataverse' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-dataverse", "version": "0.7.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:54Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.7, "trust_score_v2": 44.7, "rank_v2": 1110, "rank_v2_delta": 417, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 11.4, "maintenance": 6.5, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Dashi Ppt Skill", "repo": "chuspeeism/dashi-ppt-skill", "display_repo": "", "url": "https://github.com/chuspeeism/dashi-ppt-skill", "listing_class": "skill", "rank": 300, "previous_rank": 290, "rank_delta": -10, "stars": 9419, "stars_fmt": "9.4k", "forks": 826, "forks_fmt": "826", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 0, "commits_low_confidence": false, "score": 58.2, "description": "An AI-agent skill that generates browser-editable presentations from multiple visual themes, exportable to HTML, PDF, and PPTX.", "language": "JavaScript", "open_issues": 14, "category": "Agent Skills", "category_rank": 300, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-03T01:49:23Z", "slug": "dashi-ppt-skill", "full_fetched_at": "2026-10-12T12:02:48Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "Found browser dependency 'playwright' in skills/dashi-ppt/project/packages/html-deck-to-pptx/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 44.7, "trust_score_v2": 44.7, "rank_v2": 300, "rank_v2_delta": 1039, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 11.0, "maintenance": 10.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "auto-re-agent", "repo": "Dryxio/reagent", "display_repo": "", "url": "https://github.com/Dryxio/reagent", "listing_class": "agent", "rank": 1111, "previous_rank": 1105, "rank_delta": -6, "stars": 2069, "stars_fmt": "2.1k", "forks": 209, "forks_fmt": "209", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 51.3, "description": "Reconstruct and validate C/C++ code from compiled programs with AI.", "language": "Python", "open_issues": 4, "category": "Security & Guardrails", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.125, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T10:29:55Z", "slug": "auto-re-agent", "full_fetched_at": "2026-10-12T12:03:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.6, "trust_score_v2": 44.6, "rank_v2": 1111, "rank_v2_delta": 208, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.9, "maintenance": 9.8, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "code-mode", "repo": "universal-tool-calling-protocol/code-mode", "display_repo": "", "url": "https://github.com/universal-tool-calling-protocol/code-mode", "listing_class": "agent", "rank": 1112, "previous_rank": 1107, "rank_delta": -5, "stars": 1595, "stars_fmt": "1.6k", "forks": 108, "forks_fmt": "108", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.2, "description": "🔌 Plug-and-play library to enable agents to call MCP and UTCP tools via code execution. ", "language": "TypeScript", "open_issues": 4, "category": "Protocols & Tool Integration", "category_rank": 51, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.416, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T09:58:35Z", "slug": "code-mode", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in code-mode-cli/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in code-mode-mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GITHUB_PERSONAL_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MPL-2.0", "license_type": "open", "license_override": "", "trust_score": 44.6, "trust_score_v2": 44.6, "rank_v2": 1112, "rank_v2_delta": 299, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 10.8, "maintenance": 8.8, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Icm Architect", "repo": "RinDig/icm-architect", "display_repo": "", "url": "https://github.com/RinDig/icm-architect", "listing_class": "skill", "rank": 301, "previous_rank": 300, "rank_delta": -1, "stars": 1879, "stars_fmt": "1.9k", "forks": 261, "forks_fmt": "261", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 49.3, "description": "Claude skill: design any process, idea, or problem into an ICM workspace (folder structure as agent architecture), or restructure an existing folder into one", "language": "", "open_issues": 1, "category": "Agent Skills", "category_rank": 301, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.625, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:08:50Z", "slug": "icm-architect", "full_fetched_at": "2026-10-12T00:01:53Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.6, "trust_score_v2": 44.6, "rank_v2": 301, "rank_v2_delta": 1067, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 10.7, "maintenance": 8.8, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Sports Hub", "repo": "lacausecrypto/mcp-sports-hub", "display_repo": "", "url": "https://github.com/lacausecrypto/mcp-sports-hub", "listing_class": "agent", "rank": 1113, "previous_rank": 1108, "rank_delta": -5, "stars": 37, "stars_fmt": "37", "forks": 14, "forks_fmt": "14", "last_push": "2026-08-19", "days_ago": 54, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.5, "description": "Unified MCP server — 41 sports API providers, 396 tools in one process: scores, stats, odds, esports, F1/MotoGP/NASCAR, EuroLeague, chess, AFL, boxing & more across 70+ sports. 19 work with no API key.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 644, "npm_package": "mcp-sports-hub", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 80, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:41:35Z", "slug": "mcp-sports-hub", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'THESPORTSDB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-sports-hub' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-sports-hub", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:21Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.6, "trust_score_v2": 44.6, "rank_v2": 1113, "rank_v2_delta": 391, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.5, "maintenance": 8.4, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Withings Health Data", "repo": "akutishevsky/withings-mcp", "display_repo": "", "url": "https://github.com/akutishevsky/withings-mcp", "listing_class": "agent", "rank": 1114, "previous_rank": 1109, "rank_delta": -5, "stars": 43, "stars_fmt": "43", "forks": 11, "forks_fmt": "11", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.3, "description": "MCP server for Withings health data integration", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 645, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.32, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:35:10Z", "slug": "withings-health-data", "full_fetched_at": "2026-10-12T08:02:40Z", "source_note": "", "github_homepage": "https://withings-mcp.com", "homepage_icon": "/site-icons/50556ad34322dd8b.png", "homepage_icon_for": "https://withings-mcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Postgres", "Supabase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Supabase dependency 'supabase' in package.json", "Found Supabase credential/config marker 'SUPABASE_URL'", "README/docs also mention Supabase", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.5, "trust_score_v2": 44.5, "rank_v2": 1114, "rank_v2_delta": 285, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.3, "maintenance": 9.8, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Trino", "repo": "tuannvm/mcp-trino", "display_repo": "", "url": "https://github.com/tuannvm/mcp-trino", "listing_class": "agent", "rank": 1115, "previous_rank": 1110, "rank_delta": -5, "stars": 121, "stars_fmt": "121", "forks": 57, "forks_fmt": "57", "last_push": "2026-07-01", "days_ago": 103, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.4, "description": "A high-performance Model Context Protocol (MCP) server for Trino implemented in Go.", "language": "Go", "open_issues": 18, "category": "MCP Servers", "category_rank": 646, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.83, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 9, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 9, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:40:20Z", "slug": "mcp-trino", "full_fetched_at": "2026-10-12T00:02:28Z", "source_note": "", "github_homepage": "https://docs.tuannvm.com/mcp-trino", "homepage_icon": "/site-icons/fbabb0ec7152d93d.png", "homepage_icon_for": "https://docs.tuannvm.com/mcp-trino", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: internal/mcp/server.go" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/install-binary.mjs", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.5, "trust_score_v2": 44.5, "rank_v2": 1115, "rank_v2_delta": 325, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 12.2, "maintenance": 5.1, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Slack Explorer MCP", "repo": "shibayu36/slack-explorer-mcp", "display_repo": "", "url": "https://github.com/shibayu36/slack-explorer-mcp", "listing_class": "agent", "rank": 1116, "previous_rank": 1114, "rank_delta": -2, "stars": 50, "stars_fmt": "50", "forks": 3, "forks_fmt": "3", "last_push": "2026-07-03", "days_ago": 101, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.0, "description": "", "language": "Go", "open_issues": 3, "category": "MCP Servers", "category_rank": 647, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/shibayu36/slack-explorer-mcp:0.12.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 6, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:45:43Z", "slug": "slack-explorer-mcp", "full_fetched_at": "2026-10-12T00:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SLACK_USER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.4, "trust_score_v2": 44.4, "rank_v2": 1116, "rank_v2_delta": 310, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.8, "identity": 10.8, "transparency": 12.4, "maintenance": 5.3, "adoption": 4.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "agentUniverse", "repo": "agentuniverse-ai/agentUniverse", "display_repo": "", "url": "https://github.com/agentuniverse-ai/agentUniverse", "listing_class": "agent", "rank": 1117, "previous_rank": 1111, "rank_delta": -6, "stars": 2379, "stars_fmt": "2.4k", "forks": 463, "forks_fmt": "463", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 0, "commits_low_confidence": false, "score": 53.8, "description": "agentUniverse is a LLM multi-agent framework that allows developers to easily build multi-agent applications. ", "language": "Python", "open_issues": 146, "category": "Agent Frameworks", "category_rank": 100, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.42, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-09-28T23:50:19Z", "slug": "agentuniverse", "full_fetched_at": "2026-10-12T00:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: agentuniverse/agent_serve/web/mcp/mcp_server_manager.py", "Found MCP-related server docs path: docs/guidebook/en/How-to/Use and Publish MCP Server/How_to_Publish_MCP_Servers.md", "Found MCP-related server docs path: docs/guidebook/en/How-to/Use and Publish MCP Server/How_to_Use_MCP_Servers.md" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: docs/guidebook/en/How-to/Define and Use Tool Plugins/Tool Plugin API Adaptation Sample Reference.md", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'pg' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.4, "trust_score_v2": 44.4, "rank_v2": 1117, "rank_v2_delta": 119, "trust_v2_adjustment": -3.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 11.9, "maintenance": 10.1, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fedml", "repo": "FedML-AI/FedML", "display_repo": "", "url": "https://github.com/FedML-AI/FedML", "listing_class": "agent", "rank": 1118, "previous_rank": 1117, "rank_delta": -1, "stars": 4068, "stars_fmt": "4.1k", "forks": 767, "forks_fmt": "767", "last_push": "2025-10-28", "days_ago": 349, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.1, "description": "FEDML - The unified and scalable ML library for large-scale distributed training, model serving, and federated learning. FEDML Launch, a cross-cloud scheduler, further enables running any AI jobs on any GPU cloud or on-premise cluster. Built on this library, TensorOpera AI (https://TensorOpera.ai)…", "language": "Python", "open_issues": 122, "category": "Agent Frameworks", "category_rank": 101, "npm_package": "", "crate_package": "", "pypi_package": "fedml", "docker_image": "", "vscode_extension": "", "weekly_downloads": 149, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.37, "scorecard_score": 4, "scorecard_checks": { "Maintained": 0, "Code-Review": 9, "CII-Best-Practices": 0, "Dangerous-Workflow": 10, "License": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Branch-Protection": -1, "Binary-Artifacts": 4, "Security-Policy": 0, "Packaging": -1, "Fuzzing": 0, "SAST": 7, "Pinned-Dependencies": 0 }, "scorecard_scanned_at": "2026-10-12T04:06:27Z", "slug": "fedml", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "", "github_homepage": "https://TensorOpera.ai", "homepage_icon": "/site-icons/f8ec2e23d6edc542.png", "homepage_icon_for": "https://TensorOpera.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Amazon Bedrock dependency 'boto3' in requirements.txt", "Found Redis dependency 'redis' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in requirements.txt", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'fedml' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "fedml", "version": "0.9.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:35Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.4, "trust_score_v2": 44.4, "rank_v2": 1118, "rank_v2_delta": 354, "trust_v2_adjustment": 3.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 11.9, "maintenance": 0.0, "adoption": 11.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "ControlFlow", "repo": "prefect-archive/ControlFlow", "display_repo": "", "url": "https://github.com/prefect-archive/ControlFlow", "listing_class": "agent", "rank": 1119, "previous_rank": 1112, "rank_delta": -7, "stars": 1387, "stars_fmt": "1.4k", "forks": 111, "forks_fmt": "111", "last_push": "2025-08-22", "days_ago": 416, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.4, "description": "🦾 Take control of your AI agents", "language": "Python", "open_issues": 35, "category": "Agent Frameworks", "category_rank": 102, "npm_package": "", "crate_package": "", "pypi_package": "controlflow", "docker_image": "", "vscode_extension": "", "weekly_downloads": 984, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": true, "npm_provenance": null, "pypi_provenance": true, "signed_commits_ratio": 0.29, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 7, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:31:37Z", "slug": "controlflow", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'controlflow' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "controlflow", "version": "0.12.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:16Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "prefect-archive/ControlFlow", "criterion": "5.1", "detail": "repository is archived" }, { "repo": "prefect-archive/ControlFlow", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-08-22)" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.4, "trust_score_v2": 44.4, "rank_v2": 1119, "rank_v2_delta": 219, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 14.0, "identity": 18.0, "transparency": 11.9, "maintenance": 0.0, "adoption": 11.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Web Quality Skills", "repo": "addyosmani/web-quality-skills", "display_repo": "", "url": "https://github.com/addyosmani/web-quality-skills", "listing_class": "skill", "rank": 302, "previous_rank": 301, "rank_delta": -1, "stars": 2932, "stars_fmt": "2.9k", "forks": 254, "forks_fmt": "254", "last_push": "2026-08-24", "days_ago": 49, "weekly_commits": 0, "commits_low_confidence": false, "score": 50.3, "description": "Agent Skills for optimizing web quality based on Lighthouse and Core Web Vitals.", "language": "Shell", "open_issues": 3, "category": "Agent Skills", "category_rank": 302, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.324, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:21:55Z", "slug": "web-quality-skills", "full_fetched_at": "2026-10-12T08:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.3, "trust_score_v2": 44.3, "rank_v2": 302, "rank_v2_delta": 1050, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.4, "maintenance": 8.7, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Strava MCP", "repo": "r-huijts/strava-mcp", "display_repo": "", "url": "https://github.com/r-huijts/strava-mcp", "listing_class": "agent", "rank": 1120, "previous_rank": 1115, "rank_delta": -5, "stars": 499, "stars_fmt": "499", "forks": 92, "forks_fmt": "92", "last_push": "2026-06-13", "days_ago": 121, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.6, "description": "A Model Context Protocol (MCP) server that connects to Strava API, providing tools to access Strava data through LLMs", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 648, "npm_package": "strava-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 96, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.18, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T18:56:13Z", "slug": "strava-mcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'STRAVA_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'strava-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "strava-mcp-server", "version": "1.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.3, "trust_score_v2": 44.3, "rank_v2": 1120, "rank_v2_delta": 391, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 11.0, "maintenance": 3.9, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Ai Business Skills", "repo": "minhnv0807/ai-business-skills", "display_repo": "", "url": "https://github.com/minhnv0807/ai-business-skills", "listing_class": "skill", "rank": 303, "previous_rank": 279, "rank_delta": -24, "stars": 612, "stars_fmt": "612", "forks": 228, "forks_fmt": "228", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 0, "commits_low_confidence": false, "score": 48.5, "description": "138 bilingual AI marketing skills (69 VN + 69 Global) for Claude Code, OpenCode, Codex, VS Code. Four role SOP packs — content, design, performance, leader ops — plus strategy, personal brand, AI avatar, dropshipping, design master, knowledge library. 4 regions (US/EU/SEA/LATAM) + Vietnam…", "language": "PowerShell", "open_issues": 2, "category": "Agent Skills", "category_rank": 303, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:24:16Z", "slug": "ai-business-skills", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "https://opa.business", "homepage_icon": "/site-icons/c2b575362e97cf42.png", "homepage_icon_for": "https://opa.business", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'OLLAMA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 303, "rank_v2_delta": 1031, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 12.1, "maintenance": 10.0, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Klavis AI", "repo": "Klavis-AI/klavis", "display_repo": "", "url": "https://github.com/Klavis-AI/klavis", "listing_class": "agent", "rank": 1121, "previous_rank": 1118, "rank_delta": -3, "stars": 5808, "stars_fmt": "5.8k", "forks": 563, "forks_fmt": "563", "last_push": "2026-06-01", "days_ago": 133, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.1, "description": "Klavis AI: MCP integration platforms that let AI agents use tools reliably at any scale", "language": "Python", "open_issues": 32, "category": "Protocols & Tool Integration", "category_rank": 52, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:21:50Z", "slug": "klavis-ai", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://www.klavis.ai/", "homepage_icon": "/site-icons/ee5ce74c293827b0.png", "homepage_icon_for": "https://www.klavis.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .github/workflows/mcp-servers-build.yml", "Found MCP-related server path: MCP_SERVER_GUIDE.md", "Found MCP-related server docs path: docs/api-reference/mcp-server/call-tool.mdx" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in mcp-clients/pyproject.toml", "Found Anthropic dependency 'anthropic' in mcp-clients/pyproject.toml", "Found Supabase dependency 'supabase' in mcp-clients/pyproject.toml", "Ships a Gemini CLI plugin manifest (mcp_servers/context7/gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: mcp_servers/context7/.claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 1121, "rank_v2_delta": 276, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 11.6, "maintenance": 3.1, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skills Vote", "repo": "MemTensor/skills-vote", "display_repo": "", "url": "https://github.com/MemTensor/skills-vote", "listing_class": "skill", "rank": 304, "previous_rank": 306, "rank_delta": 2, "stars": 304, "stars_fmt": "304", "forks": 17, "forks_fmt": "17", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.2, "description": "SkillsVote: Lifecycle Governance of Agent Skills from Collection, Recommendation to Evolution", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 304, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.333, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:14:18Z", "slug": "skills-vote", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "https://skills.vote", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'claude-agent-sdk' in pyproject.toml", "README/docs also mention Anthropic", "Found credential/config marker 'SKILLS_VOTE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 304, "rank_v2_delta": 1044, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.3, "maintenance": 11.3, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "paritok-4b-v1", "repo": "Paritok-official/paritok-4b-v1", "display_repo": "", "url": "https://github.com/Paritok-official/paritok-4b-v1", "listing_class": "agent", "rank": 1122, "previous_rank": 1119, "rank_delta": -3, "stars": 1457, "stars_fmt": "1.5k", "forks": 140, "forks_fmt": "140", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 9, "commits_low_confidence": true, "score": 65.8, "description": "Non-destructive compression gateway for AI coding agents. Cuts token bills 25% on turn 1 to past 85% in long or saturated sessions, and fits ~3× more turns in the same context window. Powered by our open-source code-native 4B model. Drop-in for Claude Code, Cursor, Codex, OpenHands, and any…", "language": "Python", "open_issues": 5, "category": "LLM Gateways & Infra", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.11, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 2 }, "scorecard_scanned_at": "2026-10-08T22:51:03Z", "slug": "paritok-4b-v1", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "https://www.paritok.com/", "homepage_icon": "/site-icons/78b8f57558746f3e.png", "homepage_icon_for": "https://www.paritok.com/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 1122, "rank_v2_delta": 179, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.8, "identity": 10.8, "transparency": 10.7, "maintenance": 13.6, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Scroll Craft", "repo": "nateherkai/scroll-craft", "display_repo": "", "url": "https://github.com/nateherkai/scroll-craft", "listing_class": "skill", "rank": 305, "previous_rank": 303, "rank_delta": -2, "stars": 3241, "stars_fmt": "3.2k", "forks": 477, "forks_fmt": "477", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 1, "commits_low_confidence": false, "score": 60.7, "description": "An agent skill for building premium, immersive, scroll-driven websites. Works with Codex, Claude Code, and other coding agents. Also available as a Claude Code plugin.", "language": "JavaScript", "open_issues": 4, "category": "Agent Skills", "category_rank": 305, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:10:48Z", "slug": "scroll-craft", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (plugins/nateherk-design/.claude-plugin/plugin.json)", "Found credential/config marker 'KIE_AI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 305, "rank_v2_delta": 1028, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.7, "maintenance": 12.4, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Lieflat Charts", "repo": "larashero3-dotcom/lieflat-charts", "display_repo": "", "url": "https://github.com/larashero3-dotcom/lieflat-charts", "listing_class": "skill", "rank": 306, "previous_rank": 304, "rank_delta": -2, "stars": 6071, "stars_fmt": "6.1k", "forks": 365, "forks_fmt": "365", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 54.5, "description": "Data visualization Skill for AI Agents, turning data into polished, interactive HTML charts. 面向 AI Agents 的数据可视化 Skill，将数据快速生成精致、可交互的 HTML 图表。", "language": "HTML", "open_issues": 1, "category": "Agent Skills", "category_rank": 306, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T02:32:12Z", "slug": "lieflat-charts", "full_fetched_at": "2026-10-12T16:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "source-available", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 306, "rank_v2_delta": 1078, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 10.6, "maintenance": 9.5, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Ip2location Io", "repo": "ip2location/mcp-ip2location-io", "display_repo": "", "url": "https://github.com/ip2location/mcp-ip2location-io", "listing_class": "agent", "rank": 1123, "previous_rank": 1116, "rank_delta": -7, "stars": 16, "stars_fmt": "16", "forks": 10, "forks_fmt": "10", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 2, "commits_low_confidence": false, "score": 41.4, "description": "IP Geolocation MCP server using IP2Location.io API", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 649, "npm_package": "", "crate_package": "", "pypi_package": "mcp-ip2location-io", "docker_image": "", "vscode_extension": "", "weekly_downloads": 24, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.241, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:01:15Z", "slug": "mcp-ip2location-io", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "https://www.ip2location.io/", "homepage_icon": "/site-icons/c45b6f1f35c78224.png", "homepage_icon_for": "https://www.ip2location.io/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'IP2LOCATION_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-ip2location-io' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-ip2location-io", "version": "1.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:29Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 1123, "rank_v2_delta": 308, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.5, "maintenance": 13.0, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "py-xiaozhi", "repo": "huangjunsen0406/py-xiaozhi", "display_repo": "", "url": "https://github.com/huangjunsen0406/py-xiaozhi", "listing_class": "agent", "rank": 1124, "previous_rank": 1120, "rank_delta": -4, "stars": 3501, "stars_fmt": "3.5k", "forks": 745, "forks_fmt": "745", "last_push": "2026-09-11", "days_ago": 31, "weekly_commits": 0, "commits_low_confidence": false, "score": 55.4, "description": "Open-source AI assistant ecosystem with MCP integrations, multimodal workflows, IoT support, and cross-platform voice interaction.", "language": "Python", "open_issues": 6, "category": "Voice & Conversational", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.07, "scorecard_score": 2.1, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:53:29Z", "slug": "py-xiaozhi", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "https://huangjunsen0406.github.io/py-xiaozhi/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: examples/mcp_plugins/com.example.hello/README.txt", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.2, "trust_score_v2": 44.2, "rank_v2": 1124, "rank_v2_delta": 321, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.0, "identity": 10.8, "transparency": 10.3, "maintenance": 9.9, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "The Architect", "repo": "Hainrixz/the-architect", "display_repo": "", "url": "https://github.com/Hainrixz/the-architect", "listing_class": "skill", "rank": 307, "previous_rank": 305, "rank_delta": -2, "stars": 538, "stars_fmt": "538", "forks": 101, "forks_fmt": "101", "last_push": "2026-07-28", "days_ago": 76, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.3, "description": "A Claude Code plugin that interviews you, designs the whole architecture, and writes a self-contained blueprint another Claude Code instance builds from with zero context — EARS acceptance criteria and a runnable verify command on every build step. 14 project shapes, greenfield and brownfield.…", "language": "", "open_issues": 0, "category": "Agent Skills", "category_rank": 307, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 5.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:18:59Z", "slug": "the-architect", "full_fetched_at": "2026-10-12T16:02:13Z", "source_note": "", "github_homepage": "https://tododeia.com", "homepage_icon": "/site-icons/0920e6d8ed1da560.png", "homepage_icon_for": "https://tododeia.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.1, "trust_score_v2": 44.1, "rank_v2": 307, "rank_v2_delta": 1097, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 13.0, "maintenance": 6.9, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Superdesign Skill", "repo": "superdesigndev/superdesign-skill", "display_repo": "", "url": "https://github.com/superdesigndev/superdesign-skill", "listing_class": "skill", "rank": 308, "previous_rank": 307, "rank_delta": -1, "stars": 652, "stars_fmt": "652", "forks": 49, "forks_fmt": "49", "last_push": "2026-08-21", "days_ago": 52, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.6, "description": "The design skill for Claude Code, Cursor and any coding agent. Stop shipping AI-slop UI: turn it into shippable, tasteful frontend. Install: npx skills add superdesigndev/superdesign-skill. Powered by superdesign.dev", "language": "JavaScript", "open_issues": 6, "category": "Agent Skills", "category_rank": 308, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:52:13Z", "slug": "superdesign-skill", "full_fetched_at": "2026-10-12T00:02:19Z", "source_note": "", "github_homepage": "https://superdesign.dev", "homepage_icon": "/site-icons/21e0f6ebd2b6657f.png", "homepage_icon_for": "https://superdesign.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.1, "trust_score_v2": 44.1, "rank_v2": 308, "rank_v2_delta": 1067, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 11.8, "maintenance": 8.5, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "CodeWiki MCP — AI-generated docs for GitHub repos", "repo": "izzzzzi/codewiki-mcp", "display_repo": "", "url": "https://github.com/izzzzzi/codewiki-mcp", "listing_class": "agent", "rank": 1125, "previous_rank": 1121, "rank_delta": -4, "stars": 18, "stars_fmt": "18", "forks": 1, "forks_fmt": "1", "last_push": "2026-06-22", "days_ago": 112, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.5, "description": "MCP server for codewiki.google — search, fetch docs, and ask questions about any open-source repo", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 650, "npm_package": "codewiki-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 49, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.219, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:57:22Z", "slug": "codewiki-mcp-ai-generated-docs-for-github-repos", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'codewiki-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "codewiki-mcp", "version": "1.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:29Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.1, "trust_score_v2": 44.1, "rank_v2": 1125, "rank_v2_delta": 416, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.7, "maintenance": 4.5, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Swarm by OpenAI", "repo": "openai/swarm", "display_repo": "", "url": "https://github.com/openai/swarm", "listing_class": "agent", "rank": 1126, "previous_rank": 1124, "rank_delta": -2, "stars": 22049, "stars_fmt": "22.0k", "forks": 2342, "forks_fmt": "2.3k", "last_push": "2026-04-15", "days_ago": 180, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.9, "description": "Educational framework exploring ergonomic, lightweight multi-agent orchestration. Managed by OpenAI Solution team.", "language": "Python", "open_issues": 28, "category": "Multi-Agent Systems", "category_rank": 32, "npm_package": "", "crate_package": "", "pypi_package": "openai-swarm", "docker_image": "", "vscode_extension": "", "weekly_downloads": 530, "dl_source": "pypi", "hn_mentions_30d": 12, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.724, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T17:06:11Z", "slug": "swarm-by-openai", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Qdrant" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Qdrant dependency 'qdrant' in examples/support_bot/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'qdrant' in examples/support_bot/requirements.txt" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'openai-swarm' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.1, "trust_score_v2": 44.1, "rank_v2": 1126, "rank_v2_delta": 250, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 11.5, "maintenance": 0.0, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Julep", "repo": "julep-ai/julep", "display_repo": "", "url": "https://github.com/julep-ai/julep", "listing_class": "agent", "rank": 1127, "previous_rank": 1122, "rank_delta": -5, "stars": 6574, "stars_fmt": "6.6k", "forks": 968, "forks_fmt": "968", "last_push": "2026-08-06", "days_ago": 67, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.5, "description": "Julep — durable, composable AI agents. Flows that crash and resume, retry safely, and explain every step.", "language": "Python", "open_issues": 1, "category": "Workflow Platforms", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 4.9, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T06:06:48Z", "slug": "julep", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://docs.julep.ai", "homepage_icon": "/site-icons/fd48230b7a993a83.png", "homepage_icon_for": "https://docs.julep.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Groq dependency 'groq' in pyproject.toml", "Found OpenRouter dependency 'openrouter' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 44.0, "trust_score_v2": 44.0, "rank_v2": 1127, "rank_v2_delta": 155, "trust_v2_adjustment": -3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 12.7, "maintenance": 7.5, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Adaptive Cards MCP", "repo": "VikrantSingh01/adaptive-cards-mcp", "display_repo": "", "url": "https://github.com/VikrantSingh01/adaptive-cards-mcp", "listing_class": "agent", "rank": 1128, "previous_rank": 1123, "rank_delta": -5, "stars": 33, "stars_fmt": "33", "forks": 7, "forks_fmt": "7", "last_push": "2026-06-20", "days_ago": 114, "weekly_commits": 0, "commits_low_confidence": false, "score": 22.6, "description": "AI-powered Adaptive Card MCP server — 9 tools for generating, validating, optimizing cards for Teams, Outlook, Copilot, ChatGPT. npm: adaptive-cards-mcp", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 651, "npm_package": "adaptive-cards-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 63, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.058, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:45:17Z", "slug": "adaptive-cards-mcp", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/core/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Azure OpenAI", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Azure OpenAI credential/config marker 'AZURE_OPENAI_API_KEY'", "README/docs also mention Azure OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'adaptive-cards-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "adaptive-cards-mcp", "version": "2.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:35Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.0, "trust_score_v2": 44.0, "rank_v2": 1128, "rank_v2_delta": 371, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 12.5, "maintenance": 4.4, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Perplexity Comet MCP", "repo": "RapierCraft/Perplexity-Comet-MCP", "display_repo": "", "url": "https://github.com/RapierCraft/Perplexity-Comet-MCP", "listing_class": "agent", "rank": 1129, "previous_rank": 1125, "rank_delta": -4, "stars": 51, "stars_fmt": "51", "forks": 20, "forks_fmt": "20", "last_push": "2026-06-22", "days_ago": 112, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.8, "description": "MCP server connecting Claude Code to Perplexity Comet browser. Autonomous web browsing, agentic research, multi-tab management. Windows/WSL/macOS support. Smart completion detection, auto-reconnect, tab protection. Enhanced fork with 7 tools including comet_tabs.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 652, "npm_package": "perplexity-comet-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 84, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.266, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 7, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T17:50:15Z", "slug": "perplexity-comet-mcp", "full_fetched_at": "2026-10-11T20:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'perplexity-comet-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "perplexity-comet-mcp", "version": "2.6.2" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:13Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.0, "trust_score_v2": 44.0, "rank_v2": 1129, "rank_v2_delta": 414, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.0, "maintenance": 4.5, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Server Infranodus", "repo": "infranodus/mcp-server-infranodus", "display_repo": "", "url": "https://github.com/infranodus/mcp-server-infranodus", "listing_class": "agent", "rank": 1130, "previous_rank": 1126, "rank_delta": -4, "stars": 103, "stars_fmt": "103", "forks": 27, "forks_fmt": "27", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 2, "commits_low_confidence": false, "score": 46.9, "description": "The official InfraNodus MCP server", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 653, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.071, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:52:18Z", "slug": "mcp-server-infranodus", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: bin/infranodus-mcp-server.js", "Found MCP-related server path: bin/keywordgraph-mcp-server.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'INFRANODUS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 44.0, "trust_score_v2": 44.0, "rank_v2": 1130, "rank_v2_delta": 306, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 11.0, "maintenance": 12.4, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Context", "repo": "zilliztech/claude-context", "display_repo": "", "url": "https://github.com/zilliztech/claude-context", "listing_class": "agent", "rank": 1131, "previous_rank": 1127, "rank_delta": -4, "stars": 12604, "stars_fmt": "12.6k", "forks": 943, "forks_fmt": "943", "last_push": "2026-07-14", "days_ago": 90, "weekly_commits": 0, "commits_low_confidence": false, "score": 50.9, "description": "Code search MCP for Claude Code. Make entire codebase the context for any coding agent.", "language": "TypeScript", "open_issues": 80, "category": "MCP Servers", "category_rank": 654, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.69, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 1, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T12:03:45Z", "slug": "claude-context", "full_fetched_at": "2026-10-12T12:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/core/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency '@google/genai' in packages/core/package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "filesystem" ], "confidence": "high", "evidence": [ "Found filesystem dependency 'fs-extra' in packages/core/package.json", "Found code dependency 'gitpython' in evaluation/pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.9, "trust_score_v2": 43.9, "rank_v2": 1131, "rank_v2_delta": 263, "trust_v2_adjustment": -0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 10.7, "maintenance": 6.0, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Call Center AI", "repo": "microsoft/call-center-ai", "display_repo": "", "url": "https://github.com/microsoft/call-center-ai", "listing_class": "agent", "rank": 1132, "previous_rank": 1128, "rank_delta": -4, "stars": 6653, "stars_fmt": "6.7k", "forks": 818, "forks_fmt": "818", "last_push": "2026-07-01", "days_ago": 103, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.2, "description": "Send a phone call from AI agent, in an API call. Or, directly call the bot from the configured phone number!", "language": "Python", "open_issues": 20, "category": "Voice & Conversational", "category_rank": 12, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 7, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T22:56:45Z", "slug": "call-center-ai", "full_fetched_at": "2026-10-12T04:02:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 43.8, "trust_score_v2": 43.8, "rank_v2": 1132, "rank_v2_delta": 256, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 12.4, "maintenance": 5.1, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Memory MCP", "repo": "chenxiaofie/memory-mcp", "display_repo": "", "url": "https://github.com/chenxiaofie/memory-mcp", "listing_class": "agent", "rank": 1133, "previous_rank": 1129, "rank_delta": -4, "stars": 10, "stars_fmt": "10", "forks": 2, "forks_fmt": "2", "last_push": "2026-07-26", "days_ago": 78, "weekly_commits": 0, "commits_low_confidence": false, "score": 22.6, "description": "A scenario + entity memory MCP service that provides persistent memory capabilities for Claude Code.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 655, "npm_package": "", "crate_package": "", "pypi_package": "chenxiaofie-memory-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 48, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 9, "Vulnerabilities": 1 }, "scorecard_scanned_at": "2026-10-11T16:31:09Z", "slug": "memory-mcp", "full_fetched_at": "2026-10-12T12:02:49Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'chenxiaofie-memory-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "chenxiaofie-memory-mcp", "version": "0.3.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:49Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.8, "trust_score_v2": 43.8, "rank_v2": 1133, "rank_v2_delta": 414, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.3, "maintenance": 6.8, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCPJungle", "repo": "mcpjungle/MCPJungle", "display_repo": "", "url": "https://github.com/mcpjungle/MCPJungle", "listing_class": "agent", "rank": 1134, "previous_rank": 1130, "rank_delta": -4, "stars": 1295, "stars_fmt": "1.3k", "forks": 167, "forks_fmt": "167", "last_push": "2026-08-02", "days_ago": 71, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.1, "description": "One place to manage & connect to all your MCP servers", "language": "Go", "open_issues": 78, "category": "Protocols & Tool Integration", "category_rank": 53, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.65, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:48:45Z", "slug": "mcpjungle", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "https://docs.mcpjungle.com", "homepage_icon": "/site-icons/91aa6cba488db077.png", "homepage_icon_for": "https://docs.mcpjungle.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/register-mcp-server.png", "Found MCP-related server path: client/mcp_server.go" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MPL-2.0", "license_type": "open", "license_override": "", "trust_score": 43.8, "trust_score_v2": 43.8, "rank_v2": 1134, "rank_v2_delta": 304, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 10.7, "maintenance": 7.3, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Google Health Fitbit MCP", "repo": "BerkKilicoglu/google-health-fitbit-mcp", "display_repo": "", "url": "https://github.com/BerkKilicoglu/google-health-fitbit-mcp", "listing_class": "agent", "rank": 1135, "previous_rank": 1131, "rank_delta": -4, "stars": 18, "stars_fmt": "18", "forks": 2, "forks_fmt": "2", "last_push": "2026-08-04", "days_ago": 69, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.3, "description": "Connect your Fitbit / Pixel Watch data to any AI assistant via MCP. Read-only MCP server for the Google Health API. Your health data → any AI assistant, tokens never leave your machine.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 656, "npm_package": "google-health-fitbit-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 117, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:44:15Z", "slug": "google-health-fitbit-mcp", "full_fetched_at": "2026-10-12T12:02:43Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'google-health-fitbit-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "google-health-fitbit-mcp", "version": "1.0.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:43Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.7, "trust_score_v2": 43.7, "rank_v2": 1135, "rank_v2_delta": 414, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.6, "maintenance": 7.4, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Nanobanana MCP Server", "repo": "zhongweili/nanobanana-mcp-server", "display_repo": "", "url": "https://github.com/zhongweili/nanobanana-mcp-server", "listing_class": "agent", "rank": 1136, "previous_rank": 1132, "rank_delta": -4, "stars": 400, "stars_fmt": "400", "forks": 116, "forks_fmt": "116", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 5, "commits_low_confidence": true, "score": 59.2, "description": "AI image generation MCP server powered by Google Gemini, with smart model selection and 4K output", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 657, "npm_package": "", "crate_package": "", "pypi_package": "nanobanana-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 3008, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.066, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:05:14Z", "slug": "nanobanana-mcp-server", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: fastmcp.json", "Found MCP-related server path: nanobanana_mcp_server/__init__.py", "Found MCP-related server docs path: docs/MCP_SERVER_SCHEMA.md" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "warning", "confidence": "high", "summary": "1 package source mismatch detected", "evidence": [ "pypi package 'nanobanana-mcp-server' points to nano-banana/mcp-server, not zhongweili/nanobanana-mcp-server" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.7, "trust_score_v2": 43.7, "rank_v2": 1136, "rank_v2_delta": 114, "trust_v2_adjustment": -4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.7, "identity": 10.8, "transparency": 10.1, "maintenance": 13.2, "adoption": 10.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": -5.0 }, "pending_signals": false }, { "name": "ClaudeSkills", "repo": "staruhub/ClaudeSkills", "display_repo": "", "url": "https://github.com/staruhub/ClaudeSkills", "listing_class": "skill", "rank": 309, "previous_rank": 308, "rank_delta": -1, "stars": 728, "stars_fmt": "728", "forks": 131, "forks_fmt": "131", "last_push": "2026-08-13", "days_ago": 60, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.8, "description": "13 curated Agent Skills for research, product decisions, decks, publishing, audits, and more — portable across skills-compatible agents.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 309, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.149, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-12T00:18:53Z", "slug": "claudeskills", "full_fetched_at": "2026-10-12T00:02:16Z", "source_note": "", "github_homepage": "https://staruhub.github.io/ClaudeSkills/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.6, "trust_score_v2": 43.6, "rank_v2": 309, "rank_v2_delta": 1103, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 12.0, "maintenance": 8.0, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Shinkoku", "repo": "kazukinagata/shinkoku", "display_repo": "", "url": "https://github.com/kazukinagata/shinkoku", "listing_class": "skill", "rank": 310, "previous_rank": 309, "rank_delta": -1, "stars": 365, "stars_fmt": "365", "forks": 32, "forks_fmt": "32", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.9, "description": "確定申告自動化 AI エージェントプラグイン — 帳簿管理から e-Tax 入力代行まで", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 310, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.29, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-20T18:01:25Z", "slug": "shinkoku", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.6, "trust_score_v2": 43.6, "rank_v2": 310, "rank_v2_delta": 1092, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.4, "maintenance": 9.8, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Antigravity CLI", "repo": "google-antigravity/antigravity-cli", "display_repo": "", "url": "https://github.com/google-antigravity/antigravity-cli", "listing_class": "agent", "rank": 1137, "previous_rank": 1133, "rank_delta": -4, "stars": 2526, "stars_fmt": "2.5k", "forks": 241, "forks_fmt": "241", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 19, "commits_low_confidence": false, "score": 72.4, "description": "Antigravity CLI brings the reasoning, execution, and orchestration capabilities of Antigravity agent harness directly into your terminal.", "language": "", "open_issues": 662, "category": "Coding Agents", "category_rank": 64, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.125, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 0, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T08:17:05Z", "slug": "antigravity-cli", "full_fetched_at": "2026-10-12T04:02:35Z", "source_note": "This GitHub repository is a public issue tracker for Antigravity, a closed-source product — it does not contain the product's source code. The OpenSSF Scorecard and license signals below describe that issue-tracker repo, not the shipped product.", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": null, "license_type": "proprietary", "license_override": "proprietary", "trust_score": 43.6, "trust_score_v2": 43.6, "rank_v2": 1137, "rank_v2_delta": 273, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 2.8, "maintenance": 17.1, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Core Data Agent Skill", "repo": "AvdLee/Core-Data-Agent-Skill", "display_repo": "", "url": "https://github.com/AvdLee/Core-Data-Agent-Skill", "listing_class": "skill", "rank": 311, "previous_rank": 310, "rank_delta": -1, "stars": 315, "stars_fmt": "315", "forks": 16, "forks_fmt": "16", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.8, "description": "An Agent Skill focused on Apple’s Core Data framework, helping with data modeling, fetch requests, performance, and common persistence patterns.", "language": "", "open_issues": 0, "category": "Agent Skills", "category_rank": 311, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T07:35:28Z", "slug": "core-data-agent-skill", "full_fetched_at": "2026-10-12T12:02:36Z", "source_note": "", "github_homepage": "https://www.avanderlee.com", "homepage_icon": "/site-icons/c188ebb18f48bc5f.png", "homepage_icon_for": "https://www.avanderlee.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.6, "trust_score_v2": 43.6, "rank_v2": 311, "rank_v2_delta": 1092, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.1, "maintenance": 10.1, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ACI.dev", "repo": "aipotheosis-labs/aci", "display_repo": "", "url": "https://github.com/aipotheosis-labs/aci", "listing_class": "agent", "rank": 1138, "previous_rank": 1134, "rank_delta": -4, "stars": 4908, "stars_fmt": "4.9k", "forks": 486, "forks_fmt": "486", "last_push": "2026-05-28", "days_ago": 137, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.6, "description": "ACI.dev is the open source tool-calling platform that hooks up 600+ tools into any agentic IDE or custom AI agent through direct function calling or a unified MCP server. The birthplace of VibeOps.", "language": "Python", "open_issues": 41, "category": "Protocols & Tool Integration", "category_rank": 54, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 9, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T14:59:34Z", "slug": "aci-dev", "full_fetched_at": "2026-10-12T04:02:02Z", "source_note": "", "github_homepage": "https://www.aci.dev/", "homepage_icon": "/site-icons/b38b0f2ba5c888f5.png", "homepage_icon_for": "https://www.aci.dev/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "E2B", "ElevenLabs", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in backend/pyproject.toml", "Found ElevenLabs dependency 'elevenlabs' in backend/pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in backend/pyproject.toml", "Found E2B dependency 'e2b' in backend/pyproject.toml", "Found Postgres dependency 'psycopg' in backend/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found extension-based path: frontend/src/components/ui-extensions/enhanced-data-table/README.md", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'pg' in backend/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 43.5, "trust_score_v2": 43.5, "rank_v2": 1138, "rank_v2_delta": 239, "trust_v2_adjustment": -0.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 12.0, "maintenance": 2.9, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Design Judge Skills", "repo": "SeanJ1ang/design-judge-skills", "display_repo": "", "url": "https://github.com/SeanJ1ang/design-judge-skills", "listing_class": "skill", "rank": 312, "previous_rank": 311, "rank_delta": -1, "stars": 712, "stars_fmt": "712", "forks": 102, "forks_fmt": "102", "last_push": "2026-08-24", "days_ago": 49, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.7, "description": "Evidence-driven Agent Skills for design award research, evaluation, award matching, entry writing, and submission readiness.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 312, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 10, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T17:56:50Z", "slug": "design-judge-skills", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 43.5, "trust_score_v2": 43.5, "rank_v2": 312, "rank_v2_delta": 1104, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.7, "maintenance": 8.7, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Loomle", "repo": "loomle/loomle", "display_repo": "", "url": "https://github.com/loomle/loomle", "listing_class": "agent", "rank": 1139, "previous_rank": 1210, "rank_delta": 71, "stars": 13, "stars_fmt": "13", "forks": 3, "forks_fmt": "3", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1, "commits_low_confidence": false, "score": 38.5, "description": "Agent-native Unreal Engine tooling through MCP", "language": "C++", "open_issues": 20, "category": "MCP Servers", "category_rank": 658, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:15:28Z", "slug": "loomle", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "https://loomle.ai", "homepage_icon": "/site-icons/b285328ad6f84b01.png", "homepage_icon_for": "https://loomle.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: client/src/mcp-server.ts", "Found MCP-related server test path: client/tests/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in client/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: site/_plugins/sal_lexer.rb", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.5, "trust_score_v2": 43.5, "rank_v2": 1139, "rank_v2_delta": 323, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 13.2, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Habitat-Lab", "repo": "facebookresearch/habitat-lab", "display_repo": "", "url": "https://github.com/facebookresearch/habitat-lab", "listing_class": "agent", "rank": 1140, "previous_rank": 1137, "rank_delta": -3, "stars": 3157, "stars_fmt": "3.2k", "forks": 690, "forks_fmt": "690", "last_push": "2026-05-07", "days_ago": 158, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.4, "description": "A modular high-level library to train embodied AI agents across a variety of tasks and environments.", "language": "Python", "open_issues": 257, "category": "Robotics & Embodied", "category_rank": 2, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 8, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 9, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:13:54Z", "slug": "habitat-lab", "full_fetched_at": "2026-10-12T04:02:30Z", "source_note": "", "github_homepage": "https://aihabitat.org/", "homepage_icon": "/site-icons/fb4947b7abdf1366.png", "homepage_icon_for": "https://aihabitat.org/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.4, "trust_score_v2": 43.4, "rank_v2": 1140, "rank_v2_delta": 284, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.5, "identity": 10.8, "transparency": 12.2, "maintenance": 1.5, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "GitMCP", "repo": "idosal/git-mcp", "display_repo": "", "url": "https://github.com/idosal/git-mcp", "listing_class": "agent", "rank": 1141, "previous_rank": 1135, "rank_delta": -6, "stars": 8461, "stars_fmt": "8.5k", "forks": 752, "forks_fmt": "752", "last_push": "2026-05-08", "days_ago": 157, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.2, "description": "Put an end to code hallucinations! GitMCP is a free, open-source, remote MCP server for any GitHub project", "language": "TypeScript", "open_issues": 57, "category": "MCP Servers", "category_rank": 659, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.92, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 1, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T18:03:46Z", "slug": "gitmcp", "full_fetched_at": "2026-10-12T04:02:43Z", "source_note": "", "github_homepage": "https://gitmcp.io", "homepage_icon": "/site-icons/a6e30216ff3c8b63.png", "homepage_icon_for": "https://gitmcp.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: app/chat/components/mcp-server-manager.tsx", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "Groq", "OpenAI", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Cohere dependency 'cohere' in package.json", "Found Groq dependency 'groq' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 43.4, "trust_score_v2": 43.4, "rank_v2": 1141, "rank_v2_delta": 280, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.7, "identity": 10.8, "transparency": 12.0, "maintenance": 1.5, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Himalayas Remote Jobs", "repo": "Himalayas-App/himalayas-mcp", "display_repo": "", "url": "https://github.com/Himalayas-App/himalayas-mcp", "listing_class": "agent", "rank": 1142, "previous_rank": 1136, "rank_delta": -6, "stars": 21, "stars_fmt": "21", "forks": 6, "forks_fmt": "6", "last_push": "2026-08-06", "days_ago": 67, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.7, "description": "Remote jobs MCP server — search 100,000+ remote jobs, post listings, find candidates, and check salary benchmarks from Claude, ChatGPT, Cursor, and any MCP client. Free, no API key required.", "language": "", "open_issues": 3, "category": "MCP Servers", "category_rank": 660, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.6, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T22:14:55Z", "slug": "himalayas-remote-jobs", "full_fetched_at": "2026-10-12T16:02:18Z", "source_note": "", "github_homepage": "https://himalayas.app/mcp", "homepage_icon": "/site-icons/675a4cac46025406.png", "homepage_icon_for": "https://himalayas.app/mcp", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.4, "trust_score_v2": 43.4, "rank_v2": 1142, "rank_v2_delta": 327, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 11.9, "maintenance": 7.5, "adoption": 3.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Baoyu Skills", "repo": "JimLiu/baoyu-skills", "display_repo": "", "url": "https://github.com/JimLiu/baoyu-skills", "listing_class": "skill", "rank": 313, "previous_rank": 313, "rank_delta": 0, "stars": 26585, "stars_fmt": "26.6k", "forks": 2923, "forks_fmt": "2.9k", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 63.2, "description": "", "language": "TypeScript", "open_issues": 11, "category": "Agent Skills", "category_rank": 313, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.16, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:12:37Z", "slug": "baoyu-skills", "full_fetched_at": "2026-10-12T16:02:33Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Azure OpenAI", "Google Gemini", "OpenAI", "OpenRouter", "Replicate" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini", "Found Replicate credential/config marker 'REPLICATE_API_TOKEN'", "README/docs also mention Replicate" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.4, "trust_score_v2": 43.4, "rank_v2": 313, "rank_v2_delta": 979, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 11.0, "maintenance": 9.9, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Apple Docs MCP", "repo": "kimsungwhee/apple-docs-mcp", "display_repo": "", "url": "https://github.com/kimsungwhee/apple-docs-mcp", "listing_class": "agent", "rank": 1143, "previous_rank": 1138, "rank_delta": -5, "stars": 1383, "stars_fmt": "1.4k", "forks": 69, "forks_fmt": "69", "last_push": "2026-03-17", "days_ago": 209, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.4, "description": "MCP server for Apple Developer Documentation - Search iOS/macOS/SwiftUI/UIKit docs, WWDC videos, Swift/Objective-C APIs & code examples in Claude, Cursor & AI assistants", "language": "TypeScript", "open_issues": 9, "category": "MCP Servers", "category_rank": 661, "npm_package": "@kimsungwhee/apple-docs-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1223, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.122, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:14:39Z", "slug": "apple-docs-mcp", "full_fetched_at": "2026-10-12T16:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@kimsungwhee/apple-docs-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@kimsungwhee/apple-docs-mcp", "version": "1.0.26" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:39Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.3, "trust_score_v2": 43.3, "rank_v2": 1143, "rank_v2_delta": 414, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 10.8, "maintenance": 0.0, "adoption": 11.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Auteur", "repo": "agiwhitelist/auteur", "display_repo": "", "url": "https://github.com/agiwhitelist/auteur", "listing_class": "skill", "rank": 314, "previous_rank": 314, "rank_delta": 0, "stars": 1038, "stars_fmt": "1.0k", "forks": 20, "forks_fmt": "20", "last_push": "2026-08-06", "days_ago": 67, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.0, "description": "The Claude Code skill that directs a website like a film. Commit-sheet, generated assets, build, and an executable anti-slop linter that gates every ship.", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 314, "npm_package": "auteur", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 6, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:27:06Z", "slug": "auteur", "full_fetched_at": "2026-10-12T08:02:40Z", "source_note": "", "github_homepage": "https://agiwhitelist.github.io/auteur/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'auteur' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "auteur", "version": "0.1.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:40Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.1, "trust_score_v2": 43.1, "rank_v2": 314, "rank_v2_delta": 1108, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.8, "maintenance": 7.5, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "NanoResearch", "repo": "OpenRaiser/NanoResearch", "display_repo": "", "url": "https://github.com/OpenRaiser/NanoResearch", "listing_class": "skill", "rank": 315, "previous_rank": 315, "rank_delta": 0, "stars": 1341, "stars_fmt": "1.3k", "forks": 91, "forks_fmt": "91", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 2, "commits_low_confidence": true, "score": 58.5, "description": "🦞+🔬 NanoResearch: The Autonomous AI Research Assistant", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 315, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 2.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 4, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:52:22Z", "slug": "nanoresearch", "full_fetched_at": "2026-10-11T20:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp_server/__init__.py", "Found MCP-related server path: mcp_server/server.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found credential/config marker 'NANORESEARCH_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.1, "trust_score_v2": 43.1, "rank_v2": 315, "rank_v2_delta": 1072, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.8, "identity": 10.8, "transparency": 10.2, "maintenance": 12.8, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AdalFlow", "repo": "SylphAI-Inc/AdalFlow", "display_repo": "", "url": "https://github.com/SylphAI-Inc/AdalFlow", "listing_class": "agent", "rank": 1144, "previous_rank": 1139, "rank_delta": -5, "stars": 4221, "stars_fmt": "4.2k", "forks": 388, "forks_fmt": "388", "last_push": "2026-05-29", "days_ago": 136, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.9, "description": "AdalFlow: The library to build & auto-optimize LLM applications.", "language": "Python", "open_issues": 35, "category": "Agent Frameworks", "category_rank": 103, "npm_package": "", "crate_package": "", "pypi_package": "adalflow", "docker_image": "", "vscode_extension": "", "weekly_downloads": 890, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.32, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T12:49:24Z", "slug": "adalflow", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "http://adalflow.sylph.ai/", "homepage_icon": "/site-icons/ff8129ed0efc92b0.png", "homepage_icon_for": "http://adalflow.sylph.ai/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Fireworks AI", "Google Gemini", "Groq", "Mistral AI", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in adalflow/pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in adalflow/pyproject.toml", "Found Google Gemini dependency 'google-generativeai' in adalflow/pyproject.toml", "Found Mistral AI dependency 'mistralai' in adalflow/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in adalflow/pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'adalflow' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "adalflow", "version": "1.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:31Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.0, "trust_score_v2": 43.0, "rank_v2": 1144, "rank_v2_delta": 285, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.3, "maintenance": 2.9, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Deployhq MCP Server", "repo": "deployhq/deployhq-mcp-server", "display_repo": "", "url": "https://github.com/deployhq/deployhq-mcp-server", "listing_class": "agent", "rank": 1145, "previous_rank": 1141, "rank_delta": -4, "stars": 13, "stars_fmt": "13", "forks": 2, "forks_fmt": "2", "last_push": "2026-07-22", "days_ago": 82, "weekly_commits": 0, "commits_low_confidence": false, "score": 22.7, "description": "DeployHQ MCP Server", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 662, "npm_package": "deployhq-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 50, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.051, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:17:06Z", "slug": "deployhq-mcp-server", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "https://deployhq.com/", "homepage_icon": "/site-icons/069efdfc35f6cf7a.png", "homepage_icon_for": "https://deployhq.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP-related server test path: src/__tests__/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DEPLOYHQ_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'deployhq-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "deployhq-mcp-server", "version": "1.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:05Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.0, "trust_score_v2": 43.0, "rank_v2": 1145, "rank_v2_delta": 399, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 11.3, "maintenance": 6.5, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Memvid", "repo": "memvid/memvid", "display_repo": "", "url": "https://github.com/memvid/memvid", "listing_class": "agent", "rank": 1146, "previous_rank": 1140, "rank_delta": -6, "stars": 16591, "stars_fmt": "16.6k", "forks": 1421, "forks_fmt": "1.4k", "last_push": "2026-07-14", "days_ago": 90, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.5, "description": "Memory layer for AI Agents. Replace complex RAG pipelines with a serverless, single-file memory layer. Give your agents instant retrieval and long-term memory.", "language": "Rust", "open_issues": 14, "category": "Memory & Knowledge", "category_rank": 45, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:55:09Z", "slug": "memvid", "full_fetched_at": "2026-10-12T08:01:57Z", "source_note": "", "github_homepage": "https://www.memvid.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 43.0, "trust_score_v2": 43.0, "rank_v2": 1146, "rank_v2_delta": 247, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.2, "maintenance": 6.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "N Skills", "repo": "numman-ali/n-skills", "display_repo": "", "url": "https://github.com/numman-ali/n-skills", "listing_class": "skill", "rank": 316, "previous_rank": 302, "rank_delta": -14, "stars": 1050, "stars_fmt": "1.1k", "forks": 109, "forks_fmt": "109", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 0, "commits_low_confidence": false, "score": 48.4, "description": "Curated plugin marketplace for AI agents - works with Claude Code, Codex, and openskills", "language": "TypeScript", "open_issues": 28, "category": "Agent Skills", "category_rank": 316, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.043, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:28:46Z", "slug": "n-skills", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (skills/automation/dev-browser/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 43.0, "trust_score_v2": 43.0, "rank_v2": 316, "rank_v2_delta": 1111, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.1, "maintenance": 10.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Openwebninja MCP", "repo": "OpenWeb-Ninja/openwebninja-mcp", "display_repo": "", "url": "https://github.com/OpenWeb-Ninja/openwebninja-mcp", "listing_class": "agent", "rank": 1147, "previous_rank": 1143, "rank_delta": -4, "stars": 37, "stars_fmt": "37", "forks": 5, "forks_fmt": "5", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 2, "commits_low_confidence": true, "score": 43.7, "description": "OpenWeb Ninja APIs MCP server", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 663, "npm_package": "@openwebninja/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 47, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.077, "scorecard_score": 1.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:47:10Z", "slug": "openwebninja-mcp", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OPENWEBNINJA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@openwebninja/mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 43.0, "trust_score_v2": 43.0, "rank_v2": 1147, "rank_v2_delta": 313, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.5, "identity": 10.8, "transparency": 9.9, "maintenance": 12.8, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Paperasse", "repo": "romainsimon/paperasse", "display_repo": "", "url": "https://github.com/romainsimon/paperasse", "listing_class": "skill", "rank": 317, "previous_rank": 316, "rank_delta": -1, "stars": 2521, "stars_fmt": "2.5k", "forks": 195, "forks_fmt": "195", "last_push": "2026-08-10", "days_ago": 63, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.5, "description": "🇫🇷 Skills pour agents IA spécialisés dans la bureaucratie française : Comptable, Notaire, ...", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 317, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.357, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:46:40Z", "slug": "paperasse", "full_fetched_at": "2026-10-12T00:02:38Z", "source_note": "", "github_homepage": "https://agentskill.sh/skillsets/paperasse", "homepage_icon": "/site-icons/c2f2f4465af478ad.png", "homepage_icon_for": "https://agentskill.sh/skillsets/paperasse", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'puppeteer' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.9, "trust_score_v2": 42.9, "rank_v2": 317, "rank_v2_delta": 1113, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.0, "maintenance": 7.8, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ip As Logo Skill", "repo": "s1dashu/ip-as-logo-skill", "display_repo": "", "url": "https://github.com/s1dashu/ip-as-logo-skill", "listing_class": "skill", "rank": 318, "previous_rank": 317, "rank_delta": -1, "stars": 5920, "stars_fmt": "5.9k", "forks": 286, "forks_fmt": "286", "last_push": "2026-08-22", "days_ago": 51, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.1, "description": "A compact Agent Skill for highly simplified, rounded, subtly neo-skeuomorphic IP mascot logos.", "language": "", "open_issues": 6, "category": "Agent Skills", "category_rank": 318, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.133, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:40:27Z", "slug": "ip-as-logo-skill", "full_fetched_at": "2026-10-12T00:01:58Z", "source_note": "", "github_homepage": "https://ipaslogo.com", "homepage_icon": "/site-icons/03de7a204816dc71.png", "homepage_icon_for": "https://ipaslogo.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.9, "trust_score_v2": 42.9, "rank_v2": 318, "rank_v2_delta": 1119, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.8, "identity": 10.8, "transparency": 10.6, "maintenance": 8.6, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Glebis Claude Skills", "repo": "glebis/claude-skills", "display_repo": "", "url": "https://github.com/glebis/claude-skills", "listing_class": "skill", "rank": 319, "previous_rank": 318, "rank_delta": -1, "stars": 391, "stars_fmt": "391", "forks": 59, "forks_fmt": "59", "last_push": "2026-10-08", "days_ago": 4, "weekly_commits": 2, "commits_low_confidence": true, "score": 54.3, "description": "Collection of Claude Code skills for enhanced AI workflows", "language": "JavaScript", "open_issues": 7, "category": "Agent Skills", "category_rank": 319, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:31:26Z", "slug": "glebis-claude-skills", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: init-tauri-app/assets/core/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in skill-studio/pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in skill-studio/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.9, "trust_score_v2": 42.9, "rank_v2": 319, "rank_v2_delta": 1090, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.5, "maintenance": 12.7, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ux MCP Server", "repo": "elsahafy/ux-mcp-server", "display_repo": "", "url": "https://github.com/elsahafy/ux-mcp-server", "listing_class": "agent", "rank": 1148, "previous_rank": 1145, "rank_delta": -3, "stars": 32, "stars_fmt": "32", "forks": 3, "forks_fmt": "3", "last_push": "2026-04-01", "days_ago": 194, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.9, "description": "MCP server providing 28 UX knowledge resources, 23 analysis tools & 4 workflow prompts. Works with Claude, Cursor, Continue.dev, Cline, Zed & any MCP client. WCAG, Nielsen heuristics, design systems, e-commerce, PWA, AI/ML & more.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 664, "npm_package": "@elsahafy/ux-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 82, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.323, "scorecard_score": 4.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:30:07Z", "slug": "ux-mcp-server", "full_fetched_at": "2026-10-12T16:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: PROMOTION/mcp-servers-pr.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@elsahafy/ux-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@elsahafy/ux-mcp-server", "version": "5.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:00Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.8, "trust_score_v2": 42.8, "rank_v2": 1148, "rank_v2_delta": 423, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.4, "identity": 10.8, "transparency": 12.4, "maintenance": 0.0, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "spreadsheet-kit MCP", "repo": "PSU3D0/agent-spreadsheet", "display_repo": "", "url": "https://github.com/PSU3D0/agent-spreadsheet", "listing_class": "agent", "rank": 1149, "previous_rank": 1142, "rank_delta": -7, "stars": 60, "stars_fmt": "60", "forks": 8, "forks_fmt": "8", "last_push": "2026-09-09", "days_ago": 33, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.5, "description": "MCP server for spreadsheet analysis and editing. Slim, token-efficient tool surface designed for LLM agents.", "language": "Rust", "open_issues": 2, "category": "MCP Servers", "category_rank": 665, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/psu3d0/spreadsheet-mcp:0.11.1-full", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:00:40Z", "slug": "spreadsheet-kit-mcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 42.8, "trust_score_v2": 42.8, "rank_v2": 1149, "rank_v2_delta": 335, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.3, "maintenance": 9.8, "adoption": 4.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MetaMCP", "repo": "metatool-ai/metamcp", "display_repo": "", "url": "https://github.com/metatool-ai/metamcp", "listing_class": "agent", "rank": 1150, "previous_rank": 1144, "rank_delta": -6, "stars": 2701, "stars_fmt": "2.7k", "forks": 436, "forks_fmt": "436", "last_push": "2026-06-22", "days_ago": 112, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.5, "description": "MCP Aggregator, Orchestrator, Middleware, Gateway in one docker", "language": "TypeScript", "open_issues": 103, "category": "Protocols & Tool Integration", "category_rank": 55, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 4.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T23:46:05Z", "slug": "metamcp", "full_fetched_at": "2026-10-12T08:01:57Z", "source_note": "", "github_homepage": "https://docs.metamcp.com", "homepage_icon": "/site-icons/5544a2f7acb5e532.png", "homepage_icon_for": "https://docs.metamcp.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: apps/backend/src/db/repositories/mcp-servers.repo.ts", "Found MCP-related server path: apps/backend/src/db/serializers/mcp-servers.serializer.ts", "Found MCP-related server test path: apps/backend/src/trpc/mcp-servers.impl.test.ts" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Postgres dependency 'pg' in apps/backend/package.json", "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database", "shell" ], "confidence": "high", "evidence": [ "Found shell dependency 'execa' in apps/backend/package.json", "Found database dependency 'pg' in apps/backend/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.7, "trust_score_v2": 42.7, "rank_v2": 1150, "rank_v2_delta": 289, "trust_v2_adjustment": -0.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 12.6, "maintenance": 4.5, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Kolada MCP Server", "repo": "isakskogstad/Kolada-MCP", "display_repo": "", "url": "https://github.com/isakskogstad/Kolada-MCP", "listing_class": "agent", "rank": 1151, "previous_rank": 1147, "rank_delta": -4, "stars": 12, "stars_fmt": "12", "forks": 8, "forks_fmt": "8", "last_push": "2026-04-22", "days_ago": 173, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.1, "description": "Kolada MCP: Connect your LLM via remote server URL or local installation to access official statistics for Swedish municipalities and regions.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 666, "npm_package": "kolada-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 58, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:06:18Z", "slug": "kolada-mcp-server", "full_fetched_at": "2026-10-12T16:02:39Z", "source_note": "", "github_homepage": "https://kolada-mcp-pafn.onrender.com/mcp", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'kolada-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "kolada-mcp-server", "version": "2.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:39Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.7, "trust_score_v2": 42.7, "rank_v2": 1151, "rank_v2_delta": 424, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 12.3, "maintenance": 0.5, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Mermaid", "repo": "hustcc/mcp-mermaid", "display_repo": "", "url": "https://github.com/hustcc/mcp-mermaid", "listing_class": "agent", "rank": 1152, "previous_rank": 1146, "rank_delta": -6, "stars": 642, "stars_fmt": "642", "forks": 60, "forks_fmt": "60", "last_push": "2026-05-15", "days_ago": 150, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.3, "description": "❤️ Generate mermaid diagram and chart with AI MCP dynamically.", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 667, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:10:48Z", "slug": "mcp-mermaid", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.7, "trust_score_v2": 42.7, "rank_v2": 1152, "rank_v2_delta": 327, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 11.7, "maintenance": 2.0, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Seo Crawler MCP", "repo": "houtini-ai/seo-crawler-mcp", "display_repo": "", "url": "https://github.com/houtini-ai/seo-crawler-mcp", "listing_class": "agent", "rank": 1153, "previous_rank": 1148, "rank_delta": -5, "stars": 16, "stars_fmt": "16", "forks": 3, "forks_fmt": "3", "last_push": "2026-08-08", "days_ago": 65, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.2, "description": "MOVED to SEO Audit Console: github.com/houtini-ai/seo-audit - archived. The crawler now ships there, merged with Google Search Console data and ranked by recoverable clicks.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 668, "npm_package": "@houtini/seo-crawler-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 32, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.111, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:22:06Z", "slug": "seo-crawler-mcp", "full_fetched_at": "2026-10-12T16:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@houtini/seo-crawler-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@houtini/seo-crawler-mcp", "version": "2.1.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:19Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "houtini-ai/seo-crawler-mcp", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 42.5, "trust_score_v2": 42.5, "rank_v2": 1153, "rank_v2_delta": 378, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.9, "maintenance": 7.7, "adoption": 5.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Story To Handdrawn Video", "repo": "gnipbao/story-to-handdrawn-video", "display_repo": "", "url": "https://github.com/gnipbao/story-to-handdrawn-video", "listing_class": "skill", "rank": 320, "previous_rank": 319, "rank_delta": -1, "stars": 2203, "stars_fmt": "2.2k", "forks": 300, "forks_fmt": "300", "last_push": "2026-09-22", "days_ago": 20, "weekly_commits": 2, "commits_low_confidence": false, "score": 59.8, "description": "Agent skill: convert Chinese story copy or ordered images into a hand-drawn diary-comic animation (silent MP4 picture track).", "language": "HTML", "open_issues": 1, "category": "Agent Skills", "category_rank": 320, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.125, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:14:54Z", "slug": "story-to-handdrawn-video", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.5, "trust_score_v2": 42.5, "rank_v2": 320, "rank_v2_delta": 1095, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.4, "identity": 10.8, "transparency": 9.7, "maintenance": 12.6, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Three.js Game Skills", "repo": "majidmanzarpour/threejs-game-skills", "display_repo": "", "url": "https://github.com/majidmanzarpour/threejs-game-skills", "listing_class": "skill", "rank": 321, "previous_rank": 321, "rank_delta": 0, "stars": 2485, "stars_fmt": "2.5k", "forks": 245, "forks_fmt": "245", "last_push": "2026-09-28", "days_ago": 14, "weekly_commits": 1, "commits_low_confidence": false, "score": 58.4, "description": "Agent skills for building playable, polished Three.js browser games with gameplay, AAA-style graphics, UI, QA, and optional AI-generated 3D, image, and audio assets.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 321, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-12T07:14:38Z", "slug": "three-js-game-skills", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "ElevenLabs", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini", "Found ElevenLabs credential/config marker 'ELEVENLABS_API_KEY'", "README/docs also mention ElevenLabs" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.4, "trust_score_v2": 42.4, "rank_v2": 321, "rank_v2_delta": 1079, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.5, "identity": 10.8, "transparency": 10.2, "maintenance": 12.3, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Vuejs Skills", "repo": "vuejs-ai/skills", "display_repo": "", "url": "https://github.com/vuejs-ai/skills", "listing_class": "skill", "rank": 322, "previous_rank": 320, "rank_delta": -2, "stars": 2897, "stars_fmt": "2.9k", "forks": 165, "forks_fmt": "165", "last_push": "2026-05-30", "days_ago": 135, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.5, "description": "Agent skills for Vue 3 development", "language": "", "open_issues": 9, "category": "Agent Skills", "category_rank": 322, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.589, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T22:46:20Z", "slug": "vuejs-skills", "full_fetched_at": "2026-10-12T00:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.3, "trust_score_v2": 42.3, "rank_v2": 322, "rank_v2_delta": 1121, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.3, "identity": 10.8, "transparency": 12.2, "maintenance": 3.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Devcontainer MCP", "repo": "aniongithub/devcontainer-mcp", "display_repo": "", "url": "https://github.com/aniongithub/devcontainer-mcp", "listing_class": "agent", "rank": 1154, "previous_rank": 1149, "rank_delta": -5, "stars": 28, "stars_fmt": "28", "forks": 4, "forks_fmt": "4", "last_push": "2026-09-08", "days_ago": 34, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.4, "description": "An MCP to allow Copilot and Claude Code to work directly with and inside of a devcontainer", "language": "Rust", "open_issues": 4, "category": "MCP Servers", "category_rank": 669, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.298, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 6, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 4 }, "scorecard_scanned_at": "2026-10-02T23:04:31Z", "slug": "devcontainer-mcp", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.3, "trust_score_v2": 42.3, "rank_v2": 1154, "rank_v2_delta": 334, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.1, "maintenance": 9.7, "adoption": 3.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Flstudio MCP", "repo": "rosasynthesiz/flstudio-mcp", "display_repo": "", "url": "https://github.com/rosasynthesiz/flstudio-mcp", "listing_class": "agent", "rank": 1155, "previous_rank": 1152, "rank_delta": -3, "stars": 83, "stars_fmt": "83", "forks": 14, "forks_fmt": "14", "last_push": "2026-07-03", "days_ago": 101, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.0, "description": "AI-powered FL Studio control via the Model Context Protocol. Beyond piano-roll notes — full in-DAW mixing (Mix Doctor, gain staging, EQ/comp/reverb, reference matching), routing, and composition through Claude and other MCP clients. 67 tools. Windows.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 670, "npm_package": "", "crate_package": "", "pypi_package": "fl-studio-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 34, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.024, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T03:01:26Z", "slug": "flstudio-mcp", "full_fetched_at": "2026-10-12T00:01:58Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'fl-studio-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "fl-studio-mcp", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:58Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.3, "trust_score_v2": 42.3, "rank_v2": 1155, "rank_v2_delta": 424, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.0, "identity": 10.8, "transparency": 10.5, "maintenance": 5.3, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Nexu", "repo": "nexu-io/nexu", "display_repo": "", "url": "https://github.com/nexu-io/nexu", "listing_class": "skill", "rank": 323, "previous_rank": 322, "rank_delta": -1, "stars": 3282, "stars_fmt": "3.3k", "forks": 262, "forks_fmt": "262", "last_push": "2026-04-26", "days_ago": 169, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.9, "description": "The simplest desktop client for OpenClaw 🦞 — bridge your Agent to WeChat, Feishu, Slack & Discord in one click. Works with Claude Code, Codex & any LLM. BYOK, Oauth, local-first, chat from your phone 24/7.", "language": "TypeScript", "open_issues": 214, "category": "Agent Skills", "category_rank": 323, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T17:26:55Z", "slug": "nexu", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "https://nexu.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/controller/static/runtime-plugins/langfuse-tracer/index.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.2, "trust_score_v2": 42.2, "rank_v2": 323, "rank_v2_delta": 1124, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.4, "identity": 10.8, "transparency": 12.2, "maintenance": 0.7, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Acontext", "repo": "memodb-io/Acontext", "display_repo": "", "url": "https://github.com/memodb-io/Acontext", "listing_class": "skill", "rank": 324, "previous_rank": 323, "rank_delta": -1, "stars": 3692, "stars_fmt": "3.7k", "forks": 333, "forks_fmt": "333", "last_push": "2026-07-14", "days_ago": 90, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.7, "description": "Agent Skills as a Memory Layer", "language": "JavaScript", "open_issues": 15, "category": "Agent Skills", "category_rank": 324, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.59, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:15:05Z", "slug": "acontext", "full_fetched_at": "2026-10-12T00:02:06Z", "source_note": "", "github_homepage": "https://acontext.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: landingpage/.cursor/mcp.json", "Found MCP-related server path: src/packages/claude-code/plugin/scripts/mcp-server.cjs" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Postgres", "Supabase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in docs/package.json", "README/docs also mention OpenAI", "Found Supabase dependency 'supabase' in dashboard/package.json", "Found Postgres dependency 'pg' in src/server/ui/package.json", "README/docs also mention Postgres", "Ships a Claude Code plugin manifest (src/packages/claude-code/plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "Found database dependency 'pg' in src/server/ui/package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 42.2, "trust_score_v2": 42.2, "rank_v2": 324, "rank_v2_delta": 1018, "trust_v2_adjustment": -3.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 11.9, "maintenance": 6.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Propresenter MCP", "repo": "alxpark/propresenter-mcp", "display_repo": "", "url": "https://github.com/alxpark/propresenter-mcp", "listing_class": "agent", "rank": 1156, "previous_rank": 1150, "rank_delta": -6, "stars": 14, "stars_fmt": "14", "forks": 2, "forks_fmt": "2", "last_push": "2026-06-26", "days_ago": 108, "weekly_commits": 0, "commits_low_confidence": false, "score": 19.3, "description": "ProPresenter 7 MCP Server", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 671, "npm_package": "@alxpark/propresenter-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 60, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-07T09:53:07Z", "slug": "propresenter-mcp", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@alxpark/propresenter-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@alxpark/propresenter-mcp", "version": "1.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:42Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.2, "trust_score_v2": 42.2, "rank_v2": 1156, "rank_v2_delta": 427, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 10.9, "maintenance": 4.8, "adoption": 5.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PocketFlow", "repo": "The-Pocket/PocketFlow", "display_repo": "", "url": "https://github.com/The-Pocket/PocketFlow", "listing_class": "agent", "rank": 1157, "previous_rank": 1151, "rank_delta": -6, "stars": 11235, "stars_fmt": "11.2k", "forks": 1213, "forks_fmt": "1.2k", "last_push": "2026-07-26", "days_ago": 78, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.9, "description": "Pocket Flow: 100-line LLM framework. Let Agents build Agents!", "language": "Python", "open_issues": 60, "category": "Agent Frameworks", "category_rank": 104, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:42:21Z", "slug": "pocketflow", "full_fetched_at": "2026-10-12T08:02:33Z", "source_note": "", "github_homepage": "https://the-pocket.github.io/PocketFlow/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency 'fastmcp' in cookbook/pocketflow-mcp/requirements.txt" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in cookbook/pocketflow-a2a/requirements.txt", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "shell" ], "confidence": "medium", "evidence": [ "Found shell dependency 'subprocess' in cookbook/pocketflow-tracing/setup.py" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.2, "trust_score_v2": 42.2, "rank_v2": 1157, "rank_v2_delta": 289, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 10.5, "maintenance": 6.8, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude For Financial Services Cn", "repo": "jwangkun/claude-for-financial-services-cn", "display_repo": "", "url": "https://github.com/jwangkun/claude-for-financial-services-cn", "listing_class": "skill", "rank": 325, "previous_rank": 324, "rank_delta": -1, "stars": 834, "stars_fmt": "834", "forks": 132, "forks_fmt": "132", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 1, "commits_low_confidence": false, "score": 52.3, "description": " 63 个 Claude Skills，为 A 股金融从业者而生 基于 Anthropic 官方 claude-for-financial-services 深度适配国内市场，现已开源。", "language": "Python", "open_issues": 3, "category": "Agent Skills", "category_rank": 325, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.067, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T16:52:38Z", "slug": "claude-for-financial-services-cn", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp-servers/akshare-mcp/requirements.txt", "Found MCP-related server path: mcp-servers/akshare-mcp/server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (agent-plugins/china-earnings-reviewer/.claude-plugin/plugin.json)", "Found credential/config marker 'WIND_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 42.1, "trust_score_v2": 42.1, "rank_v2": 325, "rank_v2_delta": 1094, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.7, "maintenance": 11.3, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "JobGPT - Job Search Automation & Auto Apply", "repo": "6figr-com/jobgpt-mcp-server", "display_repo": "", "url": "https://github.com/6figr-com/jobgpt-mcp-server", "listing_class": "agent", "rank": 1158, "previous_rank": 1154, "rank_delta": -4, "stars": 26, "stars_fmt": "26", "forks": 9, "forks_fmt": "9", "last_push": "2026-08-15", "days_ago": 58, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.2, "description": "MCP server for JobGPT — search jobs, auto-apply, generate resumes, and track applications from Claude, Cursor, Windsurf, and any MCP client", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 672, "npm_package": "jobgpt-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 47, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.049, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:45:56Z", "slug": "jobgpt-job-search-automation-auto-apply", "full_fetched_at": "2026-10-12T08:02:20Z", "source_note": "", "github_homepage": "https://6figr.com/jobgpt-ai", "homepage_icon": "/site-icons/a8a09ea2b1a4c653.png", "homepage_icon_for": "https://6figr.com/jobgpt-ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'JOBGPT_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'jobgpt-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "jobgpt-mcp-server", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:20Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 42.1, "trust_score_v2": 42.1, "rank_v2": 1158, "rank_v2_delta": 404, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.5, "identity": 10.8, "transparency": 10.0, "maintenance": 8.1, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Frontman", "repo": "frontman-ai/frontman", "display_repo": "", "url": "https://github.com/frontman-ai/frontman", "listing_class": "agent", "rank": 1159, "previous_rank": 1155, "rank_delta": -4, "stars": 714, "stars_fmt": "714", "forks": 50, "forks_fmt": "50", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 131, "commits_low_confidence": false, "score": 75.0, "description": "The AI agent that lives in your framework/browser", "language": "ReScript", "open_issues": 225, "category": "Coding Agents", "category_rank": 65, "npm_package": "@frontman-ai/nextjs", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 877, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "frontman", "full_fetched_at": "2026-10-12T16:02:12Z", "source_note": "", "github_homepage": "https://frontman.sh", "homepage_icon": "/site-icons/dc5b08d8e6699390.png", "homepage_icon_for": "https://frontman.sh", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: apps/marketing/public/blog/best-wordpress-mcp-servers-and-plugins-2026-cover.png", "Found MCP-related server path: apps/marketing/src/content/blog/best-wordpress-mcp-servers-and-plugins-2026.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: libs/experimental-rescript-webapi/src/EncryptedMediaExtensions/EncryptedMediaExtensionsHTMLMediaElement.res", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@frontman-ai/nextjs' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@frontman-ai/nextjs", "version": "2.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:12Z" }, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 42.1, "trust_score_v2": 42.1, "rank_v2": 1159, "rank_v2_delta": 415, "trust_v2_adjustment": 5.4, "trust_confidence": 0.67, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Microsoft MCP Server for Enterprise", "repo": "microsoft/EnterpriseMCP", "display_repo": "", "url": "https://github.com/microsoft/EnterpriseMCP", "listing_class": "agent", "rank": 1160, "previous_rank": 1153, "rank_delta": -7, "stars": 58, "stars_fmt": "58", "forks": 15, "forks_fmt": "15", "last_push": "2026-06-04", "days_ago": 130, "weekly_commits": 0, "commits_low_confidence": false, "score": 23.3, "description": "", "language": "", "open_issues": 3, "category": "MCP Servers", "category_rank": 673, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 5.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-22T22:42:14Z", "slug": "microsoft-mcp-server-for-enterprise", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "CC-BY-4.0", "license_type": "open", "license_override": "", "trust_score": 42.0, "trust_score_v2": 42.0, "rank_v2": 1160, "rank_v2_delta": 338, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 12.8, "maintenance": 3.3, "adoption": 4.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DataDoe MCP", "repo": "Deltologic/datadoe-mcp", "display_repo": "", "url": "https://github.com/Deltologic/datadoe-mcp", "listing_class": "agent", "rank": 1161, "previous_rank": 1156, "rank_delta": -5, "stars": 15, "stars_fmt": "15", "forks": 0, "forks_fmt": "0", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 1, "commits_low_confidence": true, "score": 35.2, "description": "Hosted Amazon Seller & Vendor MCP server. Connect Claude, ChatGPT, Cursor, Codex, Gemini, GitHub Copilot to Amazon SP-API and Ads API data", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 674, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:33:07Z", "slug": "datadoe-mcp", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "https://datadoe.com/", "homepage_icon": "/site-icons/7dfa01a7859851ec.png", "homepage_icon_for": "https://datadoe.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.8, "trust_score_v2": 41.8, "rank_v2": 1161, "rank_v2_delta": 341, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.7, "maintenance": 12.2, "adoption": 2.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Verilog Generator", "repo": "Eriemon/verilog-generator", "display_repo": "", "url": "https://github.com/Eriemon/verilog-generator", "listing_class": "skill", "rank": 326, "previous_rank": 325, "rank_delta": -1, "stars": 315, "stars_fmt": "315", "forks": 22, "forks_fmt": "22", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.6, "description": "Agent skill for Verilog-2001 RTL generation and FPGA design workflows.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 326, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:43:54Z", "slug": "verilog-generator", "full_fetched_at": "2026-10-12T16:01:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.7, "trust_score_v2": 41.7, "rank_v2": 326, "rank_v2_delta": 1138, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 11.6, "maintenance": 8.8, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ai Doc Gen", "repo": "divar-ir/ai-doc-gen", "display_repo": "", "url": "https://github.com/divar-ir/ai-doc-gen", "listing_class": "skill", "rank": 327, "previous_rank": 326, "rank_delta": -1, "stars": 767, "stars_fmt": "767", "forks": 81, "forks_fmt": "81", "last_push": "2026-07-21", "days_ago": 83, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.7, "description": "AI-powered multi-agent system that automatically analyzes codebases and generates comprehensive documentation. Features GitLab integration, concurrent processing, and multiple LLM support for better code understanding and developer onboarding.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 327, "npm_package": "", "crate_package": "", "pypi_package": "ai-doc-gen", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.395, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:30:02Z", "slug": "ai-doc-gen", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'ai-doc-gen' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ai-doc-gen", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:03Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.6, "trust_score_v2": 41.6, "rank_v2": 327, "rank_v2_delta": 1127, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.1, "maintenance": 6.5, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Nslookup MCP", "repo": "NsLookup-io/nslookup-mcp", "display_repo": "", "url": "https://github.com/NsLookup-io/nslookup-mcp", "listing_class": "agent", "rank": 1162, "previous_rank": 1157, "rank_delta": -5, "stars": 22, "stars_fmt": "22", "forks": 3, "forks_fmt": "3", "last_push": "2026-07-17", "days_ago": 87, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.1, "description": "MCP server for DNS lookups, propagation checks, and certificate monitoring via nslookup.io", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 675, "npm_package": "@nslookup-io/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 48, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.029, "scorecard_score": 2.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T19:05:10Z", "slug": "nslookup-mcp", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://nslookup.io", "homepage_icon": "/site-icons/f56cfc4121bb7036.png", "homepage_icon_for": "https://nslookup.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@nslookup-io/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@nslookup-io/mcp-server", "version": "1.6.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:05Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.6, "trust_score_v2": 41.6, "rank_v2": 1162, "rank_v2_delta": 431, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.8, "identity": 10.8, "transparency": 10.3, "maintenance": 6.2, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Scopus MCP", "repo": "qwe4559999/scopus-mcp", "display_repo": "", "url": "https://github.com/qwe4559999/scopus-mcp", "listing_class": "agent", "rank": 1163, "previous_rank": 1158, "rank_delta": -5, "stars": 45, "stars_fmt": "45", "forks": 13, "forks_fmt": "13", "last_push": "2026-05-17", "days_ago": 148, "weekly_commits": 0, "commits_low_confidence": false, "score": 19.7, "description": "A Model Context Protocol (MCP) server for Elsevier Scopus. Allows AI assistants like Claude to search academic papers, retrieve abstracts, and analyze author profiles directly.", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 676, "npm_package": "", "crate_package": "", "pypi_package": "scopus-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 113, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.289, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T00:10:58Z", "slug": "scopus-mcp", "full_fetched_at": "2026-10-11T20:02:12Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'SCOPUS_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'scopus-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "scopus-mcp", "version": "0.1.8" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:12Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.5, "trust_score_v2": 41.5, "rank_v2": 1163, "rank_v2_delta": 414, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.3, "maintenance": 2.1, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Spec Workflow MCP", "repo": "Pimzino/spec-workflow-mcp", "display_repo": "", "url": "https://github.com/Pimzino/spec-workflow-mcp", "listing_class": "agent", "rank": 1164, "previous_rank": 1161, "rank_delta": -3, "stars": 4304, "stars_fmt": "4.3k", "forks": 355, "forks_fmt": "355", "last_push": "2026-07-03", "days_ago": 101, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.8, "description": "A Model Context Protocol (MCP) server that provides structured spec-driven development workflow tools for AI-assisted software development, featuring a real-time web dashboard and VSCode extension for monitoring and managing your project's progress directly in your development environment.", "language": "TypeScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 677, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.13, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:19:01Z", "slug": "spec-workflow-mcp", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/.mcp.json", "README/docs also mention a marketplace plugin/integration surface", "Found code dependency 'simple-git' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 41.5, "trust_score_v2": 41.5, "rank_v2": 1164, "rank_v2_delta": 330, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 11.0, "maintenance": 5.3, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "luxas", "repo": "Muuuun/luxas", "display_repo": "", "url": "https://github.com/Muuuun/luxas", "listing_class": "agent", "rank": 1165, "previous_rank": 1163, "rank_delta": -2, "stars": 1170, "stars_fmt": "1.2k", "forks": 18, "forks_fmt": "18", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 0, "commits_low_confidence": true, "score": 49.2, "description": "An autonomous research colleague — from a question to a compiled manuscript, while you sleep.", "language": "TypeScript", "open_issues": 1, "category": "Research & Data", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T05:55:21Z", "slug": "luxas", "full_fetched_at": "2026-10-11T20:02:02Z", "source_note": "", "github_homepage": "https://luxas.im", "homepage_icon": "/site-icons/348b63f74f200464.png", "homepage_icon_for": "https://luxas.im", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in skills/figure/scripts/requirements.txt", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.5, "trust_score_v2": 41.5, "rank_v2": 1165, "rank_v2_delta": 230, "trust_v2_adjustment": -2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.7, "maintenance": 11.9, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "HexStrike AI", "repo": "0x4m4/hexstrike-ai", "display_repo": "", "url": "https://github.com/0x4m4/hexstrike-ai", "listing_class": "agent", "rank": 1166, "previous_rank": 1159, "rank_delta": -7, "stars": 12700, "stars_fmt": "12.7k", "forks": 2578, "forks_fmt": "2.6k", "last_push": "2026-08-03", "days_ago": 70, "weekly_commits": 0, "commits_low_confidence": false, "score": 55.8, "description": "HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security…", "language": "Python", "open_issues": 61, "category": "Security & Guardrails", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.048, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:57:20Z", "slug": "hexstrike-ai", "full_fetched_at": "2026-10-12T00:02:15Z", "source_note": "", "github_homepage": "https://www.hexstrike.com/", "homepage_icon": "/site-icons/805d23fcf75a7adc.png", "homepage_icon_for": "https://www.hexstrike.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in requirements.txt" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'selenium' in requirements.txt", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.5, "trust_score_v2": 41.5, "rank_v2": 1166, "rank_v2_delta": 334, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.1, "identity": 10.8, "transparency": 9.8, "maintenance": 7.3, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PostgreSQL performance Tuner MCP Server", "repo": "isdaniel/pgtuner_mcp", "display_repo": "", "url": "https://github.com/isdaniel/pgtuner_mcp", "listing_class": "agent", "rank": 1167, "previous_rank": 1160, "rank_delta": -7, "stars": 29, "stars_fmt": "29", "forks": 5, "forks_fmt": "5", "last_push": "2026-06-02", "days_ago": 132, "weekly_commits": 0, "commits_low_confidence": false, "score": 19.2, "description": "provides AI-powered PostgreSQL performance tuning capabilities.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 678, "npm_package": "", "crate_package": "", "pypi_package": "pgtuner-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 165, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.048, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 0, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:23:37Z", "slug": "postgresql-performance-tuner-mcp-server", "full_fetched_at": "2026-10-12T16:02:28Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Postgres dependency 'psycopg' in pyproject.toml", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'pgtuner-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "pgtuner-mcp", "version": "0.6.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:28Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.4, "trust_score_v2": 41.4, "rank_v2": 1167, "rank_v2_delta": 424, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.1, "maintenance": 3.2, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MiroThinker", "repo": "MiroMindAI/MiroThinker", "display_repo": "", "url": "https://github.com/MiroMindAI/MiroThinker", "listing_class": "agent", "rank": 1168, "previous_rank": 1167, "rank_delta": -1, "stars": 8424, "stars_fmt": "8.4k", "forks": 645, "forks_fmt": "645", "last_push": "2026-07-06", "days_ago": 98, "weekly_commits": 0, "commits_low_confidence": false, "score": 48.1, "description": "MiroThinker is a deep research agent optimized for complex research and prediction tasks. Our latest models, MiroThinker-1.7, achieves 74.0 and 75.3 on the BrowseComp and BrowseComp Zh, respectively.", "language": "Python", "open_issues": 3, "category": "Research & Data", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.49, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:48:29Z", "slug": "mirothinker", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "https://miromind.ai/", "homepage_icon": "/site-icons/40b7ef92188690e4.png", "homepage_icon_for": "https://miromind.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: libs/miroflow-tools/src/miroflow_tools/dev_mcp_servers/jina_scrape_llm_summary.py", "Found MCP-related server path: libs/miroflow-tools/src/miroflow_tools/dev_mcp_servers/search_and_scrape_webpage.py", "Found MCP dependency 'fastmcp' in apps/miroflow-agent/pyproject.toml", "Found MCP dependency 'fastmcp' in libs/miroflow-tools/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "E2B", "Google Gemini", "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/collect-trace/pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in apps/miroflow-agent/pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in libs/miroflow-tools/pyproject.toml", "Found database dependency 'redis' in libs/miroflow-tools/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.4, "trust_score_v2": 41.4, "rank_v2": 1168, "rank_v2_delta": 267, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.2, "identity": 10.8, "transparency": 11.1, "maintenance": 5.5, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sperax Crypto MCP", "repo": "Sperax/sperax-crypto-mcp", "display_repo": "", "url": "https://github.com/Sperax/sperax-crypto-mcp", "listing_class": "agent", "rank": 1169, "previous_rank": 1164, "rank_delta": -5, "stars": 16, "stars_fmt": "16", "forks": 3, "forks_fmt": "3", "last_push": "2026-09-20", "days_ago": 22, "weekly_commits": 1, "commits_low_confidence": false, "score": 35.9, "description": "MCP server and plugin for Sperax Protocol – USDs, SPA, veSPA & Demeter on Arbitrum and BNB Chain. Listed on Anthropic's official MCP Registry.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 679, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.205, "scorecard_score": 2.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:23:19Z", "slug": "sperax-crypto-mcp", "full_fetched_at": "2026-10-12T00:02:15Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: BNB-Chain-MCP/binance-mcp-server/.gitignore", "Found MCP-related server path: BNB-Chain-MCP/binance-mcp-server/README.md", "Found MCP-related server docs path: BNB-Chain-MCP/binance-us-mcp-server/docs/API.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: BNB-Chain-MCP/examples/integrations/autogpt-plugin/README.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.4, "trust_score_v2": 41.4, "rank_v2": 1169, "rank_v2_delta": 334, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.8, "identity": 10.8, "transparency": 10.4, "maintenance": 11.7, "adoption": 3.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ByteRover CLI", "repo": "campfirein/byterover-cli", "display_repo": "", "url": "https://github.com/campfirein/byterover-cli", "listing_class": "agent", "rank": 1170, "previous_rank": 1165, "rank_delta": -5, "stars": 4955, "stars_fmt": "5.0k", "forks": 455, "forks_fmt": "455", "last_push": "2026-06-25", "days_ago": 109, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.6, "description": "ByteRover CLI (brv) - The portable memory layer for autonomous coding agents (formerly Cipher)", "language": "TypeScript", "open_issues": 11, "category": "Memory & Knowledge", "category_rank": 46, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.35, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:08:00Z", "slug": "byterover-cli", "full_fetched_at": "2026-10-12T04:02:19Z", "source_note": "", "github_homepage": "https://docs.byterover.dev/", "homepage_icon": "/site-icons/c267eccaf86c66e7.png", "homepage_icon_for": "https://docs.byterover.dev/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/server/infra/mcp/mcp-server.ts", "Found MCP-related server test path: test/unit/infra/mcp/mcp-server-stop.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "Google Gemini", "Groq", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/agent/infra/tools/plugins/index.ts", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "campfirein/byterover-cli", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 41.3, "trust_score_v2": 41.3, "rank_v2": 1170, "rank_v2_delta": 272, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 11.7, "maintenance": 4.7, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MolmoWeb", "repo": "allenai/molmoweb", "display_repo": "", "url": "https://github.com/allenai/molmoweb", "listing_class": "agent", "rank": 1171, "previous_rank": 1166, "rank_delta": -5, "stars": 591, "stars_fmt": "591", "forks": 81, "forks_fmt": "81", "last_push": "2026-09-05", "days_ago": 37, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.4, "description": "", "language": "Python", "open_issues": 2, "category": "Browser & Computer Use", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.293, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:01:32Z", "slug": "molmoweb", "full_fetched_at": "2026-10-12T04:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Browserbase", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.3, "trust_score_v2": 41.3, "rank_v2": 1171, "rank_v2_delta": 219, "trust_v2_adjustment": -2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.4, "maintenance": 9.5, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LycheeMemory", "repo": "LycheeMem/LycheeMem", "display_repo": "", "url": "https://github.com/LycheeMem/LycheeMem", "listing_class": "agent", "rank": 1172, "previous_rank": 1168, "rank_delta": -4, "stars": 1096, "stars_fmt": "1.1k", "forks": 18, "forks_fmt": "18", "last_push": "2026-08-06", "days_ago": 67, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.2, "description": "Lightweight Long-Term Memory for LLM Agents.", "language": "Python", "open_issues": 2, "category": "Memory & Knowledge", "category_rank": 47, "npm_package": "", "crate_package": "", "pypi_package": "lycheemem", "docker_image": "", "vscode_extension": "", "weekly_downloads": 17, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.07, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T04:09:37Z", "slug": "lycheememory", "full_fetched_at": "2026-10-09T04:02:13Z", "source_note": "", "github_homepage": "https://lycheemem.github.io", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp/server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: claude-plugin/lycheemem/.claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'lycheemem' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "lycheemem", "version": "0.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-09T04:02:13Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.3, "trust_score_v2": 41.3, "rank_v2": 1172, "rank_v2_delta": 285, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 10.9, "maintenance": 7.5, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MiroFlow", "repo": "MiroMindAI/MiroFlow", "display_repo": "", "url": "https://github.com/MiroMindAI/MiroFlow", "listing_class": "agent", "rank": 1173, "previous_rank": 1169, "rank_delta": -4, "stars": 3118, "stars_fmt": "3.1k", "forks": 327, "forks_fmt": "327", "last_push": "2026-07-06", "days_ago": 98, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.1, "description": "🏆 Top-1 on 5+ benchmarks | Web UI | Supports MiroThinker, Claude, Kimi, OpenAI", "language": "Python", "open_issues": 0, "category": "Multi-Agent Systems", "category_rank": 33, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.837, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:40:32Z", "slug": "miroflow", "full_fetched_at": "2026-10-12T08:01:58Z", "source_note": "", "github_homepage": "https://miromindai.github.io/MiroFlow/", "homepage_icon": "/site-icons/14eafbbaa79eb71a.png", "homepage_icon_for": "https://miromindai.github.io/MiroFlow/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: src/tool/mcp_servers/__init__.py", "Found MCP-related server path: src/tool/mcp_servers/audio_mcp_server.py", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "E2B", "Google Gemini", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.3, "trust_score_v2": 41.3, "rank_v2": 1173, "rank_v2_delta": 277, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 10.5, "maintenance": 5.5, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ai Agent Team", "repo": "peterfei/ai-agent-team", "display_repo": "", "url": "https://github.com/peterfei/ai-agent-team", "listing_class": "skill", "rank": 328, "previous_rank": 327, "rank_delta": -1, "stars": 441, "stars_fmt": "441", "forks": 68, "forks_fmt": "68", "last_push": "2026-06-29", "days_ago": 105, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.1, "description": "AI Agent Team-拥有24/7专业AI开发团队：产品经理、前端开发、后端开发、测试工程师、DevOps工程师、技术负责人。一键安装，支持中英文命令，大幅提升开发效率！", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 328, "npm_package": "ai-agent-team", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 51, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.048, "scorecard_score": 1.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T07:31:16Z", "slug": "ai-agent-team", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude/agents') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "filesystem" ], "confidence": "high", "evidence": [ "Found browser dependency 'puppeteer' in package.json", "Found filesystem dependency 'fs-extra' in .claude/skills/softcopyright/package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'ai-agent-team' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ai-agent-team", "version": "2.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:10Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.3, "trust_score_v2": 41.3, "rank_v2": 328, "rank_v2_delta": 1258, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.9, "identity": 10.8, "transparency": 9.6, "maintenance": 5.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Activepieces", "repo": "activepieces/activepieces", "display_repo": "", "url": "https://github.com/activepieces/activepieces", "listing_class": "agent", "rank": 1174, "previous_rank": 1173, "rank_delta": -1, "stars": 25023, "stars_fmt": "25.0k", "forks": 4326, "forks_fmt": "4.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 488, "commits_low_confidence": false, "score": 93.3, "description": "AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents", "language": "TypeScript", "open_issues": 450, "category": "Workflow Platforms", "category_rank": 25, "npm_package": "@activepieces/shared", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 878484, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "activepieces", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "https://www.activepieces.com", "homepage_icon": "/site-icons/11f3ddf7bf0aaf9d.png", "homepage_icon_for": "https://www.activepieces.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: .agents/skills/mcp-builder/reference/node_mcp_server.md", "Found MCP-related server path: .agents/skills/mcp-builder/reference/python_mcp_server.md", "Found MCP-related server test path: packages/server/api/test/integration/cloud/mcp/mcp-project-server-response.test.ts", "Found MCP-related server test path: packages/web/test/app/components/project-settings/mcp-server/tool-tiers/mcp-tool-tier-list.test.tsx" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: packages/web/src/app/builder/piece-properties/text-input-with-mentions/extensions/bracket-nodes.tsx", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@activepieces/shared' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 41.3, "trust_score_v2": 41.3, "rank_v2": 1174, "rank_v2_delta": 287, "trust_v2_adjustment": -0.6, "trust_confidence": 0.67, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 18.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Aws Skills", "repo": "zxkane/aws-skills", "display_repo": "", "url": "https://github.com/zxkane/aws-skills", "listing_class": "skill", "rank": 329, "previous_rank": 328, "rank_delta": -1, "stars": 366, "stars_fmt": "366", "forks": 39, "forks_fmt": "39", "last_push": "2026-06-15", "days_ago": 119, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.3, "description": "Claude Code plugins and agent skills for AWS development — IaC(CDK/SST), serverless, cost ops, and Bedrock AgentCore", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 329, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.212, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T22:31:44Z", "slug": "aws-skills", "full_fetched_at": "2026-10-12T04:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: plugins/aws-agentic-ai/skills/aws-agentic-ai/scripts/mcp-server-template.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.2, "trust_score_v2": 41.2, "rank_v2": 329, "rank_v2_delta": 1179, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 12.1, "maintenance": 4.1, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "XcodeMCP", "repo": "lapfelix/XcodeMCP", "display_repo": "", "url": "https://github.com/lapfelix/XcodeMCP", "listing_class": "agent", "rank": 1175, "previous_rank": 1172, "rank_delta": -3, "stars": 59, "stars_fmt": "59", "forks": 4, "forks_fmt": "4", "last_push": "2026-02-05", "days_ago": 249, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.0, "description": "MCP server for Xcode that wraps its AppleScript interface & uses XCLogParser to return clear build results", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 680, "npm_package": "xcodemcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 53, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.67, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:45:48Z", "slug": "xcodemcp", "full_fetched_at": "2026-10-11T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'xcodemcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "xcodemcp", "version": "2.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:21Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.2, "trust_score_v2": 41.2, "rank_v2": 1175, "rank_v2_delta": 422, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Vorim MCP Server", "repo": "Vorim-AI-Labs/vorim-mcp-server", "display_repo": "", "url": "https://github.com/Vorim-AI-Labs/vorim-mcp-server", "listing_class": "agent", "rank": 1176, "previous_rank": 1162, "rank_delta": -14, "stars": 54, "stars_fmt": "54", "forks": 6, "forks_fmt": "6", "last_push": "2026-08-13", "days_ago": 60, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.1, "description": "MCP server for Vorim AI — AI agent identity, permissions, and audit trails. 19 tools for Claude, OpenAI, Cursor, VS Code, and any MCP-compatible client.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 681, "npm_package": "@vorim/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 192, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:10:58Z", "slug": "vorim-mcp-server", "full_fetched_at": "2026-10-12T00:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'VORIM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@vorim/mcp-server' points to vorim-ai-labs/vorim-protocol (same owner as vorim-ai-labs/vorim-mcp-server, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@vorim/mcp-server", "version": "1.1.17" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:35Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.2, "trust_score_v2": 41.2, "rank_v2": 1176, "rank_v2_delta": 316, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.4, "identity": 10.8, "transparency": 10.8, "maintenance": 8.0, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Oh Dsh", "repo": "hust-open-atom-club/oh-dsh", "display_repo": "", "url": "https://github.com/hust-open-atom-club/oh-dsh", "listing_class": "skill", "rank": 330, "previous_rank": 296, "rank_delta": -34, "stars": 322, "stars_fmt": "322", "forks": 34, "forks_fmt": "34", "last_push": "2026-09-12", "days_ago": 30, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.1, "description": " 一套 DSH runtime，Desktop、Web 与 TUI 三种开发体验。", "language": "TypeScript", "open_issues": 33, "category": "Agent Skills", "category_rank": 330, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T16:02:26Z", "slug": "oh-dsh", "full_fetched_at": "2026-10-12T16:02:23Z", "source_note": "", "github_homepage": "https://dsh.openatom.club/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "DeepSeek" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found DeepSeek dependency 'deepseek' in package.json", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugins/about/package.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.2, "trust_score_v2": 41.2, "rank_v2": 330, "rank_v2_delta": 1136, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.6, "maintenance": 10.0, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TalkToFigma MCP", "repo": "grab/cursor-talk-to-figma-mcp", "display_repo": "", "url": "https://github.com/grab/cursor-talk-to-figma-mcp", "listing_class": "agent", "rank": 1177, "previous_rank": 1170, "rank_delta": -7, "stars": 7049, "stars_fmt": "7.0k", "forks": 779, "forks_fmt": "779", "last_push": "2026-07-26", "days_ago": 78, "weekly_commits": 0, "commits_low_confidence": false, "score": 50.7, "description": "TalkToFigma: MCP integration between AI Agent (Cursor, Claude Code, Codex) and Figma, allowing Agentic AI to communicate with Figma for reading designs and modifying them programmatically.", "language": "JavaScript", "open_issues": 67, "category": "MCP Servers", "category_rank": 682, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.16, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T17:03:16Z", "slug": "talktofigma-mcp", "full_fetched_at": "2026-10-12T16:02:10Z", "source_note": "", "github_homepage": "https://www.figma.com/community/plugin/1485687494525374295/cursor-talk-to-figma-mcp-plugin", "homepage_icon": "/site-icons/6e1675469a289fcf.png", "homepage_icon_for": "https://www.figma.com/community/plugin/1485687494525374295/cursor-talk-to-figma-mcp-plugin", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in src/talk_to_figma_mcp/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/cursor_mcp_plugin/code.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.2, "trust_score_v2": 41.2, "rank_v2": 1177, "rank_v2_delta": 328, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.8, "identity": 10.8, "transparency": 9.9, "maintenance": 6.8, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Multi Gmail MCP", "repo": "gx-55/multi-gmail-mcp", "display_repo": "", "url": "https://github.com/gx-55/multi-gmail-mcp", "listing_class": "agent", "rank": 1178, "previous_rank": 1171, "rank_delta": -7, "stars": 19, "stars_fmt": "19", "forks": 11, "forks_fmt": "11", "last_push": "2026-08-13", "days_ago": 60, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.6, "description": "", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 683, "npm_package": "multi-gmail-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 49, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.048, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T12:55:18Z", "slug": "multi-gmail-mcp", "full_fetched_at": "2026-10-12T16:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'multi-gmail-mcp' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "multi-gmail-mcp", "version": "1.0.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:14Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.1, "trust_score_v2": 41.1, "rank_v2": 1178, "rank_v2_delta": 339, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.0, "maintenance": 8.0, "adoption": 5.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Frontend Slides", "repo": "zarazhangrui/frontend-slides", "display_repo": "", "url": "https://github.com/zarazhangrui/frontend-slides", "listing_class": "skill", "rank": 331, "previous_rank": 329, "rank_delta": -2, "stars": 30522, "stars_fmt": "30.5k", "forks": 2373, "forks_fmt": "2.4k", "last_push": "2026-06-23", "days_ago": 111, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.3, "description": "Create beautiful slides on the web using a coding agent's frontend skills", "language": "JavaScript", "open_issues": 24, "category": "Agent Skills", "category_rank": 331, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.333, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T10:53:38Z", "slug": "frontend-slides", "full_fetched_at": "2026-10-12T04:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/frontend-slides/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.1, "trust_score_v2": 41.1, "rank_v2": 331, "rank_v2_delta": 1137, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 10.5, "maintenance": 4.6, "adoption": 10.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "omniclaw", "repo": "omnuron/omniclaw", "display_repo": "", "url": "https://github.com/omnuron/omniclaw", "listing_class": "agent", "rank": 1179, "previous_rank": 1174, "rank_delta": -5, "stars": 576, "stars_fmt": "576", "forks": 43, "forks_fmt": "43", "last_push": "2026-05-29", "days_ago": 136, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.3, "description": "The first agentic payment network: policy-controlled, gasless, and real money-ready. OmniClaw CLI + Financial Policy Engine let autonomous agents pay and earn safely at machine speed.", "language": "Python", "open_issues": 17, "category": "Agent Frameworks", "category_rank": 105, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.42, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T02:15:42Z", "slug": "omniclaw", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "https://www.omniclaw.ai/", "homepage_icon": "/site-icons/e14d5b24b9f93c2c.png", "homepage_icon_for": "https://www.omniclaw.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: mcp_server/.dockerignore", "Found MCP-related server path: mcp_server/.gitignore", "Found MCP-related server test path: mcp_server/tests/conftest.py", "Found MCP-related server test path: mcp_server/tests/test_payment_client.py" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "Found credential/config marker 'CIRCLE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.0, "trust_score_v2": 41.0, "rank_v2": 1179, "rank_v2_delta": 311, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 12.3, "maintenance": 2.9, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SimWorld", "repo": "SimWorld-AI/SimWorld", "display_repo": "", "url": "https://github.com/SimWorld-AI/SimWorld", "listing_class": "agent", "rank": 1180, "previous_rank": 1175, "rank_delta": -5, "stars": 795, "stars_fmt": "795", "forks": 91, "forks_fmt": "91", "last_push": "2026-06-26", "days_ago": 108, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.5, "description": "SimWorld: An Open-ended Realistic Simulator for Autonomous Agents in Physical and Social Worlds", "language": "Python", "open_issues": 8, "category": "Observability & Evaluation", "category_rank": 22, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T20:50:51Z", "slug": "simworld", "full_fetched_at": "2026-10-12T00:02:11Z", "source_note": "", "github_homepage": "https://simworld.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in setup.py" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 41.0, "trust_score_v2": 41.0, "rank_v2": 1180, "rank_v2_delta": 297, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 12.0, "maintenance": 4.8, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ejentum MCP", "repo": "ejentum/ejentum-mcp", "display_repo": "", "url": "https://github.com/ejentum/ejentum-mcp", "listing_class": "agent", "rank": 1181, "previous_rank": 1177, "rank_delta": -4, "stars": 16, "stars_fmt": "16", "forks": 3, "forks_fmt": "3", "last_push": "2026-06-11", "days_ago": 123, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.1, "description": "MCP server for the Ejentum API. 8 cognitive operations across 4 harnesses (reasoning, code, anti-deception, memory) in dynamic and adaptive modes.", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 684, "npm_package": "ejentum-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 60, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.034, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:14:03Z", "slug": "ejentum-mcp", "full_fetched_at": "2026-10-12T16:01:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'EJENTUM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'ejentum-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ejentum-mcp", "version": "0.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:50Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.0, "trust_score_v2": 41.0, "rank_v2": 1181, "rank_v2_delta": 399, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.6, "maintenance": 3.8, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Hermes Atlas MCP", "repo": "ksimback/hermes-atlas-mcp", "display_repo": "", "url": "https://github.com/ksimback/hermes-atlas-mcp", "listing_class": "agent", "rank": 1182, "previous_rank": 1176, "rank_delta": -6, "stars": 13, "stars_fmt": "13", "forks": 4, "forks_fmt": "4", "last_push": "2026-08-09", "days_ago": 64, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.4, "description": "MCP server exposing the Hermes Atlas ecosystem catalog — 100+ Hermes Agent tools, skills, plugins, and integrations — to any MCP-aware client (Claude Desktop, Cursor, Continue).", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 685, "npm_package": "hermes-atlas-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 34, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:39:53Z", "slug": "hermes-atlas-mcp", "full_fetched_at": "2026-10-12T16:02:40Z", "source_note": "", "github_homepage": "https://hermesatlas.com", "homepage_icon": "/site-icons/df6a3a83d65dd4ce.png", "homepage_icon_for": "https://hermesatlas.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'hermes-atlas-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "hermes-atlas-mcp", "version": "0.2.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:40Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 41.0, "trust_score_v2": 41.0, "rank_v2": 1182, "rank_v2_delta": 419, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.9, "identity": 10.8, "transparency": 9.8, "maintenance": 7.7, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Open Notebook MCP", "repo": "Epochal-dev/open-notebook-mcp", "display_repo": "", "url": "https://github.com/Epochal-dev/open-notebook-mcp", "listing_class": "agent", "rank": 1183, "previous_rank": 1182, "rank_delta": -1, "stars": 46, "stars_fmt": "46", "forks": 14, "forks_fmt": "14", "last_push": "2025-12-22", "days_ago": 294, "weekly_commits": 0, "commits_low_confidence": false, "score": 15.5, "description": "MCP server for an Open Source implementation of Notebook LM: Open Notebook", "language": "Python", "open_issues": 5, "category": "MCP Servers", "category_rank": 686, "npm_package": "", "crate_package": "", "pypi_package": "open-notebook-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 138, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.3, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:17:59Z", "slug": "open-notebook-mcp", "full_fetched_at": "2026-10-12T16:01:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'open-notebook-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "open-notebook-mcp", "version": "0.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:01:51Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.9, "trust_score_v2": 40.9, "rank_v2": 1183, "rank_v2_delta": 420, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.4, "maintenance": 0.0, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Integuru", "repo": "Integuru-AI/Integuru", "display_repo": "", "url": "https://github.com/Integuru-AI/Integuru", "listing_class": "agent", "rank": 1184, "previous_rank": 1178, "rank_delta": -6, "stars": 4776, "stars_fmt": "4.8k", "forks": 384, "forks_fmt": "384", "last_push": "2026-06-24", "days_ago": 110, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.0, "description": "The first AI agent that builds permissionless integrations through reverse engineering platforms' internal APIs.", "language": "Python", "open_issues": 10, "category": "Coding Agents", "category_rank": 66, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.579, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:14:34Z", "slug": "integuru", "full_fetched_at": "2026-10-12T04:02:45Z", "source_note": "", "github_homepage": "https://integuru.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 40.9, "trust_score_v2": 40.9, "rank_v2": 1184, "rank_v2_delta": 269, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 11.1, "maintenance": 4.7, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Stakpak Agent", "repo": "stakpak/agent", "display_repo": "", "url": "https://github.com/stakpak/agent", "listing_class": "agent", "rank": 1185, "previous_rank": 1179, "rank_delta": -6, "stars": 1820, "stars_fmt": "1.8k", "forks": 197, "forks_fmt": "197", "last_push": "2026-07-06", "days_ago": 98, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.7, "description": "Ship your code, on autopilot. An open source agent that lives on your machines 24/7 and keeps your apps running. 🦀", "language": "Rust", "open_issues": 29, "category": "Coding Agents", "category_rank": 67, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T00:59:52Z", "slug": "stakpak-agent", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://stakpak.dev", "homepage_icon": "/site-icons/903c7f07646960ca.png", "homepage_icon_for": "https://stakpak.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cli/src/commands/mcp/server.rs" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 40.9, "trust_score_v2": 40.9, "rank_v2": 1185, "rank_v2_delta": 297, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.1, "maintenance": 5.5, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Awesome Agent Skills MCP", "repo": "shadowrootdev/awesome-agent-skills-mcp", "display_repo": "", "url": "https://github.com/shadowrootdev/awesome-agent-skills-mcp", "listing_class": "agent", "rank": 1186, "previous_rank": 1181, "rank_delta": -5, "stars": 26, "stars_fmt": "26", "forks": 3, "forks_fmt": "3", "last_push": "2026-04-13", "days_ago": 182, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.4, "description": "MCP server providing 100+ AI agent skills from Anthropic, Vercel, Trail of Bits, Hugging Face & more. Works with Claude, GitHub Copilot, and any MCP client.", "language": "TypeScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 687, "npm_package": "awesome-agent-skills-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 61, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.222, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 10, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T10:27:02Z", "slug": "awesome-agent-skills-mcp", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP-related server test path: tests/integration/mcp-server-lifecycle.test.ts", "Found MCP-related server test path: tests/integration/mcp-server.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'simple-git' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'awesome-agent-skills-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "awesome-agent-skills-mcp", "version": "1.0.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:10Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.8, "trust_score_v2": 40.8, "rank_v2": 1186, "rank_v2_delta": 414, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 12.1, "maintenance": 0.0, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "UI-TARS", "repo": "bytedance/UI-TARS", "display_repo": "", "url": "https://github.com/bytedance/UI-TARS", "listing_class": "agent", "rank": 1187, "previous_rank": 1180, "rank_delta": -7, "stars": 11588, "stars_fmt": "11.6k", "forks": 884, "forks_fmt": "884", "last_push": "2026-01-27", "days_ago": 258, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.1, "description": "Pioneering Automated GUI Interaction with Native Agents", "language": "Python", "open_issues": 44, "category": "Browser & Computer Use", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "ui-tars", "docker_image": "", "vscode_extension": "", "weekly_downloads": 15627, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.19, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:57:52Z", "slug": "ui-tars", "full_fetched_at": "2026-10-12T04:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'ui-tars' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ui-tars", "version": "0.5.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:17Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 40.8, "trust_score_v2": 40.8, "rank_v2": 1187, "rank_v2_delta": 296, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.6, "maintenance": 0.0, "adoption": 15.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tinte", "repo": "Railly/tinte", "display_repo": "", "url": "https://github.com/Railly/tinte", "listing_class": "skill", "rank": 332, "previous_rank": 330, "rank_delta": -2, "stars": 624, "stars_fmt": "624", "forks": 38, "forks_fmt": "38", "last_push": "2026-08-08", "days_ago": 65, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.2, "description": "Compile your design system into an Agent Plugin. Extract an identity from any reference, emit SKILL.md + tokens.css, lint what bypasses your tokens.", "language": "TypeScript", "open_issues": 4, "category": "Agent Skills", "category_rank": 332, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.19, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:18:22Z", "slug": "tinte", "full_fetched_at": "2026-10-12T00:02:00Z", "source_note": "", "github_homepage": "https://tinte.dev", "homepage_icon": "/site-icons/79682f70332769bc.png", "homepage_icon_for": "https://tinte.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Postgres", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in apps/web/package.json", "Found Postgres dependency 'postgres' in apps/web/package.json", "Found Redis dependency 'redis' in apps/ray/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: apps/web/public/plugin/plugin.json", "README/docs also mention a declared plugin/integration surface", "Found database dependency 'redis' in apps/ray/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.7, "trust_score_v2": 40.7, "rank_v2": 332, "rank_v2_delta": 1120, "trust_v2_adjustment": -1.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.6, "maintenance": 7.7, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "mcpo", "repo": "open-webui/mcpo", "display_repo": "", "url": "https://github.com/open-webui/mcpo", "listing_class": "agent", "rank": 1188, "previous_rank": 1183, "rank_delta": -5, "stars": 4400, "stars_fmt": "4.4k", "forks": 499, "forks_fmt": "499", "last_push": "2026-05-17", "days_ago": 148, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.1, "description": "A simple, secure MCP-to-OpenAPI proxy server", "language": "Python", "open_issues": 42, "category": "Protocols & Tool Integration", "category_rank": 56, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.41, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:12:48Z", "slug": "mcpo", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.6, "trust_score_v2": 40.6, "rank_v2": 1188, "rank_v2_delta": 341, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.1, "maintenance": 2.1, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dash MCP Server", "repo": "Kapeli/dash-mcp-server", "display_repo": "", "url": "https://github.com/Kapeli/dash-mcp-server", "listing_class": "agent", "rank": 1189, "previous_rank": 1184, "rank_delta": -5, "stars": 186, "stars_fmt": "186", "forks": 31, "forks_fmt": "31", "last_push": "2026-07-31", "days_ago": 73, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.5, "description": "MCP server for Dash, the macOS API documentation browser", "language": "Python", "open_issues": 11, "category": "MCP Servers", "category_rank": 688, "npm_package": "", "crate_package": "", "pypi_package": "dash-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 42, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.14, "scorecard_score": 2.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:01:41Z", "slug": "dash-mcp-server", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/dash_mcp_server/__init__.py", "Found MCP-related server path: src/dash_mcp_server/server.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .plugin/plugin.json" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'dash-mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "dash-mcp-server", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:36Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.6, "trust_score_v2": 40.6, "rank_v2": 1189, "rank_v2_delta": 333, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.2, "maintenance": 7.1, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "idealo MCP Server", "repo": "idealo/mcp-server-guide", "display_repo": "", "url": "https://github.com/idealo/mcp-server-guide", "listing_class": "agent", "rank": 1190, "previous_rank": 1185, "rank_delta": -5, "stars": 19, "stars_fmt": "19", "forks": 0, "forks_fmt": "0", "last_push": "2026-05-20", "days_ago": 145, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.7, "description": "Search products, compare prices, and discover deals across 6 European markets (DE, UK, FR, IT, ES, AT) directly from your AI assistant.", "language": "", "open_issues": 2, "category": "MCP Servers", "category_rank": 689, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:58:09Z", "slug": "idealo-mcp-server", "full_fetched_at": "2026-10-12T16:02:22Z", "source_note": "", "github_homepage": "https://mcp.idealo.com/mcp", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.5, "trust_score_v2": 40.5, "rank_v2": 1190, "rank_v2_delta": 344, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.2, "identity": 10.8, "transparency": 12.1, "maintenance": 2.3, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Just MCP Server", "repo": "PromptExecution/just-mcp", "display_repo": "", "url": "https://github.com/PromptExecution/just-mcp", "listing_class": "agent", "rank": 1191, "previous_rank": 1187, "rank_delta": -4, "stars": 60, "stars_fmt": "60", "forks": 10, "forks_fmt": "10", "last_push": "2026-07-15", "days_ago": 89, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.3, "description": "mcp server for just", "language": "Rust", "open_issues": 3, "category": "MCP Servers", "category_rank": 690, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/promptexecution/just-mcp:0.1.5", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.121, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 2, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:24:24Z", "slug": "just-mcp-server", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: examples/mcp_server_demo.rs", "Found MCP-related server test path: tests/mcp_server_test.rs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.5, "trust_score_v2": 40.5, "rank_v2": 1191, "rank_v2_delta": 339, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.8, "maintenance": 6.1, "adoption": 4.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "WPFVisualTreeMcp", "repo": "faze79/WPFVisualTreeMcp", "display_repo": "", "url": "https://github.com/faze79/WPFVisualTreeMcp", "listing_class": "agent", "rank": 1192, "previous_rank": 1186, "rank_delta": -6, "stars": 17, "stars_fmt": "17", "forks": 7, "forks_fmt": "7", "last_push": "2026-07-23", "days_ago": 81, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.6, "description": "Let AI agents see, debug and drive running WPF apps - visual tree, bindings, screenshots, clicks and text input over MCP. Snoop + Playwright for AI.", "language": "C#", "open_issues": 5, "category": "MCP Servers", "category_rank": 691, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.45, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 5, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:35:06Z", "slug": "wpfvisualtreemcp", "full_fetched_at": "2026-10-12T16:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP-related server docs path: docs/blog/my-mcp-server-was-throwing-away-every-parameter.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.5, "trust_score_v2": 40.5, "rank_v2": 1192, "rank_v2_delta": 340, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 11.5, "maintenance": 6.6, "adoption": 3.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agentic SEO Skill", "repo": "Bhanunamikaze/Agentic-SEO-Skill", "display_repo": "", "url": "https://github.com/Bhanunamikaze/Agentic-SEO-Skill", "listing_class": "skill", "rank": 333, "previous_rank": 331, "rank_delta": -2, "stars": 966, "stars_fmt": "966", "forks": 150, "forks_fmt": "150", "last_push": "2026-07-23", "days_ago": 81, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.9, "description": "An LLM-first SEO analysis skill for Antigravity, Codex, Claude with 16 specialized sub-skills, 10 specialist agents, and 88 optional utility scripts used as evidence collectors.", "language": "Python", "open_issues": 5, "category": "Agent Skills", "category_rank": 333, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:57:44Z", "slug": "agentic-seo-skill", "full_fetched_at": "2026-10-12T12:02:41Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PAGESPEED_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.4, "trust_score_v2": 40.4, "rank_v2": 333, "rank_v2_delta": 1130, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 12.0, "maintenance": 6.6, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "spencermarx · Open Code Review", "repo": "spencermarx/open-code-review", "display_repo": "", "url": "https://github.com/spencermarx/open-code-review", "listing_class": "skill", "rank": 334, "previous_rank": 332, "rank_delta": -2, "stars": 371, "stars_fmt": "371", "forks": 36, "forks_fmt": "36", "last_push": "2026-07-28", "days_ago": 76, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.1, "description": "AI-powered multi-agent code review. Simulates a customizable team of Engineers performing code review with built-in discourse.", "language": "TypeScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 334, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T22:17:17Z", "slug": "spencermarx-open-code-review", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in packages/agents/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 40.4, "trust_score_v2": 40.4, "rank_v2": 334, "rank_v2_delta": 1151, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.6, "maintenance": 6.9, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Hub", "repo": "ravitemer/mcp-hub", "display_repo": "", "url": "https://github.com/ravitemer/mcp-hub", "listing_class": "agent", "rank": 1193, "previous_rank": 1188, "rank_delta": -5, "stars": 520, "stars_fmt": "520", "forks": 65, "forks_fmt": "65", "last_push": "2025-10-24", "days_ago": 353, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.8, "description": "A centralized manager for Model Context Protocol (MCP) servers with dynamic server management and monitoring", "language": "JavaScript", "open_issues": 13, "category": "Protocols & Tool Integration", "category_rank": 57, "npm_package": "mcp-hub", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 403, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:54:56Z", "slug": "mcp-hub", "full_fetched_at": "2026-10-11T20:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp-servers.json", "Found MCP-related server path: src/mcp/server.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Perplexity" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Perplexity credential/config marker 'PERPLEXITY_API_KEY'", "README/docs also mention Perplexity" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-hub' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-hub", "version": "4.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:13Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.3, "trust_score_v2": 40.3, "rank_v2": 1193, "rank_v2_delta": 403, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 10.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Power Automate MCP Server by Flow Studio", "repo": "ninihen1/power-automate-mcp-skills", "display_repo": "", "url": "https://github.com/ninihen1/power-automate-mcp-skills", "listing_class": "agent", "rank": 1194, "previous_rank": 1189, "rank_delta": -5, "stars": 34, "stars_fmt": "34", "forks": 9, "forks_fmt": "9", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.7, "description": "GitHub Copilot agent skills for Power Automate via FlowStudio MCP — build, debug, and operate cloud flows programmatically", "language": "JavaScript", "open_issues": 6, "category": "MCP Servers", "category_rank": 692, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:52:33Z", "slug": "power-automate-mcp-server-by-flow-studio", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cursor-plugin/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.2, "trust_score_v2": 40.2, "rank_v2": 1194, "rank_v2_delta": 325, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 9.5, "adoption": 3.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AkTools MCP Server", "repo": "aahl/mcp-aktools", "display_repo": "", "url": "https://github.com/aahl/mcp-aktools", "listing_class": "agent", "rank": 1195, "previous_rank": 1193, "rank_delta": -2, "stars": 390, "stars_fmt": "390", "forks": 64, "forks_fmt": "64", "last_push": "2026-03-26", "days_ago": 200, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.0, "description": "📈 提供股票、加密货币的数据查询和分析功能MCP服务器", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 693, "npm_package": "", "crate_package": "", "pypi_package": "mcp-aktools", "docker_image": "ghcr.io/aahl/mcp-aktools:latest", "vscode_extension": "", "weekly_downloads": 151, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.02, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T09:59:47Z", "slug": "aktools-mcp-server", "full_fetched_at": "2026-10-12T08:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-aktools' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-aktools", "version": "0.1.15" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:16Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.2, "trust_score_v2": 40.2, "rank_v2": 1195, "rank_v2_delta": 416, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.8, "maintenance": 0.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Time MCP", "repo": "yokingma/time-mcp", "display_repo": "", "url": "https://github.com/yokingma/time-mcp", "listing_class": "agent", "rank": 1196, "previous_rank": 1190, "rank_delta": -6, "stars": 72, "stars_fmt": "72", "forks": 14, "forks_fmt": "14", "last_push": "2026-01-31", "days_ago": 254, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.7, "description": "⏰ Time MCP Server: Giving LLMs Time Awareness Capabilities", "language": "JavaScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 694, "npm_package": "time-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 1732, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T21:49:15Z", "slug": "time-mcp", "full_fetched_at": "2026-10-12T04:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'time-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "time-mcp", "version": "1.0.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:11Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.2, "trust_score_v2": 40.2, "rank_v2": 1196, "rank_v2_delta": 416, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PromptFlow", "repo": "microsoft/promptflow", "display_repo": "", "url": "https://github.com/microsoft/promptflow", "listing_class": "agent", "rank": 1197, "previous_rank": 1191, "rank_delta": -6, "stars": 11248, "stars_fmt": "11.2k", "forks": 1121, "forks_fmt": "1.1k", "last_push": "2026-08-26", "days_ago": 47, "weekly_commits": 0, "commits_low_confidence": false, "score": 57.1, "description": "Build high-quality LLM apps - from prototyping, testing to production deployment and monitoring.", "language": "Python", "open_issues": 61, "category": "Workflow Platforms", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "promptflow", "docker_image": "", "vscode_extension": "", "weekly_downloads": 8766, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.99, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "promptflow", "full_fetched_at": "2026-10-12T08:02:12Z", "source_note": "", "github_homepage": "https://microsoft.github.io/promptflow/", "homepage_icon": "/site-icons/0f4faba7b9be9191.png", "homepage_icon_for": "https://microsoft.github.io/promptflow/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'promptflow' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "promptflow", "version": "1.18.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:12Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.2, "trust_score_v2": 40.2, "rank_v2": 1197, "rank_v2_delta": 384, "trust_v2_adjustment": 4.0, "trust_confidence": 0.75, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 8.9, "adoption": 15.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Cortex Gateway", "repo": "wellknownmcp/cortex-gateway", "display_repo": "", "url": "https://github.com/wellknownmcp/cortex-gateway", "listing_class": "agent", "rank": 1198, "previous_rank": 1192, "rank_delta": -6, "stars": 12, "stars_fmt": "12", "forks": 0, "forks_fmt": "0", "last_push": "2026-08-22", "days_ago": 51, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.8, "description": "Federated MCP gateway: one OAuth 2.1-protected, spec-compliant MCP server in front of all your apps. Backends stay plain HTTP (~120-line contract) or proxied native MCP servers with a per-user token vault. Scope-filtered tools, live discovery, audit trail. Give agents curated, governed access to…", "language": "HTML", "open_issues": 2, "category": "MCP Servers", "category_rank": 695, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/wellknownmcp/cortex-gateway:v0.2.0", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:34:06Z", "slug": "cortex-gateway", "full_fetched_at": "2026-10-12T00:02:37Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: site/.well-known/mcp.json", "Found MCP-related server path: site/.well-known/mcp/server-card.json" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 40.0, "trust_score_v2": 40.0, "rank_v2": 1198, "rank_v2_delta": 322, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.9, "maintenance": 8.6, "adoption": 2.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pagecast", "repo": "mcpware/pagecast", "display_repo": "", "url": "https://github.com/mcpware/pagecast", "listing_class": "agent", "rank": 1199, "previous_rank": 1194, "rank_delta": -5, "stars": 48, "stars_fmt": "48", "forks": 5, "forks_fmt": "5", "last_push": "2026-03-27", "days_ago": 199, "weekly_commits": 0, "commits_low_confidence": false, "score": 13.7, "description": "Record any browser page as GIF or video via MCP — powered by Playwright + ffmpeg", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 696, "npm_package": "@mcpware/pagecast", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 175, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.071, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:52:53Z", "slug": "pagecast", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/.mcp.json", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mcpware/pagecast' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mcpware/pagecast", "version": "0.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:55Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.9, "trust_score_v2": 39.9, "rank_v2": 1199, "rank_v2_delta": 410, "trust_v2_adjustment": 5.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.6, "maintenance": 0.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Everything Claude Code Zh", "repo": "xu-xiang/everything-claude-code-zh", "display_repo": "", "url": "https://github.com/xu-xiang/everything-claude-code-zh", "listing_class": "skill", "rank": 335, "previous_rank": 333, "rank_delta": -2, "stars": 1986, "stars_fmt": "2.0k", "forks": 325, "forks_fmt": "325", "last_push": "2026-03-05", "days_ago": 221, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.5, "description": "everything-claude-code 中文翻译项目：完整的 Claude Code 配置集合（agents, skills, hooks, commands, rules, MCPs）。源自 Anthropic 黑客松获胜者的实战配置，助力中文工程师高效理解与使用 Claude Code。", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 335, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 11856, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.439, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T01:08:06Z", "slug": "everything-claude-code-zh", "full_fetched_at": "2026-10-12T04:02:10Z", "source_note": "", "github_homepage": "https://oneskill.one", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp-configs/mcp-servers.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/PLUGIN_SCHEMA_NOTES.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.9, "trust_score_v2": 39.9, "rank_v2": 335, "rank_v2_delta": 1156, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 13.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Gate DEX MCP", "repo": "gate/gate-mcp", "display_repo": "", "url": "https://github.com/gate/gate-mcp", "listing_class": "agent", "rank": 1200, "previous_rank": 1195, "rank_delta": -5, "stars": 41, "stars_fmt": "41", "forks": 22, "forks_fmt": "22", "last_push": "2026-09-10", "days_ago": 32, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.6, "description": "An MCP (Model Context Protocol) server that exposes Gate.io trading API as tools for AI agents.", "language": "Shell", "open_issues": 9, "category": "MCP Servers", "category_rank": 697, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.061, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T17:27:03Z", "slug": "gate-dex-mcp", "full_fetched_at": "2026-10-12T16:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'GATE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.9, "trust_score_v2": 39.9, "rank_v2": 1200, "rank_v2_delta": 321, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.7, "maintenance": 9.9, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP-Bridge", "repo": "SecretiveShell/MCP-Bridge", "display_repo": "", "url": "https://github.com/SecretiveShell/MCP-Bridge", "listing_class": "agent", "rank": 1201, "previous_rank": 1197, "rank_delta": -4, "stars": 926, "stars_fmt": "926", "forks": 118, "forks_fmt": "118", "last_push": "2025-12-08", "days_ago": 308, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.5, "description": "A middleware to provide an openAI compatible endpoint that can call MCP tools", "language": "Python", "open_issues": 23, "category": "Protocols & Tool Integration", "category_rank": 58, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.4, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:44:30Z", "slug": "mcp-bridge", "full_fetched_at": "2026-10-12T00:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp_bridge/mcp_server/__init__.py", "Found MCP-related server path: mcp_bridge/mcp_server/server.py" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Postgres dependency 'asyncpg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.8, "trust_score_v2": 39.8, "rank_v2": 1201, "rank_v2_delta": 345, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 12.3, "maintenance": 0.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "RA.Aid", "repo": "ai-christianson/RA.Aid", "display_repo": "", "url": "https://github.com/ai-christianson/RA.Aid", "listing_class": "agent", "rank": 1202, "previous_rank": 1198, "rank_delta": -4, "stars": 2222, "stars_fmt": "2.2k", "forks": 211, "forks_fmt": "211", "last_push": "2026-01-30", "days_ago": 255, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.9, "description": "Develop software autonomously.", "language": "Python", "open_issues": 54, "category": "Coding Agents", "category_rank": 68, "npm_package": "", "crate_package": "", "pypi_package": "ra-aid", "docker_image": "", "vscode_extension": "", "weekly_downloads": 485, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.17, "scorecard_score": 4.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:51:43Z", "slug": "ra-aid", "full_fetched_at": "2026-10-12T04:02:16Z", "source_note": "", "github_homepage": "https://ra-aid.ai/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/custom-tools-mcp/mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "DeepSeek", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "search" ], "confidence": "high", "evidence": [ "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'ra-aid' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "ra-aid", "version": "0.30.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:16Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 39.8, "trust_score_v2": 39.8, "rank_v2": 1202, "rank_v2_delta": 285, "trust_v2_adjustment": -0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.0, "identity": 10.8, "transparency": 12.0, "maintenance": 0.0, "adoption": 11.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Server Code Runner", "repo": "formulahendry/mcp-server-code-runner", "display_repo": "", "url": "https://github.com/formulahendry/mcp-server-code-runner", "listing_class": "agent", "rank": 1203, "previous_rank": 1199, "rank_delta": -4, "stars": 243, "stars_fmt": "243", "forks": 34, "forks_fmt": "34", "last_push": "2026-02-05", "days_ago": 249, "weekly_commits": 0, "commits_low_confidence": false, "score": 21.5, "description": "Code Runner MCP Server", "language": "TypeScript", "open_issues": 8, "category": "MCP Servers", "category_rank": 698, "npm_package": "mcp-server-code-runner", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/formulahendry/mcp-server-code-runner:0.1.8", "vscode_extension": "", "weekly_downloads": 3029, "dl_source": "npm+docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.121, "scorecard_score": 1.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:04:42Z", "slug": "mcp-server-code-runner", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-server-code-runner' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-server-code-runner", "version": "0.1.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:07Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.8, "trust_score_v2": 39.8, "rank_v2": 1203, "rank_v2_delta": 416, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.7, "identity": 10.8, "transparency": 9.9, "maintenance": 0.0, "adoption": 10.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Deep Project", "repo": "piercelamb/deep-project", "display_repo": "", "url": "https://github.com/piercelamb/deep-project", "listing_class": "skill", "rank": 336, "previous_rank": 334, "rank_delta": -2, "stars": 222, "stars_fmt": "222", "forks": 31, "forks_fmt": "31", "last_push": "2026-06-21", "days_ago": 113, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.5, "description": "Claude Code plugin that transforms vague software ideas into individual, ready-to-be-planned components", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 336, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.897, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-10-07T09:57:15Z", "slug": "deep-project", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.7, "trust_score_v2": 39.7, "rank_v2": 336, "rank_v2_delta": 1160, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.1, "identity": 10.8, "transparency": 11.0, "maintenance": 4.5, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ai Labs Claude Skills", "repo": "ailabs-393/ai-labs-claude-skills", "display_repo": "", "url": "https://github.com/ailabs-393/ai-labs-claude-skills", "listing_class": "skill", "rank": 337, "previous_rank": 335, "rank_delta": -2, "stars": 456, "stars_fmt": "456", "forks": 116, "forks_fmt": "116", "last_push": "2025-11-11", "days_ago": 335, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.6, "description": "This package is use to remove the hustle of finding claudeskills and shift them into any of the user project. This project become a bridge between user's usage and claude skills ", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 337, "npm_package": "ai-labs-claude-skills", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 305, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.257, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-03T01:50:33Z", "slug": "ai-labs-claude-skills", "full_fetched_at": "2026-10-12T08:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'ai-labs-claude-skills' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "ai-labs-claude-skills", "version": "2.0.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:36Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.7, "trust_score_v2": 39.7, "rank_v2": 337, "rank_v2_delta": 1252, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 9.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Power Automate", "repo": "kaael1/mcp-power-automate", "display_repo": "", "url": "https://github.com/kaael1/mcp-power-automate", "listing_class": "agent", "rank": 1204, "previous_rank": 1196, "rank_delta": -8, "stars": 27, "stars_fmt": "27", "forks": 12, "forks_fmt": "12", "last_push": "2026-06-01", "days_ago": 133, "weekly_commits": 0, "commits_low_confidence": false, "score": 20.4, "description": "Local Power Automate MCP server, browser extension, and installable Codex skill.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 699, "npm_package": "@kaael1/mcp-power-automate", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 52, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.214, "scorecard_score": 2.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:59:15Z", "slug": "mcp-power-automate", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@kaael1/mcp-power-automate' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@kaael1/mcp-power-automate", "version": "0.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:36Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.7, "trust_score_v2": 39.7, "rank_v2": 1204, "rank_v2_delta": 416, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.7, "identity": 10.8, "transparency": 10.3, "maintenance": 3.1, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Weapp Agent MCP", "repo": "Chaixueyuan/weapp-agent-mcp", "display_repo": "", "url": "https://github.com/Chaixueyuan/weapp-agent-mcp", "listing_class": "agent", "rank": 1205, "previous_rank": 1200, "rank_delta": -5, "stars": 18, "stars_fmt": "18", "forks": 0, "forks_fmt": "0", "last_push": "2026-07-01", "days_ago": 103, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.4, "description": "Agent-first MCP server for WeChat Mini Program debugging & automation. 面向 agent 的微信小程序 MCP 服务,让 Claude Code / Cursor 直接操作微信开发者工具。", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 700, "npm_package": "@chaixueyuan/weapp-agent-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 83, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.064, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:55:38Z", "slug": "weapp-agent-mcp", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@chaixueyuan/weapp-agent-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@chaixueyuan/weapp-agent-mcp", "version": "0.4.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:52Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.7, "trust_score_v2": 39.7, "rank_v2": 1205, "rank_v2_delta": 416, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.3, "identity": 10.8, "transparency": 9.9, "maintenance": 5.1, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Context+", "repo": "forloopcodes/contextplus", "display_repo": "", "url": "https://github.com/forloopcodes/contextplus", "listing_class": "agent", "rank": 1206, "previous_rank": 1202, "rank_delta": -4, "stars": 1983, "stars_fmt": "2.0k", "forks": 170, "forks_fmt": "170", "last_push": "2026-07-13", "days_ago": 91, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.6, "description": "Semantic Intelligence for Large-Scale Engineering. Context+ is an MCP server designed for developers who demand 99% accuracy. By combining RAG, Tree-sitter AST, Spectral Clustering, and Obsidian-style linking, Context+ turns a massive codebase into a searchable, hierarchical feature graph.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 701, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 5, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T18:55:40Z", "slug": "context", "full_fetched_at": "2026-10-12T16:02:04Z", "source_note": "", "github_homepage": "https://contextplus.vercel.app", "homepage_icon": "/site-icons/596dd56d029479c7.png", "homepage_icon_for": "https://contextplus.vercel.app", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'simple-git' in package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.6, "trust_score_v2": 39.6, "rank_v2": 1206, "rank_v2_delta": 303, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 10.5, "maintenance": 5.9, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tijori Finance MCP", "repo": "LaZZy0v0/tijori-finance-mcp", "display_repo": "", "url": "https://github.com/LaZZy0v0/tijori-finance-mcp", "listing_class": "agent", "rank": 1207, "previous_rank": 1203, "rank_delta": -4, "stars": 13, "stars_fmt": "13", "forks": 6, "forks_fmt": "6", "last_push": "2026-07-14", "days_ago": 90, "weekly_commits": 0, "commits_low_confidence": false, "score": 23.3, "description": "", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 702, "npm_package": "tijori-finance-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 28, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.138, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:54:52Z", "slug": "tijori-finance-mcp", "full_fetched_at": "2026-10-11T16:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'tijori-finance-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "tijori-finance-mcp", "version": "1.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:22Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.6, "trust_score_v2": 39.6, "rank_v2": 1207, "rank_v2_delta": 410, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.6, "identity": 10.8, "transparency": 9.8, "maintenance": 6.0, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Upsonic", "repo": "Upsonic/Upsonic", "display_repo": "", "url": "https://github.com/Upsonic/Upsonic", "listing_class": "agent", "rank": 1208, "previous_rank": 1204, "rank_delta": -4, "stars": 7955, "stars_fmt": "8.0k", "forks": 748, "forks_fmt": "748", "last_push": "2026-06-18", "days_ago": 116, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.7, "description": "Build autonomous AI agents in Python.", "language": "Python", "open_issues": 18, "category": "Agent Frameworks", "category_rank": 106, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.48, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 6, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:15:17Z", "slug": "upsonic", "full_fetched_at": "2026-10-12T08:02:32Z", "source_note": "", "github_homepage": "https://docs.upsonic.ai", "homepage_icon": "/site-icons/bfa1d2beec2063b2.png", "homepage_icon_for": "https://docs.upsonic.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Firecrawl", "Google Gemini", "Groq", "Mistral AI", "OpenAI", "Pinecone", "Postgres", "Qdrant", "Redis", "Tavily", "Weaviate", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Mistral AI dependency 'mistralai' in pyproject.toml", "Found Cohere dependency 'cohere' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "Found search dependency 'tavily' in pyproject.toml", "Found database dependency 'postgres' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.5, "trust_score_v2": 39.5, "rank_v2": 1208, "rank_v2_delta": 212, "trust_v2_adjustment": -3.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 11.7, "maintenance": 4.3, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Xhs Claude Skills", "repo": "chenxiachan/xhs-claude-skills", "display_repo": "", "url": "https://github.com/chenxiachan/xhs-claude-skills", "listing_class": "skill", "rank": 338, "previous_rank": 337, "rank_delta": -1, "stars": 422, "stars_fmt": "422", "forks": 38, "forks_fmt": "38", "last_push": "2026-08-14", "days_ago": 59, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.0, "description": "Claude Code slash commands for extracting Xiaohongshu posts into Obsidian notes", "language": "", "open_issues": 2, "category": "Agent Skills", "category_rank": 338, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.133, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T06:39:35Z", "slug": "xhs-claude-skills", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.5, "trust_score_v2": 39.5, "rank_v2": 338, "rank_v2_delta": 1163, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 10.7, "maintenance": 8.1, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Astravue MCP", "repo": "AstravueOrg/astravue-mcp-server", "display_repo": "", "url": "https://github.com/AstravueOrg/astravue-mcp-server", "listing_class": "agent", "rank": 1209, "previous_rank": 1205, "rank_delta": -4, "stars": 12, "stars_fmt": "12", "forks": 1, "forks_fmt": "1", "last_push": "2026-08-25", "days_ago": 48, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.4, "description": "Official MCP server for Astravue — manage projects, tasks, time tracking, and teams through AI", "language": "", "open_issues": 1, "category": "MCP Servers", "category_rank": 703, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.053, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:48:09Z", "slug": "astravue-mcp", "full_fetched_at": "2026-10-12T12:02:49Z", "source_note": "", "github_homepage": "https://astravue.com/mcp-server", "homepage_icon": "/site-icons/84dc6b1096600e8b.png", "homepage_icon_for": "https://astravue.com/mcp-server", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 39.4, "trust_score_v2": 39.4, "rank_v2": 1209, "rank_v2_delta": 330, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 11.4, "maintenance": 8.8, "adoption": 2.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sotopia agents", "repo": "sotopia-lab/sotopia", "display_repo": "", "url": "https://github.com/sotopia-lab/sotopia", "listing_class": "agent", "rank": 1210, "previous_rank": 1208, "rank_delta": -2, "stars": 337, "stars_fmt": "337", "forks": 50, "forks_fmt": "50", "last_push": "2026-06-05", "days_ago": 129, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.3, "description": "Sotopia: an Open-ended Social Learning Environment (ICLR 2024 spotlight)", "language": "Python", "open_issues": 5, "category": "Research & Data", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "sotopia", "docker_image": "", "vscode_extension": "", "weekly_downloads": 101, "dl_source": "pypi", "hn_mentions_30d": 4, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.67, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:38:32Z", "slug": "sotopia-agents", "full_fetched_at": "2026-10-12T08:02:29Z", "source_note": "", "github_homepage": "https://docs.sotopia.world", "homepage_icon": "/site-icons/f61c3049b8ba2826.png", "homepage_icon_for": "https://docs.sotopia.world", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-generativeai' in pyproject.toml", "Found Cohere dependency 'cohere' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'sotopia' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sotopia", "version": "0.1.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:29Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.3, "trust_score_v2": 39.3, "rank_v2": 1210, "rank_v2_delta": 204, "trust_v2_adjustment": -4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 12.1, "maintenance": 3.4, "adoption": 8.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Glean Remote MCP Server", "repo": "gleanwork/remote-mcp-server", "display_repo": "", "url": "https://github.com/gleanwork/remote-mcp-server", "listing_class": "agent", "rank": 1211, "previous_rank": 1206, "rank_delta": -5, "stars": 165, "stars_fmt": "165", "forks": 3, "forks_fmt": "3", "last_push": "2026-04-17", "days_ago": 178, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.5, "description": "Remote MCP Server that securely connects Enterprise context with your LLM, IDE, or agent platform of choice.", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 704, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T03:06:13Z", "slug": "glean-remote-mcp-server", "full_fetched_at": "2026-10-12T16:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.3, "trust_score_v2": 39.3, "rank_v2": 1211, "rank_v2_delta": 347, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 11.6, "maintenance": 0.1, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Patsnap Patent & Literature Search", "repo": "patsnap/patent-literature-search-mcp", "display_repo": "", "url": "https://github.com/patsnap/patent-literature-search-mcp", "listing_class": "agent", "rank": 1212, "previous_rank": 1207, "rank_delta": -5, "stars": 82, "stars_fmt": "82", "forks": 5, "forks_fmt": "5", "last_push": "2026-08-06", "days_ago": 67, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.8, "description": "Search global patents across WIPO, EPO, USPTO, CNIPA, JPO, KIPO and other authorities, together with scientific literature from PubMed, arXiv, Nature, Science and other major sources using natural-language, semantic, keyword and structured search.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 705, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.3, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:18:47Z", "slug": "patsnap-patent-literature-search", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://open.patsnap.com/marketplace/mcp-servers/patsnap-search", "homepage_icon": "/site-icons/05e62cc1b31211c4.png", "homepage_icon_for": "https://open.patsnap.com/marketplace/mcp-servers/patsnap-search", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PATSNAP_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 39.3, "trust_score_v2": 39.3, "rank_v2": 1212, "rank_v2_delta": 277, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.9, "identity": 10.8, "transparency": 11.5, "maintenance": 7.5, "adoption": 4.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Gopls MCP", "repo": "xieyuschen/gopls-mcp", "display_repo": "", "url": "https://github.com/xieyuschen/gopls-mcp", "listing_class": "agent", "rank": 1213, "previous_rank": 1209, "rank_delta": -4, "stars": 59, "stars_fmt": "59", "forks": 6, "forks_fmt": "6", "last_push": "2026-07-21", "days_ago": 83, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.1, "description": "MCP server for golang projects development: Expand AI Code Agent ability boundary to have a semantic understanding and determinisic information for golang projects.", "language": "Go", "open_issues": 4, "category": "MCP Servers", "category_rank": 706, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 10, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:53:32Z", "slug": "gopls-mcp", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "https://gopls-mcp.org", "homepage_icon": "/site-icons/a620dea3b85a5e3f.png", "homepage_icon_for": "https://gopls-mcp.org", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-3-Clause", "license_type": "open", "license_override": "", "trust_score": 39.2, "trust_score_v2": 39.2, "rank_v2": 1213, "rank_v2_delta": 340, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.3, "maintenance": 6.5, "adoption": 4.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Android MCP Server", "repo": "martingeidobler/android-mcp-server", "display_repo": "", "url": "https://github.com/martingeidobler/android-mcp-server", "listing_class": "agent", "rank": 1214, "previous_rank": 1211, "rank_delta": -3, "stars": 70, "stars_fmt": "70", "forks": 11, "forks_fmt": "11", "last_push": "2026-03-18", "days_ago": 208, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.1, "description": "MCP server for controlling Android emulators via ADB — screenshots, UI interaction, logcat, and bug documentation for Claude Code", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 707, "npm_package": "android-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 153, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.25, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:55:04Z", "slug": "android-mcp-server", "full_fetched_at": "2026-10-11T20:01:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'android-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "android-mcp-server", "version": "1.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:54Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.2, "trust_score_v2": 39.2, "rank_v2": 1214, "rank_v2_delta": 418, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 10.6, "maintenance": 0.0, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Greenfield", "repo": "prime-radiant-inc/greenfield", "display_repo": "", "url": "https://github.com/prime-radiant-inc/greenfield", "listing_class": "skill", "rank": 339, "previous_rank": 338, "rank_delta": -1, "stars": 292, "stars_fmt": "292", "forks": 30, "forks_fmt": "30", "last_push": "2026-08-06", "days_ago": 67, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.5, "description": "A Claude Code plugin that reverse-engineers clean behavioral specs, test vectors, and acceptance criteria from any codebase, producing a provenance trail so a fresh team can reimplement without inheriting the original's internal structure.", "language": "", "open_issues": 0, "category": "Agent Skills", "category_rank": 339, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.167, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 1, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:35:17Z", "slug": "greenfield", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 39.1, "trust_score_v2": 39.1, "rank_v2": 339, "rank_v2_delta": 1171, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 10.9, "maintenance": 7.5, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Three.js DevTools MCP", "repo": "DmitriyGolub/threejs-devtools-mcp", "display_repo": "", "url": "https://github.com/DmitriyGolub/threejs-devtools-mcp", "listing_class": "agent", "rank": 1215, "previous_rank": 1213, "rank_delta": -2, "stars": 119, "stars_fmt": "119", "forks": 11, "forks_fmt": "11", "last_push": "2026-04-07", "days_ago": 188, "weekly_commits": 0, "commits_low_confidence": false, "score": 17.5, "description": "Three.js MCP server — inspect and edit scenes, materials, shaders, lights in real time from any AI agent", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 708, "npm_package": "threejs-devtools-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 289, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.079, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T06:48:29Z", "slug": "three-js-devtools-mcp", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'puppeteer' in package.json" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'threejs-devtools-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "threejs-devtools-mcp", "version": "0.4.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:03Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.1, "trust_score_v2": 39.1, "rank_v2": 1215, "rank_v2_delta": 415, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "GPT Pilot", "repo": "Pythagora-io/gpt-pilot", "display_repo": "", "url": "https://github.com/Pythagora-io/gpt-pilot", "listing_class": "agent", "rank": 1216, "previous_rank": 1212, "rank_delta": -4, "stars": 33647, "stars_fmt": "33.6k", "forks": 3456, "forks_fmt": "3.5k", "last_push": "2026-06-18", "days_ago": 116, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.7, "description": "The first real AI developer", "language": "Python", "open_issues": 242, "category": "Coding Agents", "category_rank": 69, "npm_package": "", "crate_package": "", "pypi_package": "gpt-pilot", "docker_image": "", "vscode_extension": "", "weekly_downloads": 12, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.01, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:49:45Z", "slug": "gpt-pilot", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Groq", "OpenAI", "Postgres" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Groq dependency 'groq' in pyproject.toml", "README/docs also mention Groq" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'postgres' in core/db/setup.py" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'gpt-pilot' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "", "trust_score": 39.1, "trust_score_v2": 39.1, "rank_v2": 1216, "rank_v2_delta": 265, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.0, "identity": 10.8, "transparency": 10.5, "maintenance": 4.3, "adoption": 12.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Workopia MCP", "repo": "workopia/workopia-mcp", "display_repo": "", "url": "https://github.com/workopia/workopia-mcp", "listing_class": "agent", "rank": 1217, "previous_rank": 1214, "rank_delta": -3, "stars": 316, "stars_fmt": "316", "forks": 21, "forks_fmt": "21", "last_push": "2026-08-31", "days_ago": 42, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.4, "description": "Workopia MCP Server — free job search, resume builder & career advice for Claude, ChatGPT, Cursor.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 709, "npm_package": "@shuang_workopia/workopia-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 17, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.538, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T10:00:38Z", "slug": "workopia-mcp", "full_fetched_at": "2026-10-12T00:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "warning", "confidence": "high", "summary": "1 package source mismatch detected", "evidence": [ "npm package '@shuang_workopia/workopia-mcp' points to shuangshuang007/heraai_one_forever, not workopia/workopia-mcp" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 39.0, "trust_score_v2": 39.0, "rank_v2": 1217, "rank_v2_delta": 234, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 9.9, "maintenance": 9.2, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": -5.0 }, "pending_signals": false }, { "name": "HyperAgent", "repo": "hyperbrowserai/HyperAgent", "display_repo": "", "url": "https://github.com/hyperbrowserai/HyperAgent", "listing_class": "agent", "rank": 1218, "previous_rank": 1215, "rank_delta": -3, "stars": 1595, "stars_fmt": "1.6k", "forks": 209, "forks_fmt": "209", "last_push": "2026-05-11", "days_ago": 154, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.8, "description": "AI Browser Automation", "language": "TypeScript", "open_issues": 15, "category": "Needs review", "category_rank": 9, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.51, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:30:14Z", "slug": "hyperagent", "full_fetched_at": "2026-10-12T04:02:38Z", "source_note": "", "github_homepage": "https://www.hyperbrowser.ai/", "homepage_icon": "/site-icons/0a3a59284856612e.png", "homepage_icon_for": "https://www.hyperbrowser.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: examples/mcp/weather/servers/weather-server.js", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 38.9, "trust_score_v2": 38.9, "rank_v2": 1218, "rank_v2_delta": 295, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 11.7, "maintenance": 1.7, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "The Startup", "repo": "rsmdt/the-startup", "display_repo": "", "url": "https://github.com/rsmdt/the-startup", "listing_class": "skill", "rank": 340, "previous_rank": 339, "rank_delta": -1, "stars": 565, "stars_fmt": "565", "forks": 71, "forks_fmt": "71", "last_push": "2026-08-03", "days_ago": 70, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.4, "description": "The Agentic Startup - A collection of Claude Code commands, skills, and agents.", "language": "Shell", "open_issues": 0, "category": "Agent Skills", "category_rank": 340, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:44:08Z", "slug": "the-startup", "full_fetched_at": "2026-10-12T00:02:15Z", "source_note": "", "github_homepage": "https://www.r16t.com/agentic-startup", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugins/start/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.8, "trust_score_v2": 38.8, "rank_v2": 340, "rank_v2_delta": 1176, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 7.3, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Augments MCP Server", "repo": "augmnt/augments-mcp-server", "display_repo": "", "url": "https://github.com/augmnt/augments-mcp-server", "listing_class": "agent", "rank": 1219, "previous_rank": 1216, "rank_delta": -3, "stars": 127, "stars_fmt": "127", "forks": 20, "forks_fmt": "20", "last_push": "2026-03-13", "days_ago": 213, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.7, "description": "Comprehensive MCP server providing real-time framework documentation access for Claude Code with intelligent caching, multi-source integration, and context-aware assistance.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 710, "npm_package": "", "crate_package": "", "pypi_package": "augments-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 78, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-03T13:18:53Z", "slug": "augments-mcp-server", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "https://augments.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'augments-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "augments-mcp-server", "version": "2.0.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:40Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.8, "trust_score_v2": 38.8, "rank_v2": 1219, "rank_v2_delta": 418, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Guizang Social Card Skill", "repo": "op7418/guizang-social-card-skill", "display_repo": "", "url": "https://github.com/op7418/guizang-social-card-skill", "listing_class": "skill", "rank": 341, "previous_rank": 336, "rank_delta": -5, "stars": 7480, "stars_fmt": "7.5k", "forks": 573, "forks_fmt": "573", "last_push": "2026-07-01", "days_ago": 103, "weekly_commits": 0, "commits_low_confidence": false, "score": 46.8, "description": "🪧 Claude Code / Codex skill — generate Xiaohongshu carousels & WeChat 21:9+1:1 cover pairs. Editorial × Swiss visual systems, 28 layouts, 10 themes, single-file HTML → PNG. 小红书图文 + 公众号封面对", "language": "HTML", "open_issues": 9, "category": "Agent Skills", "category_rank": 341, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:54:07Z", "slug": "guizang-social-card-skill", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 38.8, "trust_score_v2": 38.8, "rank_v2": 341, "rank_v2_delta": 1174, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.7, "maintenance": 5.1, "adoption": 9.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Parlant", "repo": "emcie-co/parlant", "display_repo": "", "url": "https://github.com/emcie-co/parlant", "listing_class": "agent", "rank": 1220, "previous_rank": 1218, "rank_delta": -2, "stars": 18298, "stars_fmt": "18.3k", "forks": 1555, "forks_fmt": "1.6k", "last_push": "2026-07-12", "days_ago": 92, "weekly_commits": 0, "commits_low_confidence": false, "score": 52.8, "description": "Build reliable customer-facing AI agents with Parlant: an interaction control harness optimized for controlled, consistent, and predictable LLM interactions.", "language": "Python", "open_issues": 15, "category": "Agent Frameworks", "category_rank": 107, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T21:00:56Z", "slug": "parlant", "full_fetched_at": "2026-10-12T04:02:28Z", "source_note": "", "github_homepage": "https://www.parlant.io", "homepage_icon": "/site-icons/633fc45db69234cf.png", "homepage_icon_for": "https://www.parlant.io", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "Qdrant" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Mistral AI dependency 'mistralai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'qdrant' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 38.7, "trust_score_v2": 38.7, "rank_v2": 1220, "rank_v2_delta": 239, "trust_v2_adjustment": -3.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 11.1, "maintenance": 5.9, "adoption": 10.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LocalAI", "repo": "mudler/LocalAI", "display_repo": "", "url": "https://github.com/mudler/LocalAI", "listing_class": "agent", "rank": 1221, "previous_rank": 1220, "rank_delta": -1, "stars": 49485, "stars_fmt": "49.5k", "forks": 4494, "forks_fmt": "4.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 524, "commits_low_confidence": false, "score": 95.2, "description": "LocalAI is the open-source AI engine. Run any model - LLMs, vision, voice, image, video - on any hardware. No GPU required.", "language": "Go", "open_issues": 98, "category": "LLM Gateways & Infra", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 631, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.9, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "localai", "full_fetched_at": "2026-10-12T08:02:09Z", "source_note": "", "github_homepage": "https://localai.io", "homepage_icon": "/site-icons/8c8d4aec12a9d094.png", "homepage_icon_for": "https://localai.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs mention MCP support", "Found MCP-related server path: core/cli/mcp_server.go", "Found MCP-related server path: core/http/endpoints/mcp/server_status_test.go", "Found MCP-related server docs path: docs/static/images/diagrams/mcp-server-vs-client.html" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.7, "trust_score_v2": 38.7, "rank_v2": 1221, "rank_v2_delta": 351, "trust_v2_adjustment": 2.0, "trust_confidence": 0.67, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AynOps", "repo": "AynOps/AynOps", "display_repo": "", "url": "https://github.com/AynOps/AynOps", "listing_class": "agent", "rank": 1222, "previous_rank": 1217, "rank_delta": -5, "stars": 28, "stars_fmt": "28", "forks": 38, "forks_fmt": "38", "last_push": "2026-10-10", "days_ago": 2, "weekly_commits": 11, "commits_low_confidence": false, "score": 54.4, "description": "An Open Sourced Model Context Protocol (MCP) Local server that gives AI Clients real-time cybersecurity reconnaissance capabilities", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 711, "npm_package": "", "crate_package": "", "pypi_package": "AynOps", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.7, "scorecard_score": 6.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 2, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T17:15:03Z", "slug": "aynops", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: mcp.json", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ABUSEIPDB_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'AynOps' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "AynOps", "version": "1.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:40Z" }, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.6, "trust_score_v2": 38.6, "rank_v2": 1222, "rank_v2_delta": 328, "trust_v2_adjustment": 1.0, "trust_confidence": 0.67, "trust_breakdown": { "safety": 11.8, "identity": 10.8, "transparency": 14.1, "maintenance": 16.2, "adoption": 3.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Clipboard History MCP", "repo": "d-khomenko/clipboard-history-mcp", "display_repo": "", "url": "https://github.com/d-khomenko/clipboard-history-mcp", "listing_class": "agent", "rank": 1223, "previous_rank": 1221, "rank_delta": -2, "stars": 19, "stars_fmt": "19", "forks": 0, "forks_fmt": "0", "last_push": "2026-08-01", "days_ago": 72, "weekly_commits": 0, "commits_low_confidence": false, "score": 22.9, "description": "Type-aware, secret-safe clipboard history for Claude via MCP. Rust binary, macOS + Linux. Ships as .mcpb.", "language": "Rust", "open_issues": 2, "category": "MCP Servers", "category_rank": 712, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.26, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:11:07Z", "slug": "clipboard-history-mcp", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.5, "trust_score_v2": 38.5, "rank_v2": 1223, "rank_v2_delta": 310, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.8, "identity": 10.8, "transparency": 11.6, "maintenance": 7.2, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Langcare MCP Fhir", "repo": "langcare/langcare-mcp-fhir", "display_repo": "", "url": "https://github.com/langcare/langcare-mcp-fhir", "listing_class": "agent", "rank": 1224, "previous_rank": 1223, "rank_delta": -1, "stars": 67, "stars_fmt": "67", "forks": 16, "forks_fmt": "16", "last_push": "2026-04-14", "days_ago": 181, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.7, "description": "Enterprise-grade MCP Server for FHIR-based EMRs, designed for robust deployments in agentic AI platforms.", "language": "Go", "open_issues": 1, "category": "MCP Servers", "category_rank": 713, "npm_package": "@langcare/langcare-mcp-fhir", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 385, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.102, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T18:03:50Z", "slug": "langcare-mcp-fhir", "full_fetched_at": "2026-10-11T16:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: cma/mcp-servers/registry.yaml", "Found MCP-related server path: internal/mcp/server.go", "Found MCP dependency 'modelcontextprotocol' in apps/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pipecat-agent/server/pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@langcare/langcare-mcp-fhir' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@langcare/langcare-mcp-fhir", "version": "2.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T16:02:22Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.5, "trust_score_v2": 38.5, "rank_v2": 1224, "rank_v2_delta": 404, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "X64dbg MCP", "repo": "bromoket/x64dbg_mcp", "display_repo": "", "url": "https://github.com/bromoket/x64dbg_mcp", "listing_class": "agent", "rank": 1225, "previous_rank": 1219, "rank_delta": -6, "stars": 132, "stars_fmt": "132", "forks": 29, "forks_fmt": "29", "last_push": "2026-06-08", "days_ago": 126, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.2, "description": "Drive x64dbg with your AI. MCP server: 23 mega-tools / 153 endpoints for breakpoints, memory, disasm, tracing, anti-debug & PE dumping. Claude/Cursor/Windsurf/Cline. All local.", "language": "C++", "open_issues": 1, "category": "MCP Servers", "category_rank": 714, "npm_package": "x64dbg-mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 227, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T12:03:06Z", "slug": "x64dbg-mcp", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in server/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'X64DBG_MCP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: plugin/CMakeLists.txt", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'x64dbg-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "x64dbg-mcp-server", "version": "2.3.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:46Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.5, "trust_score_v2": 38.5, "rank_v2": 1225, "rank_v2_delta": 393, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.6, "identity": 10.8, "transparency": 9.6, "maintenance": 3.6, "adoption": 8.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Paypal MCP Server", "repo": "paypal/paypal-mcp-server", "display_repo": "", "url": "https://github.com/paypal/paypal-mcp-server", "listing_class": "agent", "rank": 1226, "previous_rank": 1224, "rank_delta": -2, "stars": 13, "stars_fmt": "13", "forks": 18, "forks_fmt": "18", "last_push": "2025-10-28", "days_ago": 349, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.8, "description": "", "language": "JavaScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 715, "npm_package": "@paypal/mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 398, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.556, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:25:18Z", "slug": "paypal-mcp-server", "full_fetched_at": "2026-10-11T20:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PAYPAL_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@paypal/mcp' does not expose a source repo URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 38.4, "trust_score_v2": 38.4, "rank_v2": 1226, "rank_v2_delta": 330, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 12.2, "maintenance": 0.0, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Terminal MCP Server", "repo": "aybelatchane/mcp-server-terminal", "display_repo": "", "url": "https://github.com/aybelatchane/mcp-server-terminal", "listing_class": "agent", "rank": 1227, "previous_rank": 1222, "rank_delta": -5, "stars": 21, "stars_fmt": "21", "forks": 6, "forks_fmt": "6", "last_push": "2026-01-02", "days_ago": 283, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.0, "description": "Terminal MCP Server - Model Context Protocol server for TUI/CLI automation with structured Terminal State Tree (TST)", "language": "Rust", "open_issues": 3, "category": "MCP Servers", "category_rank": 716, "npm_package": "mcp-server-terminal", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 38, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.035, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 10, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:11:18Z", "slug": "terminal-mcp-server", "full_fetched_at": "2026-10-12T12:02:40Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-server-terminal' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-server-terminal", "version": "1.0.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:40Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.4, "trust_score_v2": 38.4, "rank_v2": 1227, "rank_v2_delta": 418, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.6, "maintenance": 0.0, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "NVIDIA OO Agents", "repo": "NVIDIA-NeMo/labs-OO-Agents", "display_repo": "", "url": "https://github.com/NVIDIA-NeMo/labs-OO-Agents", "listing_class": "agent", "rank": 1228, "previous_rank": 1225, "rank_delta": -3, "stars": 2276, "stars_fmt": "2.3k", "forks": 310, "forks_fmt": "310", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 317, "commits_low_confidence": false, "score": 81.7, "description": "NVIDIA Object Oriented Agents: the Pythonic way to build AI Agents.", "language": "Python", "open_issues": 57, "category": "Agent Frameworks", "category_rank": 108, "npm_package": "", "crate_package": "", "pypi_package": "nooa", "docker_image": "", "vscode_extension": "", "weekly_downloads": 54119, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.26, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "nvidia-oo-agents", "full_fetched_at": "2026-10-12T12:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/assets/wiki_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: src/nooa/viewer/frontend-react/src/components/plugins/AgentMessagePlugin.tsx" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'nooa' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "nooa", "version": "0.0.10" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:38Z" }, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 38.4, "trust_score_v2": 38.4, "rank_v2": 1228, "rank_v2_delta": 345, "trust_v2_adjustment": 1.7, "trust_confidence": 0.67, "trust_breakdown": { "safety": 1.3, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 14.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Functional Skill Creator", "repo": "AGI-comming/functional-skill-creator", "display_repo": "", "url": "https://github.com/AGI-comming/functional-skill-creator", "listing_class": "skill", "rank": 342, "previous_rank": 340, "rank_delta": -2, "stars": 257, "stars_fmt": "257", "forks": 16, "forks_fmt": "16", "last_push": "2026-06-29", "days_ago": 105, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.6, "description": "fskill-creator turns your long-text SKILL into functions, making it modular, testable and trackable for better long-term maintenance and iteration", "language": "JavaScript", "open_issues": 0, "category": "Agent Skills", "category_rank": 342, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T07:09:07Z", "slug": "functional-skill-creator", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.3, "trust_score_v2": 38.3, "rank_v2": 342, "rank_v2_delta": 1193, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.8, "maintenance": 5.0, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Ui Annotator MCP", "repo": "mcpware/ui-annotator-mcp", "display_repo": "", "url": "https://github.com/mcpware/ui-annotator-mcp", "listing_class": "agent", "rank": 1229, "previous_rank": 1226, "rank_delta": -3, "stars": 21, "stars_fmt": "21", "forks": 5, "forks_fmt": "5", "last_push": "2026-03-24", "days_ago": 202, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.7, "description": "MCP server that annotates any web page with hover labels — zero extensions, works in any browser", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 717, "npm_package": "@mcpware/ui-annotator", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 61, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 4, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T02:04:56Z", "slug": "ui-annotator-mcp", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/.mcp.json", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@mcpware/ui-annotator' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@mcpware/ui-annotator", "version": "0.1.6" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:55Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.3, "trust_score_v2": 38.3, "rank_v2": 1229, "rank_v2_delta": 411, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 11.6, "maintenance": 0.0, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "harmonist", "repo": "GammaLabTechnologies/harmonist", "display_repo": "", "url": "https://github.com/GammaLabTechnologies/harmonist", "listing_class": "agent", "rank": 1230, "previous_rank": 1228, "rank_delta": -2, "stars": 2251, "stars_fmt": "2.3k", "forks": 207, "forks_fmt": "207", "last_push": "2026-06-09", "days_ago": 125, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.7, "description": "Portable AI agent orchestration with mechanical protocol enforcement. 186 agents, zero runtime dependencies.", "language": "Python", "open_issues": 1, "category": "Agent Frameworks", "category_rank": 109, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T03:01:13Z", "slug": "harmonist", "full_fetched_at": "2026-10-12T16:02:14Z", "source_note": "", "github_homepage": "https://gammalab.ae", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.1, "trust_score_v2": 38.1, "rank_v2": 1230, "rank_v2_delta": 310, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 3.7, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Dmca Takedown MCP", "repo": "lawyerd999/dmca-takedown-mcp", "display_repo": "", "url": "https://github.com/lawyerd999/dmca-takedown-mcp", "listing_class": "agent", "rank": 1231, "previous_rank": 1227, "rank_delta": -4, "stars": 13, "stars_fmt": "13", "forks": 0, "forks_fmt": "0", "last_push": "2026-07-02", "days_ago": 102, "weekly_commits": 0, "commits_low_confidence": false, "score": 17.7, "description": "The first DMCA takedown & host-reveal MCP server for AI agents", "language": "", "open_issues": 1, "category": "MCP Servers", "category_rank": 718, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.667, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T23:09:18Z", "slug": "dmca-takedown-mcp", "full_fetched_at": "2026-10-11T16:02:22Z", "source_note": "", "github_homepage": "https://lawyerd.net/", "homepage_icon": "/site-icons/05edce6844238ee6.png", "homepage_icon_for": "https://lawyerd.net/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 38.1, "trust_score_v2": 38.1, "rank_v2": 1231, "rank_v2_delta": 353, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 10.7, "maintenance": 5.2, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Hummingbot MCP", "repo": "hummingbot/mcp", "display_repo": "", "url": "https://github.com/hummingbot/mcp", "listing_class": "agent", "rank": 1232, "previous_rank": 1229, "rank_delta": -3, "stars": 59, "stars_fmt": "59", "forks": 40, "forks_fmt": "40", "last_push": "2026-03-23", "days_ago": 203, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.2, "description": "", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 719, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/hummingbot/hummingbot-mcp:0.1.0", "vscode_extension": "", "weekly_downloads": 16776, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:39:23Z", "slug": "hummingbot-mcp", "full_fetched_at": "2026-10-12T16:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "hummingbot/mcp", "criterion": "5.1", "detail": "repository is archived" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 38.0, "trust_score_v2": 38.0, "rank_v2": 1232, "rank_v2_delta": 332, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.5, "maintenance": 0.0, "adoption": 9.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Codebase Index", "repo": "MikeRecognex/mcp-codebase-index", "display_repo": "", "url": "https://github.com/MikeRecognex/mcp-codebase-index", "listing_class": "agent", "rank": 1233, "previous_rank": 1230, "rank_delta": -3, "stars": 63, "stars_fmt": "63", "forks": 12, "forks_fmt": "12", "last_push": "2026-02-28", "days_ago": 226, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.0, "description": "17 MCP query tools for codebase navigation — functions, classes, imports, dependency graphs, change impact. Zero dependencies. 87% token reduction.", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 720, "npm_package": "", "crate_package": "", "pypi_package": "mcp-codebase-index", "docker_image": "", "vscode_extension": "", "weekly_downloads": 71, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:45:41Z", "slug": "mcp-codebase-index", "full_fetched_at": "2026-10-11T20:01:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-codebase-index' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-codebase-index", "version": "0.7.1" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:57Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "AGPL-3.0", "license_type": "open", "license_override": "", "trust_score": 38.0, "trust_score_v2": 38.0, "rank_v2": 1233, "rank_v2_delta": 419, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Naksha Studio", "repo": "Adityaraj0421/naksha-studio", "display_repo": "", "url": "https://github.com/Adityaraj0421/naksha-studio", "listing_class": "skill", "rank": 343, "previous_rank": 341, "rank_delta": -2, "stars": 323, "stars_fmt": "323", "forks": 27, "forks_fmt": "27", "last_push": "2026-06-30", "days_ago": 104, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.4, "description": "A virtual design team for Claude Code, Cursor, Windsurf, Gemini CLI, and Copilot — 26 roles, 62 commands, 15,000+ lines of expert design knowledge. Your agency's design brain, inside your terminal.", "language": "HTML", "open_issues": 0, "category": "Agent Skills", "category_rank": 343, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.04, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 8, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:57:41Z", "slug": "naksha-studio", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.9, "trust_score_v2": 37.9, "rank_v2": 343, "rank_v2_delta": 1195, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 11.6, "maintenance": 5.1, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MetaGPT", "repo": "FoundationAgents/MetaGPT", "display_repo": "", "url": "https://github.com/FoundationAgents/MetaGPT", "listing_class": "agent", "rank": 1234, "previous_rank": 1231, "rank_delta": -3, "stars": 70819, "stars_fmt": "70.8k", "forks": 9005, "forks_fmt": "9.0k", "last_push": "2026-01-21", "days_ago": 264, "weekly_commits": 0, "commits_low_confidence": false, "score": 47.5, "description": "🌟 The Multi-Agent Framework: First AI Software Company, Towards Natural Language Programming", "language": "Python", "open_issues": 9, "category": "Multi-Agent Systems", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "metagpt", "docker_image": "", "vscode_extension": "", "weekly_downloads": 747, "dl_source": "pypi", "hn_mentions_30d": 16, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.33, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 10, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T17:55:37Z", "slug": "metagpt", "full_fetched_at": "2026-10-12T04:02:40Z", "source_note": "", "github_homepage": "https://atoms.dev/", "homepage_icon": "/site-icons/d51992c7734fe142.png", "homepage_icon_for": "https://atoms.dev/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "OpenAI", "Qdrant", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Google Gemini dependency 'google-generativeai' in requirements.txt", "Found Amazon Bedrock dependency 'boto3' in requirements.txt", "Found Qdrant dependency 'qdrant' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "code", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'selenium' in setup.py", "Found database dependency 'redis' in requirements.txt", "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'metagpt' points to geekan/metagpt, which GitHub redirects to the tracked repo after a rename/transfer (not treated as drift)" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.9, "trust_score_v2": 37.9, "rank_v2": 1234, "rank_v2_delta": 237, "trust_v2_adjustment": -3.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 15.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "tribe", "repo": "StreetLamb/tribe", "display_repo": "", "url": "https://github.com/StreetLamb/tribe", "listing_class": "agent", "rank": 1235, "previous_rank": 1232, "rank_delta": -3, "stars": 1084, "stars_fmt": "1.1k", "forks": 137, "forks_fmt": "137", "last_push": "2025-10-27", "days_ago": 350, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.2, "description": "Low code tool to rapidly build and coordinate multi-agent teams", "language": "TypeScript", "open_issues": 2, "category": "Multi-Agent Systems", "category_rank": 35, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.66, "scorecard_score": 4.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-28T18:45:09Z", "slug": "tribe", "full_fetched_at": "2026-10-12T00:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Postgres", "Qdrant", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Qdrant dependency 'qdrant' in backend/pyproject.toml", "README/docs also mention Qdrant", "Found Postgres dependency 'psycopg' in backend/pyproject.toml", "Found Redis dependency 'redis' in backend/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in backend/pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.8, "trust_score_v2": 37.8, "rank_v2": 1235, "rank_v2_delta": 283, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.8, "identity": 10.8, "transparency": 12.2, "maintenance": 0.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Zenmoney MCP", "repo": "artarasov/zenmoney-mcp", "display_repo": "", "url": "https://github.com/artarasov/zenmoney-mcp", "listing_class": "agent", "rank": 1236, "previous_rank": 1233, "rank_delta": -3, "stars": 19, "stars_fmt": "19", "forks": 5, "forks_fmt": "5", "last_push": "2026-09-04", "days_ago": 38, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.1, "description": "MCP server for ZenMoney — manage your personal finances from Claude, Cursor, and other AI clients", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 721, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.267, "scorecard_score": 1.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:32:41Z", "slug": "zenmoney-mcp", "full_fetched_at": "2026-10-12T08:02:45Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ZENMONEY_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.8, "trust_score_v2": 37.8, "rank_v2": 1236, "rank_v2_delta": 333, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 9.9, "maintenance": 9.5, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Chat Nio", "repo": "coaidev/coai", "display_repo": "", "url": "https://github.com/coaidev/coai", "listing_class": "agent", "rank": 1237, "previous_rank": 1234, "rank_delta": -3, "stars": 9326, "stars_fmt": "9.3k", "forks": 1226, "forks_fmt": "1.2k", "last_push": "2026-03-12", "days_ago": 214, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.2, "description": "🚀 Next Gen Multi-tenant AI One-Stop Solution. Builtin Admin & Billing System. Enterprise-Grade Unified LLM Gateway Support for 200+ Models And 35+ Providers, Load Balacing w/ Priority-base Routing, Cost Management, Chat Share, Cloud Sync, Credit/Subscription Billing, All File Parsing, Web Search…", "language": "TypeScript", "open_issues": 31, "category": "LLM Gateways & Infra", "category_rank": 14, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 8, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:16:44Z", "slug": "chat-nio", "full_fetched_at": "2026-10-12T04:02:22Z", "source_note": "", "github_homepage": "https://coai.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: app/src/components/plugins/file.tsx", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 37.7, "trust_score_v2": 37.7, "rank_v2": 1237, "rank_v2_delta": 305, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 11.2, "maintenance": 0.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AgentLite", "repo": "SalesforceAIResearch/AgentLite", "display_repo": "", "url": "https://github.com/SalesforceAIResearch/AgentLite", "listing_class": "agent", "rank": 1238, "previous_rank": 1235, "rank_delta": -3, "stars": 652, "stars_fmt": "652", "forks": 81, "forks_fmt": "81", "last_push": "2026-06-02", "days_ago": 132, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.6, "description": "", "language": "Jupyter Notebook", "open_issues": 14, "category": "Agent Frameworks", "category_rank": 110, "npm_package": "", "crate_package": "", "pypi_package": "agentlite-llm", "docker_image": "", "vscode_extension": "", "weekly_downloads": 14, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.24, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-04T22:32:25Z", "slug": "agentlite", "full_fetched_at": "2026-10-12T08:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'agentlite-llm' has a non-GitHub or unparseable source URL" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 37.7, "trust_score_v2": 37.7, "rank_v2": 1238, "rank_v2_delta": 288, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 11.2, "maintenance": 3.2, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "swarmclaw", "repo": "swarmclawai/swarmclaw", "display_repo": "", "url": "https://github.com/swarmclawai/swarmclaw", "listing_class": "agent", "rank": 1239, "previous_rank": 1236, "rank_delta": -3, "stars": 690, "stars_fmt": "690", "forks": 140, "forks_fmt": "140", "last_push": "2026-06-30", "days_ago": 104, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.7, "description": "Open-source self-hosted AI agent runtime and multi-agent framework for autonomous agent swarms. Agent memory, MCP tools, schedules, delegation, and 23+ LLM providers (Claude, GPT, Gemini, OpenRouter, Ollama). A practical Claude Code and LangChain alternative.", "language": "TypeScript", "open_issues": 12, "category": "Multi-Agent Systems", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 3, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:37:32Z", "slug": "swarmclaw", "full_fetched_at": "2026-10-12T00:02:19Z", "source_note": "", "github_homepage": "https://www.swarmclaw.ai", "homepage_icon": "/site-icons/eb65597ceebd08f4.png", "homepage_icon_for": "https://www.swarmclaw.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/app/api/mcp-servers/[id]/conformance/route.ts", "Found MCP-related server path: src/app/api/mcp-servers/[id]/invoke/route.ts", "Found MCP-related server test path: src/app/api/mcp-servers/[id]/test/route.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found extension-based path: src/app/api/extensions/builtins/route.ts", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.7, "trust_score_v2": 37.7, "rank_v2": 1239, "rank_v2_delta": 322, "trust_v2_adjustment": 0.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.8, "maintenance": 5.1, "adoption": 6.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "XamlMcp", "repo": "trrahul/XamlMcp", "display_repo": "", "url": "https://github.com/trrahul/XamlMcp", "listing_class": "agent", "rank": 1240, "previous_rank": 1237, "rank_delta": -3, "stars": 27, "stars_fmt": "27", "forks": 0, "forks_fmt": "0", "last_push": "2026-08-05", "days_ago": 68, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.4, "description": "An MCP-based AI development toolkit for XAML UI frameworks.", "language": "C#", "open_issues": 0, "category": "MCP Servers", "category_rank": 722, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:33:09Z", "slug": "xamlmcp", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server test path: tests/XamlMcp.Tests/Mcp/Android/AndroidServerOptionsTests.cs" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 37.7, "trust_score_v2": 37.7, "rank_v2": 1240, "rank_v2_delta": 350, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.7, "maintenance": 7.5, "adoption": 3.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "deep-research", "repo": "u14app/deep-research", "display_repo": "", "url": "https://github.com/u14app/deep-research", "listing_class": "agent", "rank": 1241, "previous_rank": 1238, "rank_delta": -3, "stars": 4694, "stars_fmt": "4.7k", "forks": 1060, "forks_fmt": "1.1k", "last_push": "2026-06-18", "days_ago": 116, "weekly_commits": 0, "commits_low_confidence": false, "score": 45.0, "description": "Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.", "language": "JavaScript", "open_issues": 34, "category": "Research & Data", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-24T23:01:58Z", "slug": "deep-research", "full_fetched_at": "2026-10-12T00:02:30Z", "source_note": "", "github_homepage": "https://research.u14.app", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/app/api/mcp/server.ts", "Found MCP-related server path: src/libs/mcp-server/completable.ts" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found xAI Grok dependency '@ai-sdk/xai' in package.json", "README/docs also mention xAI Grok" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.6, "trust_score_v2": 37.6, "rank_v2": 1241, "rank_v2_delta": 287, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.8, "identity": 10.8, "transparency": 10.9, "maintenance": 4.3, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server for Binge-watch", "repo": "aahl/mcp-vods", "display_repo": "", "url": "https://github.com/aahl/mcp-vods", "listing_class": "agent", "rank": 1242, "previous_rank": 1239, "rank_delta": -3, "stars": 27, "stars_fmt": "27", "forks": 5, "forks_fmt": "5", "last_push": "2026-02-25", "days_ago": 229, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.3, "description": "📺 MCP Server for Binge-watch / MoonTV / LunaTV. 一个用于追剧/追番的MCP服务器，为AI提供搜索影视播放地址的能力，并支持在小米电视上直接播放", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 723, "npm_package": "", "crate_package": "", "pypi_package": "mcp-vods", "docker_image": "ghcr.io/aahl/mcp-vods:latest", "vscode_extension": "", "weekly_downloads": 109, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.091, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:54:19Z", "slug": "mcp-server-for-binge-watch", "full_fetched_at": "2026-10-12T08:02:32Z", "source_note": "", "github_homepage": "https://zread.ai/aahl/mcp-vods", "homepage_icon": "/site-icons/ca79af3431a3a84a.png", "homepage_icon_for": "https://zread.ai/aahl/mcp-vods", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-vods' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-vods", "version": "0.1.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:32Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.6, "trust_score_v2": 37.6, "rank_v2": 1242, "rank_v2_delta": 418, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.8, "identity": 10.8, "transparency": 10.8, "maintenance": 0.0, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Devglobe Extension", "repo": "Nako0/devglobe-extension", "display_repo": "", "url": "https://github.com/Nako0/devglobe-extension", "listing_class": "skill", "rank": 344, "previous_rank": 342, "rank_delta": -2, "stars": 216, "stars_fmt": "216", "forks": 14, "forks_fmt": "14", "last_push": "2026-06-25", "days_ago": 109, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.4, "description": "Official Extensions for DevGlobe. Show up on a 3D globe in real time while you code, with automatic time tracking and coding metrics.", "language": "TypeScript", "open_issues": 1, "category": "Agent Skills", "category_rank": 344, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.05, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 8 }, "scorecard_scanned_at": "2026-09-27T06:18:17Z", "slug": "devglobe-extension", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://devglobe.app", "homepage_icon": "/site-icons/3d61b4e5d71596cc.png", "homepage_icon_for": "https://devglobe.app", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (claude-code-plugin/plugins/devglobe/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.5, "trust_score_v2": 37.5, "rank_v2": 344, "rank_v2_delta": 1201, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.7, "maintenance": 4.7, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Airflow MCP Server", "repo": "abhishekbhakat/airflow-mcp-server", "display_repo": "", "url": "https://github.com/abhishekbhakat/airflow-mcp-server", "listing_class": "agent", "rank": 1243, "previous_rank": 1242, "rank_delta": -1, "stars": 33, "stars_fmt": "33", "forks": 10, "forks_fmt": "10", "last_push": "2025-10-14", "days_ago": 363, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.0, "description": "MCP Server for Apache Airflow", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 724, "npm_package": "", "crate_package": "", "pypi_package": "airflow-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 453, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.79, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:23:08Z", "slug": "airflow-mcp-server", "full_fetched_at": "2026-10-12T08:02:23Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: assets/airflow_mcp_server_demo.mp4", "Found MCP-related server path: src/airflow_mcp_server/__init__.py" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: airflow-mcp-plugin/CONFIG.md" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'airflow-mcp-server' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "airflow-mcp-server", "version": "0.9.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:23Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.5, "trust_score_v2": 37.5, "rank_v2": 1243, "rank_v2_delta": 327, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 11.1, "maintenance": 0.0, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OneTool MCP", "repo": "beycom/onetool-mcp", "display_repo": "", "url": "https://github.com/beycom/onetool-mcp", "listing_class": "agent", "rank": 1244, "previous_rank": 1240, "rank_delta": -4, "stars": 24, "stars_fmt": "24", "forks": 7, "forks_fmt": "7", "last_push": "2026-09-01", "days_ago": 41, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.9, "description": "🧿 One MCP for developers - no tool tax, no context rot. 100+ tools including Brave, Google, Context7, Excalidraw, AWS, Version Checker, Excel, File Ops, Database, Playwright, Chrome DevTools and many more.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 725, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 10, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:18:46Z", "slug": "onetool-mcp", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "https://onetool.beycom.online", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: licenses/brave-search-mcp-server-LICENSE", "Found MCP-related server path: licenses/excel-mcp-server-LICENSE", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found credential/config marker 'PRIVATE_MCP_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "GPL-3.0", "license_type": "open", "license_override": "", "trust_score": 37.5, "trust_score_v2": 37.5, "rank_v2": 1244, "rank_v2_delta": 319, "trust_v2_adjustment": 0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.0, "identity": 10.8, "transparency": 10.5, "maintenance": 9.3, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "GPTSwarm", "repo": "metauto-ai/GPTSwarm", "display_repo": "", "url": "https://github.com/metauto-ai/GPTSwarm", "listing_class": "agent", "rank": 1245, "previous_rank": 1241, "rank_delta": -4, "stars": 1054, "stars_fmt": "1.1k", "forks": 110, "forks_fmt": "110", "last_push": "2026-02-05", "days_ago": 249, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.6, "description": "🐝 The First Self-Improving agents with RL / Prompting Optimization", "language": "Python", "open_issues": 0, "category": "Multi-Agent Systems", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.871, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T23:04:44Z", "slug": "gptswarm", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "https://gptswarm.org", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.4, "trust_score_v2": 37.4, "rank_v2": 1245, "rank_v2_delta": 278, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.1, "identity": 10.8, "transparency": 11.7, "maintenance": 0.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AgentBench", "repo": "THUDM/AgentBench", "display_repo": "", "url": "https://github.com/THUDM/AgentBench", "listing_class": "agent", "rank": 1246, "previous_rank": 1244, "rank_delta": -2, "stars": 3767, "stars_fmt": "3.8k", "forks": 290, "forks_fmt": "290", "last_push": "2026-02-08", "days_ago": 246, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.0, "description": "A Comprehensive Benchmark to Evaluate LLMs as Agents (ICLR'24)", "language": "Python", "open_issues": 65, "category": "Observability & Evaluation", "category_rank": 23, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.507, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T23:31:11Z", "slug": "agentbench", "full_fetched_at": "2026-10-12T08:02:33Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'selenium' in src/server/tasks/webshop/requirements.txt" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 37.3, "trust_score_v2": 37.3, "rank_v2": 1246, "rank_v2_delta": 306, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 11.4, "maintenance": 0.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Unreal MCP Ue4", "repo": "conaman/unreal-mcp-ue4", "display_repo": "", "url": "https://github.com/conaman/unreal-mcp-ue4", "listing_class": "agent", "rank": 1247, "previous_rank": 1243, "rank_delta": -4, "stars": 25, "stars_fmt": "25", "forks": 7, "forks_fmt": "7", "last_push": "2026-05-26", "days_ago": 139, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.4, "description": "UE4.27-first MCP server for controlling Unreal Editor sessions over Python Remote Execution.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 726, "npm_package": "unreal-mcp-ue4", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 106, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:03:55Z", "slug": "unreal-mcp-ue4", "full_fetched_at": "2026-10-12T12:02:54Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'unreal-mcp-ue4' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "unreal-mcp-ue4", "version": "2026.5.12-3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:54Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 37.3, "trust_score_v2": 37.3, "rank_v2": 1247, "rank_v2_delta": 414, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.9, "identity": 10.8, "transparency": 9.8, "maintenance": 2.7, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "auto-deep-researcher-24x7", "repo": "Xiangyue-Zhang/auto-deep-researcher-24x7", "display_repo": "", "url": "https://github.com/Xiangyue-Zhang/auto-deep-researcher-24x7", "listing_class": "agent", "rank": 1248, "previous_rank": 1245, "rank_delta": -3, "stars": 1299, "stars_fmt": "1.3k", "forks": 116, "forks_fmt": "116", "last_push": "2026-06-03", "days_ago": 131, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.1, "description": "🔥 An autonomous AI agent that runs your deep learning experiments 24/7 while you sleep. Zero-cost monitoring, Leader-Worker architecture, constant-size memory.", "language": "Python", "open_issues": 13, "category": "Research & Data", "category_rank": 27, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T17:48:37Z", "slug": "auto-deep-researcher-24x7", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "https://arxiv.org/abs/2604.05854", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "https://arxiv.org/abs/2604.05854", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 37.2, "trust_score_v2": 37.2, "rank_v2": 1248, "rank_v2_delta": 264, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 12.2, "maintenance": 3.3, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Webarena", "repo": "web-arena-x/webarena", "display_repo": "", "url": "https://github.com/web-arena-x/webarena", "listing_class": "agent", "rank": 1249, "previous_rank": 1259, "rank_delta": 10, "stars": 1625, "stars_fmt": "1.6k", "forks": 247, "forks_fmt": "247", "last_push": "2025-11-26", "days_ago": 320, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.4, "description": "Code repo for \"WebArena: A Realistic Web Environment for Building Autonomous Agents\"", "language": "Python", "open_issues": 85, "category": "Observability & Evaluation", "category_rank": 24, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.49, "scorecard_score": 4.2, "scorecard_checks": { "Code-Review": 10, "Packaging": -1, "Maintained": 0, "Dangerous-Workflow": 10, "Token-Permissions": 0, "Binary-Artifacts": 10, "CII-Best-Practices": 0, "Pinned-Dependencies": 0, "Security-Policy": 0, "Fuzzing": 0, "License": 10, "Signed-Releases": -1, "Branch-Protection": -1, "SAST": 0 }, "scorecard_scanned_at": "2026-10-12T08:06:22Z", "slug": "webarena", "full_fetched_at": "2026-10-12T08:02:40Z", "source_note": "", "github_homepage": "https://webarena.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in requirements.txt", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 37.0, "trust_score_v2": 37.0, "rank_v2": 1249, "rank_v2_delta": 287, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.7, "identity": 10.8, "transparency": 12.1, "maintenance": 0.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "FinnewsHunter", "repo": "DemonDamon/FinnewsHunter", "display_repo": "", "url": "https://github.com/DemonDamon/FinnewsHunter", "listing_class": "agent", "rank": 1250, "previous_rank": 1246, "rank_delta": -4, "stars": 1500, "stars_fmt": "1.5k", "forks": 341, "forks_fmt": "341", "last_push": "2026-10-01", "days_ago": 11, "weekly_commits": 0, "commits_low_confidence": false, "score": 54.4, "description": "FinnewsHunter: Multi-agent financial intelligence platform powered by AgenticX. Real-time news analysis, sentiment fusion, and alpha factor mining.", "language": "Python", "open_issues": 10, "category": "Research & Data", "category_rank": 28, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:17:25Z", "slug": "finnewshunter", "full_fetched_at": "2026-10-12T12:03:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in backend/requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in backend/requirements.txt", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in backend/requirements.txt", "README/docs also mention browser capabilities", "Found database dependency 'redis' in backend/requirements.txt", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 37.0, "trust_score_v2": 37.0, "rank_v2": 1250, "rank_v2_delta": 223, "trust_v2_adjustment": -4.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.7, "identity": 10.8, "transparency": 9.7, "maintenance": 11.3, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "JustCall MCP Server", "repo": "saaslabsco/justcall-mcp-server", "display_repo": "", "url": "https://github.com/saaslabsco/justcall-mcp-server", "listing_class": "agent", "rank": 1251, "previous_rank": 1248, "rank_delta": -3, "stars": 25, "stars_fmt": "25", "forks": 5, "forks_fmt": "5", "last_push": "2026-03-12", "days_ago": 214, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.1, "description": "JustCall's Official MCP Server", "language": "HTML", "open_issues": 1, "category": "MCP Servers", "category_rank": 727, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.968, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:08:30Z", "slug": "justcall-mcp-server", "full_fetched_at": "2026-10-12T00:02:01Z", "source_note": "", "github_homepage": "https://justcall.io", "homepage_icon": "/site-icons/8f3ea15645b34511.png", "homepage_icon_for": "https://justcall.io", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'JUSTCALL_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.9, "trust_score_v2": 36.9, "rank_v2": 1251, "rank_v2_delta": 336, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.8, "identity": 10.8, "transparency": 11.9, "maintenance": 0.0, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Playwright", "repo": "executeautomation/mcp-playwright", "display_repo": "", "url": "https://github.com/executeautomation/mcp-playwright", "listing_class": "agent", "rank": 1252, "previous_rank": 1249, "rank_delta": -3, "stars": 5664, "stars_fmt": "5.7k", "forks": 538, "forks_fmt": "538", "last_push": "2025-12-13", "days_ago": 303, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.2, "description": "Playwright Model Context Protocol Server - Tool to automate Browsers and APIs in Claude Desktop, Cline, Cursor IDE and More 🔌", "language": "TypeScript", "open_issues": 25, "category": "Protocols & Tool Integration", "category_rank": 59, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:50:25Z", "slug": "mcp-playwright", "full_fetched_at": "2026-10-12T04:02:29Z", "source_note": "", "github_homepage": "https://executeautomation.github.io/mcp-playwright/", "homepage_icon": "/site-icons/b4771b9e26b26ce2.png", "homepage_icon_for": "https://executeautomation.github.io/mcp-playwright/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/docs/img/mcp-server.png", "Found MCP-related server docs path: docs/docs/local-setup/img/mcp-server-running.png", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.9, "trust_score_v2": 36.9, "rank_v2": 1252, "rank_v2_delta": 330, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.4, "identity": 10.8, "transparency": 11.0, "maintenance": 0.0, "adoption": 9.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "II-Agent", "repo": "Intelligent-Internet/ii-agent", "display_repo": "", "url": "https://github.com/Intelligent-Internet/ii-agent", "listing_class": "agent", "rank": 1253, "previous_rank": 1247, "rank_delta": -6, "stars": 3390, "stars_fmt": "3.4k", "forks": 527, "forks_fmt": "527", "last_push": "2026-08-16", "days_ago": 57, "weekly_commits": 0, "commits_low_confidence": false, "score": 51.0, "description": "II-Agent: a new open-source framework to build and deploy intelligent agents", "language": "Python", "open_issues": 3, "category": "Agent Frameworks", "category_rank": 111, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 1.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:49:32Z", "slug": "ii-agent", "full_fetched_at": "2026-10-12T04:02:47Z", "source_note": "", "github_homepage": "https://ii.inc/web/blog/post/ii-agent", "homepage_icon": "/site-icons/dc61d5310754f541.png", "homepage_icon_for": "https://ii.inc/web/blog/post/ii-agent", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: src/ii_agent/integrations/connectors/composio/mcp_server_service.py", "Found MCP-related server path: src/ii_server/mcp/server.py", "Found MCP dependency 'fastmcp' in pyproject.toml", "Found MCP dependency 'fastmcp' in docker/sandbox/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "E2B", "ElevenLabs", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres", "Redis", "Tavily" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database", "search" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "Found search dependency 'tavily' in pyproject.toml", "README/docs also mention search capabilities", "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 36.9, "trust_score_v2": 36.9, "rank_v2": 1253, "rank_v2_delta": 271, "trust_v2_adjustment": -1.9, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.7, "identity": 10.8, "transparency": 9.6, "maintenance": 8.2, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Startup Skill", "repo": "ferdinandobons/startup-skill", "display_repo": "", "url": "https://github.com/ferdinandobons/startup-skill", "listing_class": "skill", "rank": 345, "previous_rank": 344, "rank_delta": -1, "stars": 1191, "stars_fmt": "1.2k", "forks": 156, "forks_fmt": "156", "last_push": "2026-07-01", "days_ago": 103, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.4, "description": "AI agent skills for startup validation, competitive intelligence, and planning", "language": "", "open_issues": 1, "category": "Agent Skills", "category_rank": 345, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:31:25Z", "slug": "startup-skill", "full_fetched_at": "2026-10-12T16:02:06Z", "source_note": "", "github_homepage": "https://startupskill.me", "homepage_icon": "/site-icons/656a8aa05c1d4eec.png", "homepage_icon_for": "https://startupskill.me", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.8, "trust_score_v2": 36.8, "rank_v2": 345, "rank_v2_delta": 1214, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.3, "identity": 10.8, "transparency": 10.5, "maintenance": 5.1, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Super Simple Software Factory", "repo": "disler/super-simple-software-factory", "display_repo": "", "url": "https://github.com/disler/super-simple-software-factory", "listing_class": "skill", "rank": 346, "previous_rank": 343, "rank_delta": -3, "stars": 967, "stars_fmt": "967", "forks": 255, "forks_fmt": "255", "last_push": "2026-08-04", "days_ago": 69, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.5, "description": "Repeatable agents-plus-code workflows, packaged as one skill, stamped into any repo. Deterministic Python owns the graph; coding agents are bounded nodes inside it.", "language": "Python", "open_issues": 7, "category": "Agent Skills", "category_rank": 346, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-12T06:54:04Z", "slug": "super-simple-software-factory", "full_fetched_at": "2026-10-12T12:03:01Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Fireworks AI", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Fireworks AI credential/config marker 'FIREWORKS_API_KEY'", "README/docs also mention Fireworks AI", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.8, "trust_score_v2": 36.8, "rank_v2": 346, "rank_v2_delta": 1179, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.9, "identity": 10.8, "transparency": 10.5, "maintenance": 7.4, "adoption": 7.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Funnel", "repo": "chris-schra/mcp-funnel", "display_repo": "", "url": "https://github.com/chris-schra/mcp-funnel", "listing_class": "agent", "rank": 1254, "previous_rank": 1253, "rank_delta": -1, "stars": 158, "stars_fmt": "158", "forks": 14, "forks_fmt": "14", "last_push": "2025-11-24", "days_ago": 322, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.7, "description": "Finally, a proxy that does what grep does for logs - filters out the noise. Stop carrying 70k tokens of tools you'll never use. It's like tree-shaking, but for MCP. 🚀", "language": "TypeScript", "open_issues": 7, "category": "MCP Servers", "category_rank": 728, "npm_package": "mcp-funnel", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 58, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.09, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 1, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T10:01:36Z", "slug": "mcp-funnel", "full_fetched_at": "2026-10-12T12:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: packages/mcp/server.json", "Found MCP-related server path: packages/mcp/src/mcp-registry/implementations/temp-server-tracker.ts", "Found MCP-related server test path: packages/mcp/src/__tests__/is-server-connected.test.ts", "Found MCP-related server test path: packages/mcp/src/__tests__/servers-configuration.test.ts" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-funnel' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-funnel", "version": "0.0.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:50Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.8, "trust_score_v2": 36.8, "rank_v2": 1254, "rank_v2_delta": 417, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.5, "identity": 10.8, "transparency": 9.9, "maintenance": 0.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "sre", "repo": "SmythOS/sre", "display_repo": "", "url": "https://github.com/SmythOS/sre", "listing_class": "agent", "rank": 1255, "previous_rank": 1254, "rank_delta": -1, "stars": 1303, "stars_fmt": "1.3k", "forks": 204, "forks_fmt": "204", "last_push": "2026-04-03", "days_ago": 192, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.4, "description": "The SmythOS Runtime Environment (SRE) is an open-source, cloud-native runtime for agentic AI. Secure, modular, and production-ready, it lets developers build, run, and manage intelligent agents across local, cloud, and edge environments.", "language": "TypeScript", "open_issues": 8, "category": "Agent Frameworks", "category_rank": 112, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 4.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 6, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:32:26Z", "slug": "sre", "full_fetched_at": "2026-10-12T00:02:13Z", "source_note": "", "github_homepage": "https://smythos.com", "homepage_icon": "/site-icons/548f4e410721d874.png", "homepage_icon_for": "https://smythos.com", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in packages/cli/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/sdk/package.json" ] }, "external_service_dependencies": { "providers": [ "Pinecone" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Pinecone credential/config marker 'PINECONE_API_KEY'", "README/docs also mention Pinecone" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.7, "trust_score_v2": 36.7, "rank_v2": 1255, "rank_v2_delta": 293, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.2, "identity": 10.8, "transparency": 12.2, "maintenance": 0.0, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Glovebox MCP", "repo": "segentic-lab/glovebox-mcp", "display_repo": "", "url": "https://github.com/segentic-lab/glovebox-mcp", "listing_class": "agent", "rank": 1256, "previous_rank": 1250, "rank_delta": -6, "stars": 13, "stars_fmt": "13", "forks": 0, "forks_fmt": "0", "last_push": "2026-07-07", "days_ago": 97, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.4, "description": "Sandboxed computer-use MCP — drive a real browser + desktop apps in a nested X11 window.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 729, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-29T21:32:16Z", "slug": "glovebox-mcp", "full_fetched_at": "2026-10-12T00:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.7, "trust_score_v2": 36.7, "rank_v2": 1256, "rank_v2_delta": 351, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.4, "maintenance": 5.5, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Cli2mcp", "repo": "RonieNeubauer/cli2mcp", "display_repo": "", "url": "https://github.com/RonieNeubauer/cli2mcp", "listing_class": "agent", "rank": 1257, "previous_rank": 1251, "rank_delta": -6, "stars": 12, "stars_fmt": "12", "forks": 0, "forks_fmt": "0", "last_push": "2026-04-29", "days_ago": 166, "weekly_commits": 0, "commits_low_confidence": false, "score": 8.8, "description": "Wrap any CLI as a Model Context Protocol (MCP) server for Claude, ChatGPT, Cursor, Gemini and any MCP-compatible client — schema auto-inferred from --help.", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 730, "npm_package": "cli2mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 30, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T02:53:56Z", "slug": "cli2mcp", "full_fetched_at": "2026-10-12T00:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found shell dependency 'execa' in package.json", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'cli2mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "cli2mcp", "version": "0.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:59Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.7, "trust_score_v2": 36.7, "rank_v2": 1257, "rank_v2_delta": 410, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 11.0, "maintenance": 0.9, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Texas Grocery MCP", "repo": "mgwalkerjr95/texas-grocery-mcp", "display_repo": "", "url": "https://github.com/mgwalkerjr95/texas-grocery-mcp", "listing_class": "agent", "rank": 1258, "previous_rank": 1252, "rank_delta": -6, "stars": 65, "stars_fmt": "65", "forks": 30, "forks_fmt": "30", "last_push": "2026-05-11", "days_ago": 154, "weekly_commits": 0, "commits_low_confidence": false, "score": 21.6, "description": "MCP server for HEB grocery shopping - search products, manage cart, clip coupons", "language": "Python", "open_issues": 4, "category": "MCP Servers", "category_rank": 731, "npm_package": "", "crate_package": "", "pypi_package": "texas-grocery-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 20, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T20:58:36Z", "slug": "texas-grocery-mcp", "full_fetched_at": "2026-10-11T20:01:55Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/research/technical/mcp-servers-python-release-research.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in pyproject.toml", "Found Redis credential/config marker 'REDIS_URL'", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "database" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities", "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'texas-grocery-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "texas-grocery-mcp", "version": "0.1.3" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:01:55Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.7, "trust_score_v2": 36.7, "rank_v2": 1258, "rank_v2_delta": 389, "trust_v2_adjustment": 4.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.6, "maintenance": 1.7, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "FinStack MCP", "repo": "finstacklabs/finstack-mcp", "display_repo": "", "url": "https://github.com/finstacklabs/finstack-mcp", "listing_class": "agent", "rank": 1259, "previous_rank": 1261, "rank_delta": 2, "stars": 18, "stars_fmt": "18", "forks": 16, "forks_fmt": "16", "last_push": "2026-04-09", "days_ago": 186, "weekly_commits": 0, "commits_low_confidence": false, "score": 13.4, "description": "India-first MCP server for NSE/BSE, fundamentals, analytics, and daily research workflows.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 732, "npm_package": "", "crate_package": "", "pypi_package": "finstack-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 102, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:26:41Z", "slug": "finstack-mcp", "full_fetched_at": "2026-10-12T16:02:02Z", "source_note": "", "github_homepage": "https://finstack-mcp-ten.vercel.app", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ANGEL_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'finstack-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "finstack-mcp", "version": "0.10.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:02Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.6, "trust_score_v2": 36.6, "rank_v2": 1259, "rank_v2_delta": 399, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 0.0, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Carbon Arc", "repo": "Carbon-Arc/mcp", "display_repo": "", "url": "https://github.com/Carbon-Arc/mcp", "listing_class": "agent", "rank": 1260, "previous_rank": 1255, "rank_delta": -5, "stars": 33, "stars_fmt": "33", "forks": 0, "forks_fmt": "0", "last_push": "2026-06-07", "days_ago": 127, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.7, "description": "The infrastructure for the AI economy: primitives for inference, agents, and decisions.", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 733, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T01:34:18Z", "slug": "carbon-arc", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "https://www.carbonarc.ai", "homepage_icon": "/site-icons/9290d7cd39552d67.png", "homepage_icon_for": "https://www.carbonarc.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .cursor-plugin/plugin.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 36.6, "trust_score_v2": 36.6, "rank_v2": 1260, "rank_v2_delta": 306, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 10.7, "maintenance": 3.5, "adoption": 3.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Notify MCP Server", "repo": "aahl/mcp-notify", "display_repo": "", "url": "https://github.com/aahl/mcp-notify", "listing_class": "agent", "rank": 1261, "previous_rank": 1256, "rank_delta": -5, "stars": 28, "stars_fmt": "28", "forks": 8, "forks_fmt": "8", "last_push": "2026-03-26", "days_ago": 200, "weekly_commits": 0, "commits_low_confidence": false, "score": 13.2, "description": "💬 MCP Server for notify to Weixin, Telegram, Bark, Lark, 飞书, 钉钉", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 734, "npm_package": "", "crate_package": "", "pypi_package": "mcp-notify", "docker_image": "ghcr.io/aahl/mcp-notify:latest", "vscode_extension": "", "weekly_downloads": 104, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.122, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:17:50Z", "slug": "notify-mcp-server", "full_fetched_at": "2026-10-12T08:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'TELEGRAM_BOT_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-notify' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-notify", "version": "0.1.11" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:17Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.6, "trust_score_v2": 36.6, "rank_v2": 1261, "rank_v2_delta": 398, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Mat", "repo": "codelipenghui/mcp-mat", "display_repo": "", "url": "https://github.com/codelipenghui/mcp-mat", "listing_class": "agent", "rank": 1262, "previous_rank": 1257, "rank_delta": -5, "stars": 26, "stars_fmt": "26", "forks": 5, "forks_fmt": "5", "last_push": "2026-03-19", "days_ago": 207, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.2, "description": "", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 735, "npm_package": "mcp-mat", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 48, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.333, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:43:46Z", "slug": "mcp-mat", "full_fetched_at": "2026-10-12T12:02:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-mat' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-mat", "version": "0.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:52Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 36.6, "trust_score_v2": 36.6, "rank_v2": 1262, "rank_v2_delta": 412, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 10.1, "maintenance": 0.0, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Arscontexta", "repo": "agenticnotetaking/arscontexta", "display_repo": "", "url": "https://github.com/agenticnotetaking/arscontexta", "listing_class": "skill", "rank": 347, "previous_rank": 346, "rank_delta": -1, "stars": 3494, "stars_fmt": "3.5k", "forks": 231, "forks_fmt": "231", "last_push": "2026-02-24", "days_ago": 230, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.3, "description": "Claude Code plugin that generates individualized knowledge systems from conversation. You describe how you think and work, have a conversation and get a complete second brain as markdown files you own.", "language": "Shell", "open_issues": 22, "category": "Agent Skills", "category_rank": 347, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.5, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T15:45:39Z", "slug": "arscontexta", "full_fetched_at": "2026-10-12T08:02:25Z", "source_note": "", "github_homepage": "https://arscontexta.org", "homepage_icon": "/site-icons/e861c0bd633d326a.png", "homepage_icon_for": "https://arscontexta.org", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.5, "trust_score_v2": 36.5, "rank_v2": 347, "rank_v2_delta": 1221, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 11.1, "maintenance": 0.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Brand Docs", "repo": "ferdinandobons/brand-docs", "display_repo": "", "url": "https://github.com/ferdinandobons/brand-docs", "listing_class": "skill", "rank": 348, "previous_rank": 345, "rank_delta": -3, "stars": 275, "stars_fmt": "275", "forks": 34, "forks_fmt": "34", "last_push": "2026-07-10", "days_ago": 94, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.7, "description": "BrandDocs is a set of agent skills that learn your existing Word, PowerPoint and Excel templates and generate new on-brand documents from them. Unlike generic AI document generators, it preserves brand, structure, styles and formulas by construction. Built for Claude Code, Codex and compatible AI…", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 348, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T09:59:04Z", "slug": "brand-docs", "full_fetched_at": "2026-10-12T16:01:57Z", "source_note": "", "github_homepage": "https://ferdinandobons.github.io/brand-docs/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.5, "trust_score_v2": 36.5, "rank_v2": 348, "rank_v2_delta": 1219, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.9, "maintenance": 5.7, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Bigquery MCP", "repo": "SnowLeopard-AI/bigquery-mcp", "display_repo": "", "url": "https://github.com/SnowLeopard-AI/bigquery-mcp", "listing_class": "agent", "rank": 1263, "previous_rank": 1262, "rank_delta": -1, "stars": 10, "stars_fmt": "10", "forks": 1, "forks_fmt": "1", "last_push": "2026-03-27", "days_ago": 199, "weekly_commits": 0, "commits_low_confidence": false, "score": 7.6, "description": "A MCP server for Google's BigQuery database", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 736, "npm_package": "", "crate_package": "", "pypi_package": "sl-bigquery-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 26, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.17, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 8, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:09:12Z", "slug": "bigquery-mcp", "full_fetched_at": "2026-10-12T00:02:13Z", "source_note": "", "github_homepage": "https://www.snowleopard.ai", "homepage_icon": "/site-icons/5fa8b7b37db7e21c.png", "homepage_icon_for": "https://www.snowleopard.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'sl-bigquery-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sl-bigquery-mcp", "version": "0.1.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:13Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.4, "trust_score_v2": 36.4, "rank_v2": 1263, "rank_v2_delta": 413, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 4.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Codex Bridge", "repo": "Sateezg/codex-bridge", "display_repo": "", "url": "https://github.com/Sateezg/codex-bridge", "listing_class": "skill", "rank": 349, "previous_rank": 347, "rank_delta": -2, "stars": 246, "stars_fmt": "246", "forks": 7, "forks_fmt": "7", "last_push": "2026-08-10", "days_ago": 63, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.8, "description": "Image generation (gpt-image-2) and GPT-5 subagents for Claude Code — through the Codex CLI login you already have. No OpenAI API key.", "language": "Shell", "open_issues": 0, "category": "Agent Skills", "category_rank": 349, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-19T14:21:41Z", "slug": "codex-bridge", "full_fetched_at": "2026-10-12T00:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.4, "trust_score_v2": 36.4, "rank_v2": 349, "rank_v2_delta": 1188, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.7, "maintenance": 7.8, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Aigroup Mdtoword MCP", "repo": "jackdark425/aigroup-mdtoword-mcp", "display_repo": "", "url": "https://github.com/jackdark425/aigroup-mdtoword-mcp", "listing_class": "agent", "rank": 1264, "previous_rank": 1258, "rank_delta": -6, "stars": 14, "stars_fmt": "14", "forks": 2, "forks_fmt": "2", "last_push": "2026-04-24", "days_ago": 171, "weekly_commits": 0, "commits_low_confidence": false, "score": 10.6, "description": "Markdown-to-Word MCP server with advanced styling, formulas, tables, Mermaid rendering, and HTTP deployment support.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 737, "npm_package": "aigroup-mdtoword-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 76, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T20:59:42Z", "slug": "aigroup-mdtoword-mcp", "full_fetched_at": "2026-10-12T16:02:29Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'aigroup-mdtoword-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "aigroup-mdtoword-mcp", "version": "4.0.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:29Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.4, "trust_score_v2": 36.4, "rank_v2": 1264, "rank_v2_delta": 411, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.6, "maintenance": 0.6, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Trade It", "repo": "trade-it-inc/trade-it-mcp", "display_repo": "", "url": "https://github.com/trade-it-inc/trade-it-mcp", "listing_class": "agent", "rank": 1265, "previous_rank": 1260, "rank_delta": -5, "stars": 60, "stars_fmt": "60", "forks": 15, "forks_fmt": "15", "last_push": "2026-03-26", "days_ago": 200, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.3, "description": "Guide to connect to Trade It's MCP server and trade stocks, crypto, and options", "language": "", "open_issues": 1, "category": "MCP Servers", "category_rank": 738, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.556, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:17:44Z", "slug": "trade-it", "full_fetched_at": "2026-10-12T04:02:06Z", "source_note": "", "github_homepage": "https://tradeit.app", "homepage_icon": "/site-icons/447fb8f18576fbaa.png", "homepage_icon_for": "https://tradeit.app", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "CC0-1.0", "license_type": "open", "license_override": "", "trust_score": 36.3, "trust_score_v2": 36.3, "rank_v2": 1265, "rank_v2_delta": 345, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.5, "identity": 10.8, "transparency": 11.7, "maintenance": 0.0, "adoption": 4.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pordee", "repo": "kerlos/pordee", "display_repo": "", "url": "https://github.com/kerlos/pordee", "listing_class": "skill", "rank": 350, "previous_rank": 348, "rank_delta": -2, "stars": 329, "stars_fmt": "329", "forks": 31, "forks_fmt": "31", "last_push": "2026-07-09", "days_ago": 95, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.9, "description": "ตอบสั้นๆ ก็เข้าใจแบบพอดีๆ", "language": "JavaScript", "open_issues": 5, "category": "Agent Skills", "category_rank": 350, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.098, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 3, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T17:49:09Z", "slug": "pordee", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.3, "trust_score_v2": 36.3, "rank_v2": 350, "rank_v2_delta": 1201, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 11.0, "maintenance": 5.7, "adoption": 6.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Anki MCP", "repo": "arielbk/anki-mcp", "display_repo": "", "url": "https://github.com/arielbk/anki-mcp", "listing_class": "agent", "rank": 1266, "previous_rank": 1263, "rank_delta": -3, "stars": 11, "stars_fmt": "11", "forks": 5, "forks_fmt": "5", "last_push": "2026-05-23", "days_ago": 142, "weekly_commits": 0, "commits_low_confidence": false, "score": 15.4, "description": "Anki MCP lets you have a conversation with your flashcards", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 739, "npm_package": "@arielbk/anki-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 57, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.075, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:14:24Z", "slug": "anki-mcp", "full_fetched_at": "2026-10-12T12:02:46Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@arielbk/anki-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@arielbk/anki-mcp", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:46Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.2, "trust_score_v2": 36.2, "rank_v2": 1266, "rank_v2_delta": 412, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.2, "identity": 10.8, "transparency": 9.8, "maintenance": 2.5, "adoption": 4.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Hub for Neovim", "repo": "ravitemer/mcphub.nvim", "display_repo": "", "url": "https://github.com/ravitemer/mcphub.nvim", "listing_class": "agent", "rank": 1267, "previous_rank": 1264, "rank_delta": -3, "stars": 1787, "stars_fmt": "1.8k", "forks": 95, "forks_fmt": "95", "last_push": "2026-01-18", "days_ago": 267, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.7, "description": "An MCP client for Neovim that seamlessly integrates MCP servers into your editing workflow with an intuitive interface for managing, testing, and using MCP servers with your favorite chat plugins.", "language": "Lua", "open_issues": 17, "category": "Protocols & Tool Integration", "category_rank": 60, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T06:58:43Z", "slug": "mcp-hub-for-neovim", "full_fetched_at": "2026-10-12T00:02:00Z", "source_note": "", "github_homepage": "https://ravitemer.github.io/mcphub.nvim/", "homepage_icon": "/site-icons/1392a59f5508ddd8.png", "homepage_icon_for": "https://ravitemer.github.io/mcphub.nvim/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: doc/mcp/servers_json.md" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: doc/extensions/avante.md", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.1, "trust_score_v2": 36.1, "rank_v2": 1267, "rank_v2_delta": 339, "trust_v2_adjustment": 1.4, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 11.1, "maintenance": 0.0, "adoption": 7.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP As A Judge", "repo": "OtherVibes/mcp-as-a-judge", "display_repo": "", "url": "https://github.com/OtherVibes/mcp-as-a-judge", "listing_class": "agent", "rank": 1268, "previous_rank": 1265, "rank_delta": -3, "stars": 17, "stars_fmt": "17", "forks": 9, "forks_fmt": "9", "last_push": "2025-12-15", "days_ago": 301, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.2, "description": "MCP as a Judge is a behavioral MCP that strengthens AI coding assistants by requiring explicit LLM evaluations", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 740, "npm_package": "", "crate_package": "", "pypi_package": "mcp-as-a-judge", "docker_image": "", "vscode_extension": "", "weekly_downloads": 54, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.13, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:34:06Z", "slug": "mcp-as-a-judge", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)", "Found credential/config marker 'LLM_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-as-a-judge' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-as-a-judge", "version": "0.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:08Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 36.1, "trust_score_v2": 36.1, "rank_v2": 1268, "rank_v2_delta": 397, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 5.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Flowbite MCP", "repo": "themesberg/flowbite-mcp", "display_repo": "", "url": "https://github.com/themesberg/flowbite-mcp", "listing_class": "agent", "rank": 1269, "previous_rank": 1267, "rank_delta": -2, "stars": 42, "stars_fmt": "42", "forks": 7, "forks_fmt": "7", "last_push": "2026-01-04", "days_ago": 281, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.0, "description": "Convert Figma design to code with the official Flowbite MCP server", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 741, "npm_package": "flowbite-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 535, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.064, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:20:53Z", "slug": "flowbite-mcp", "full_fetched_at": "2026-10-12T00:02:25Z", "source_note": "", "github_homepage": "https://flowbite.com/docs/getting-started/mcp/", "homepage_icon": "/site-icons/3dce7a1b96c1bd19.png", "homepage_icon_for": "https://flowbite.com/docs/getting-started/mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Found credential/config marker 'FIGMA_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/plugin.json", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'flowbite-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "flowbite-mcp", "version": "1.1.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:25Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.9, "trust_score_v2": 35.9, "rank_v2": 1269, "rank_v2_delta": 395, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.7, "identity": 10.8, "transparency": 10.1, "maintenance": 0.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "TUUI", "repo": "AI-QL/tuui", "display_repo": "", "url": "https://github.com/AI-QL/tuui", "listing_class": "agent", "rank": 1270, "previous_rank": 1266, "rank_delta": -4, "stars": 1156, "stars_fmt": "1.2k", "forks": 107, "forks_fmt": "107", "last_push": "2026-05-14", "days_ago": 151, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.9, "description": "A desktop MCP client designed as a tool unitary utility integration, accelerating AI adoption through the Model Context Protocol (MCP) and enabling cross-vendor LLM API orchestration.", "language": "TypeScript", "open_issues": 1, "category": "Protocols & Tool Integration", "category_rank": 61, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:32:19Z", "slug": "tuui", "full_fetched_at": "2026-10-12T08:02:28Z", "source_note": "", "github_homepage": "https://www.tuui.com/", "homepage_icon": "/site-icons/423a232a606f5c18.png", "homepage_icon_for": "https://www.tuui.com/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/main/assets/config/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/renderer/plugins/i18n.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 35.8, "trust_score_v2": 35.8, "rank_v2": 1270, "rank_v2_delta": 343, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.3, "identity": 10.8, "transparency": 10.7, "maintenance": 1.9, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Skolverket MCP", "repo": "isakskogstad/Skolverket-MCP", "display_repo": "", "url": "https://github.com/isakskogstad/Skolverket-MCP", "listing_class": "agent", "rank": 1271, "previous_rank": 1268, "rank_delta": -3, "stars": 13, "stars_fmt": "13", "forks": 8, "forks_fmt": "8", "last_push": "2026-04-22", "days_ago": 173, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.3, "description": "MCP server for Swedish National Agency for Education (Skolverket) open data. Tuned for LLMs to query, parse, and integrate info, data, and stats from three public API endpoints.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 742, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.33, "scorecard_score": 4.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 8, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:46:29Z", "slug": "skolverket-mcp", "full_fetched_at": "2026-10-12T16:02:38Z", "source_note": "", "github_homepage": "https://skolverket-mcp.onrender.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.7, "trust_score_v2": 35.7, "rank_v2": 1271, "rank_v2_delta": 351, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 12.3, "maintenance": 0.5, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SignNow Api Helper MCP", "repo": "signnow/sn-api-helper-mcp", "display_repo": "", "url": "https://github.com/signnow/sn-api-helper-mcp", "listing_class": "agent", "rank": 1272, "previous_rank": 1269, "rank_delta": -3, "stars": 10, "stars_fmt": "10", "forks": 5, "forks_fmt": "5", "last_push": "2026-01-21", "days_ago": 264, "weekly_commits": 0, "commits_low_confidence": false, "score": 9.8, "description": "Official SignNow API Helper MCP server for AI agents. Answers questions about the SignNow API and provides integration guidance.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 743, "npm_package": "", "crate_package": "", "pypi_package": "sn-api-helper-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 18, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.438, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T03:49:29Z", "slug": "signnow-api-helper-mcp", "full_fetched_at": "2026-10-12T00:02:10Z", "source_note": "", "github_homepage": "https://www.signnow.com/developers", "homepage_icon": "/site-icons/08bf81d04aaf78ff.png", "homepage_icon_for": "https://www.signnow.com/developers", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'sn-api-helper-mcp' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sn-api-helper-mcp", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:10Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.6, "trust_score_v2": 35.6, "rank_v2": 1272, "rank_v2_delta": 352, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.9, "identity": 10.8, "transparency": 11.7, "maintenance": 0.0, "adoption": 4.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Director", "repo": "video-db/Director", "display_repo": "", "url": "https://github.com/video-db/Director", "listing_class": "agent", "rank": 1273, "previous_rank": 1270, "rank_delta": -3, "stars": 1552, "stars_fmt": "1.6k", "forks": 254, "forks_fmt": "254", "last_push": "2026-01-23", "days_ago": 262, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.3, "description": "AI video agents framework for next-gen video interactions and workflows.", "language": "Python", "open_issues": 8, "category": "Agent Frameworks", "category_rank": 113, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.45, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-29T21:32:30Z", "slug": "director", "full_fetched_at": "2026-10-12T00:02:36Z", "source_note": "", "github_homepage": "https://chat.videodb.io", "homepage_icon": "/site-icons/9c086691ad377da4.png", "homepage_icon_for": "https://chat.videodb.io", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "ElevenLabs", "OpenAI", "Replicate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in backend/pyproject.toml", "Found Anthropic dependency 'anthropic' in backend/requirements.txt", "Found Replicate dependency 'replicate' in backend/requirements.txt", "Found ElevenLabs dependency 'elevenlabs' in backend/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.4, "trust_score_v2": 35.4, "rank_v2": 1273, "rank_v2_delta": 292, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.8, "identity": 10.8, "transparency": 11.6, "maintenance": 0.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent MCP Gateway", "repo": "roddutra/agent-mcp-gateway", "display_repo": "", "url": "https://github.com/roddutra/agent-mcp-gateway", "listing_class": "agent", "rank": 1274, "previous_rank": 1277, "rank_delta": 3, "stars": 41, "stars_fmt": "41", "forks": 5, "forks_fmt": "5", "last_push": "2025-12-02", "days_ago": 314, "weekly_commits": 0, "commits_low_confidence": false, "score": 13.3, "description": "Provides per-subagent MCP access controls to Claude Code (or any MCP client) across all your MCPs and prevents context window bloat. Loads only 3 tools instead of all your MCP Server's tool definitions. Agents discover tools on-demand, only when needed. Control which servers and individual tools…", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 744, "npm_package": "", "crate_package": "", "pypi_package": "agent-mcp-gateway", "docker_image": "", "vscode_extension": "", "weekly_downloads": 48, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.0, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:40:47Z", "slug": "agent-mcp-gateway", "full_fetched_at": "2026-10-12T00:01:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server docs path: docs/fastmcp-implementation-guide.md", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Postgres credential/config marker 'DATABASE_URL'", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'agent-mcp-gateway' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "agent-mcp-gateway", "version": "0.2.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:01:57Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.3, "trust_score_v2": 35.3, "rank_v2": 1274, "rank_v2_delta": 403, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.9, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Magentic", "repo": "jackmpcollins/magentic", "display_repo": "", "url": "https://github.com/jackmpcollins/magentic", "listing_class": "agent", "rank": 1275, "previous_rank": 1271, "rank_delta": -4, "stars": 2427, "stars_fmt": "2.4k", "forks": 129, "forks_fmt": "129", "last_push": "2026-03-11", "days_ago": 215, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.1, "description": "Seamlessly integrate LLMs as Python functions", "language": "Python", "open_issues": 41, "category": "Agent Frameworks", "category_rank": 114, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.76, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T21:36:45Z", "slug": "magentic", "full_fetched_at": "2026-10-12T04:02:46Z", "source_note": "", "github_homepage": "https://magentic.dev/", "homepage_icon": "/site-icons/da360cc9507cb52f.png", "homepage_icon_for": "https://magentic.dev/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.2, "trust_score_v2": 35.2, "rank_v2": 1275, "rank_v2_delta": 239, "trust_v2_adjustment": -4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.6, "identity": 10.8, "transparency": 11.7, "maintenance": 0.0, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Skills Server", "repo": "srprasanna/mcp-skill-hub", "display_repo": "", "url": "https://github.com/srprasanna/mcp-skill-hub", "listing_class": "agent", "rank": 1276, "previous_rank": 1272, "rank_delta": -4, "stars": 13, "stars_fmt": "13", "forks": 3, "forks_fmt": "3", "last_push": "2025-10-29", "days_ago": 348, "weekly_commits": 0, "commits_low_confidence": false, "score": 9.7, "description": "", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 745, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "docker.io/srprasanna/mcp-skill-hub:1.0.0", "vscode_extension": "", "weekly_downloads": 2408, "dl_source": "docker", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.178, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T13:17:21Z", "slug": "mcp-skills-server", "full_fetched_at": "2026-10-12T00:02:15Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.2, "trust_score_v2": 35.2, "rank_v2": 1276, "rank_v2_delta": 357, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 10.8, "maintenance": 0.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Pcb MCP", "repo": "bunnyf/pcb-mcp", "display_repo": "", "url": "https://github.com/bunnyf/pcb-mcp", "listing_class": "agent", "rank": 1277, "previous_rank": 1273, "rank_delta": -4, "stars": 10, "stars_fmt": "10", "forks": 1, "forks_fmt": "1", "last_push": "2026-01-17", "days_ago": 268, "weekly_commits": 0, "commits_low_confidence": false, "score": 7.6, "description": "A PCB mcp server and client for AI Tools. ", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 746, "npm_package": "", "crate_package": "", "pypi_package": "kicad-mcp-server", "docker_image": "", "vscode_extension": "", "weekly_downloads": 47, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.059, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 8, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T10:14:38Z", "slug": "pcb-mcp", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: dist/kicad_mcp_server-3.5.0-py3-none-any.whl", "Found MCP-related server path: dist/kicad_mcp_server-3.5.0.tar.gz" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'kicad-mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "kicad-mcp-server", "version": "3.5.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:47Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.2, "trust_score_v2": 35.2, "rank_v2": 1277, "rank_v2_delta": 409, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Language Server", "repo": "isaacphi/mcp-language-server", "display_repo": "", "url": "https://github.com/isaacphi/mcp-language-server", "listing_class": "agent", "rank": 1278, "previous_rank": 1274, "rank_delta": -4, "stars": 1608, "stars_fmt": "1.6k", "forks": 149, "forks_fmt": "149", "last_push": "2026-03-01", "days_ago": 225, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.3, "description": "mcp-language-server gives MCP enabled clients access semantic tools like get definition, references, rename, and diagnostics.", "language": "Go", "open_issues": 35, "category": "MCP Servers", "category_rank": 747, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.15, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 5 }, "scorecard_scanned_at": "2026-10-11T10:52:32Z", "slug": "mcp-language-server", "full_fetched_at": "2026-10-12T16:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "BSD-3-Clause", "license_type": "open", "license_override": "", "trust_score": 35.1, "trust_score_v2": 35.1, "rank_v2": 1278, "rank_v2_delta": 321, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 11.5, "maintenance": 0.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DevDocs", "repo": "cyberagiinc/DevDocs", "display_repo": "", "url": "https://github.com/cyberagiinc/DevDocs", "listing_class": "agent", "rank": 1279, "previous_rank": 1275, "rank_delta": -4, "stars": 2107, "stars_fmt": "2.1k", "forks": 197, "forks_fmt": "197", "last_push": "2026-02-04", "days_ago": 250, "weekly_commits": 0, "commits_low_confidence": false, "score": 30.6, "description": "Completely free, private, UI based Tech Documentation MCP server. Designed for coders and software developers in mind. Easily integrate into Cursor, Windsurf, Cline, Roo Code, Claude Desktop App ", "language": "TypeScript", "open_issues": 10, "category": "MCP Servers", "category_rank": 748, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.528, "scorecard_score": 2.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:23:46Z", "slug": "devdocs", "full_fetched_at": "2026-10-12T12:02:58Z", "source_note": "", "github_homepage": "https://www.cyberagi.ai", "homepage_icon": "/site-icons/62a50cc4e172d1a4.png", "homepage_icon_for": "https://www.cyberagi.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .roo/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CRAWL4AI_API_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 35.1, "trust_score_v2": 35.1, "rank_v2": 1279, "rank_v2_delta": 335, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.1, "identity": 10.8, "transparency": 10.2, "maintenance": 0.0, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "open-claude-tag", "repo": "Anil-matcha/open-claude-tag", "display_repo": "", "url": "https://github.com/Anil-matcha/open-claude-tag", "listing_class": "agent", "rank": 1280, "previous_rank": 1276, "rank_delta": -4, "stars": 17, "stars_fmt": "17", "forks": 1, "forks_fmt": "1", "last_push": "2026-08-17", "days_ago": 56, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.1, "description": "Self-hostable channel-native AI teammate for Slack. Open source alternative to Claude Tag. LLM-agnostic.", "language": "Python", "open_issues": 0, "category": "Voice & Conversational", "category_rank": 13, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T08:31:03Z", "slug": "open-claude-tag", "full_fetched_at": "2026-10-12T08:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.0, "trust_score_v2": 35.0, "rank_v2": 1280, "rank_v2_delta": 305, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.7, "maintenance": 8.3, "adoption": 3.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Drawthings", "repo": "james-see/mcp-drawthings", "display_repo": "", "url": "https://github.com/james-see/mcp-drawthings", "listing_class": "agent", "rank": 1281, "previous_rank": 1283, "rank_delta": 2, "stars": 28, "stars_fmt": "28", "forks": 4, "forks_fmt": "4", "last_push": "2026-01-01", "days_ago": 284, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.1, "description": "MCP server for Draw Things - local AI image generation on Mac", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 749, "npm_package": "mcp-drawthings", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 126, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:14:06Z", "slug": "mcp-drawthings", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: node_modules/@modelcontextprotocol/sdk/dist/cjs/experimental/tasks/mcp-server.d.ts", "Found MCP-related server path: node_modules/@modelcontextprotocol/sdk/dist/cjs/experimental/tasks/mcp-server.d.ts.map", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-drawthings' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-drawthings", "version": "1.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:32Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 35.0, "trust_score_v2": 35.0, "rank_v2": 1281, "rank_v2_delta": 407, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.0, "identity": 10.8, "transparency": 9.9, "maintenance": 0.0, "adoption": 6.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Bolt", "repo": "stackblitz/bolt.new", "display_repo": "", "url": "https://github.com/stackblitz/bolt.new", "listing_class": "agent", "rank": 1282, "previous_rank": 1278, "rank_delta": -4, "stars": 16575, "stars_fmt": "16.6k", "forks": 14834, "forks_fmt": "14.8k", "last_push": "2024-12-17", "days_ago": 664, "weekly_commits": 0, "commits_low_confidence": false, "score": 44.7, "description": "Prompt, run, edit, and deploy full-stack web applications. -- bolt.new -- Help Center: https://support.bolt.new/ -- Community Support: https://discord.com/invite/stackblitz", "language": "TypeScript", "open_issues": 0, "category": "UI & App Builders", "category_rank": 17, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 4423, "dl_source": "npm", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.65, "scorecard_score": 3.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 8, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:36:03Z", "slug": "bolt", "full_fetched_at": "2026-10-12T08:02:27Z", "source_note": "", "github_homepage": "https://bolt.new", "homepage_icon": "/site-icons/894c0685a24343cb.png", "homepage_icon_for": "https://bolt.new", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "stackblitz/bolt.new", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2024-12-17)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.9, "trust_score_v2": 34.9, "rank_v2": 1282, "rank_v2_delta": 320, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.6, "identity": 10.8, "transparency": 11.5, "maintenance": 0.0, "adoption": 15.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Open Deep Research (dzhng)", "repo": "dzhng/deep-research", "display_repo": "", "url": "https://github.com/dzhng/deep-research", "listing_class": "agent", "rank": 1283, "previous_rank": 1280, "rank_delta": -3, "stars": 19779, "stars_fmt": "19.8k", "forks": 2002, "forks_fmt": "2.0k", "last_push": "2026-04-11", "days_ago": 184, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.2, "description": "An AI-powered research assistant that performs iterative, deep research on any topic by combining search engines, web scraping, and large language models. The goal of this repo is to provide the simplest implementation of a deep research agent - e.g. an agent that can refine its research…", "language": "TypeScript", "open_issues": 73, "category": "Research & Data", "category_rank": 29, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.403, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:45:58Z", "slug": "open-deep-research-dzhng", "full_fetched_at": "2026-10-12T04:02:25Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Firecrawl", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Firecrawl dependency 'firecrawl' in package.json", "README/docs also mention Firecrawl" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.9, "trust_score_v2": 34.9, "rank_v2": 1283, "rank_v2_delta": 311, "trust_v2_adjustment": -0.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ClawWork", "repo": "HKUDS/ClawWork", "display_repo": "", "url": "https://github.com/HKUDS/ClawWork", "listing_class": "agent", "rank": 1284, "previous_rank": 1281, "rank_delta": -3, "stars": 8554, "stars_fmt": "8.6k", "forks": 1092, "forks_fmt": "1.1k", "last_push": "2026-03-03", "days_ago": 223, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.7, "description": "\"ClawWork: OpenClaw as Your AI Coworker - 💰 $15K earned in 11 Hours\"", "language": "Python", "open_issues": 16, "category": "Needs review", "category_rank": 10, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.297, "scorecard_score": 3.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T22:55:01Z", "slug": "clawwork", "full_fetched_at": "2026-10-12T04:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'fastmcp' in requirements.txt", "Found MCP dependency 'fastmcp' in livebench/requirements.txt" ] }, "external_service_dependencies": { "providers": [ "E2B", "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Tavily dependency 'tavily' in requirements.txt", "README/docs also mention Tavily", "Found E2B dependency 'e2b' in requirements.txt", "Found E2B credential/config marker 'E2B_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found search dependency 'tavily' in requirements.txt", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.8, "trust_score_v2": 34.8, "rank_v2": 1284, "rank_v2_delta": 276, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 11.3, "maintenance": 0.0, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Understudy", "repo": "understudy-ai/understudy", "display_repo": "", "url": "https://github.com/understudy-ai/understudy", "listing_class": "agent", "rank": 1285, "previous_rank": 1279, "rank_delta": -6, "stars": 462, "stars_fmt": "462", "forks": 36, "forks_fmt": "36", "last_push": "2026-06-19", "days_ago": 115, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.5, "description": "An understudy watches. Then performs.", "language": "TypeScript", "open_issues": 2, "category": "Browser & Computer Use", "category_rank": 38, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.191, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 4, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:14:44Z", "slug": "understudy", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "https://understudy-ai.github.io/understudy/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: packages/plugins/README.md", "README/docs also mention a extension-based plugin/integration surface", "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.8, "trust_score_v2": 34.8, "rank_v2": 1285, "rank_v2_delta": 269, "trust_v2_adjustment": -2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.1, "maintenance": 4.3, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Iothackbot", "repo": "BrownFineSecurity/iothackbot", "display_repo": "", "url": "https://github.com/BrownFineSecurity/iothackbot", "listing_class": "skill", "rank": 351, "previous_rank": 349, "rank_delta": -2, "stars": 858, "stars_fmt": "858", "forks": 134, "forks_fmt": "134", "last_push": "2026-06-01", "days_ago": 133, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.0, "description": "IoT HackBot: A collection of Claude Skills and custom tooling for hybrid IoT pentesting", "language": "Python", "open_issues": 3, "category": "Agent Skills", "category_rank": 351, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.059, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-09-30T22:50:26Z", "slug": "iothackbot", "full_fetched_at": "2026-10-12T12:02:44Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.8, "trust_score_v2": 34.8, "rank_v2": 351, "rank_v2_delta": 1247, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.7, "maintenance": 3.1, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Obsidian Vault MCP Server", "repo": "OleksandrKucherenko/mcp-obsidian-via-rest", "display_repo": "", "url": "https://github.com/OleksandrKucherenko/mcp-obsidian-via-rest", "listing_class": "agent", "rank": 1286, "previous_rank": 1282, "rank_delta": -4, "stars": 13, "stars_fmt": "13", "forks": 1, "forks_fmt": "1", "last_push": "2026-04-05", "days_ago": 190, "weekly_commits": 0, "commits_low_confidence": false, "score": 8.3, "description": "MCP Server connected to Obsidian Vault with Local REST API. (re-write it completely with BUN to make it faster and more lightweight)", "language": "TypeScript", "open_issues": 5, "category": "MCP Servers", "category_rank": 750, "npm_package": "@oleksandrkucherenko/mcp-obsidian", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/oleksandrkucherenko/obsidian-mcp:1.3.3", "vscode_extension": "", "weekly_downloads": 183, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:00:36Z", "slug": "obsidian-vault-mcp-server", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "http://mcp-obsidian.artfulbits.se/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/server/mcp-server.ts", "Found MCP-related server test path: tests/server/mcp-server.test.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'OBSIDIAN_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: dockerize/obsidian/data/vault-tests/.obsidian/plugins/obsidian-local-rest-api/README.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@oleksandrkucherenko/mcp-obsidian' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@oleksandrkucherenko/mcp-obsidian", "version": "1.3.4" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:08Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.8, "trust_score_v2": 34.8, "rank_v2": 1286, "rank_v2_delta": 393, "trust_v2_adjustment": 4.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.4, "identity": 10.8, "transparency": 10.1, "maintenance": 0.0, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Agent-E", "repo": "EmergenceAI/agent-e", "display_repo": "", "url": "https://github.com/EmergenceAI/Agent-E", "listing_class": "agent", "rank": 1287, "previous_rank": 1284, "rank_delta": -3, "stars": 1252, "stars_fmt": "1.3k", "forks": 192, "forks_fmt": "192", "last_push": "2026-05-04", "days_ago": 161, "weekly_commits": 0, "commits_low_confidence": false, "score": 31.8, "description": "Agent driven automation starting with the web. Try it: https://www.emergence.ai/web-automation-api", "language": "Python", "open_issues": 17, "category": "Browser & Computer Use", "category_rank": 39, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 7, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T18:07:21Z", "slug": "agent-e", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Groq", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Google Gemini dependency 'google-generativeai' in pyproject.toml", "Found Groq dependency 'groq' in pyproject.toml", "README/docs also mention Groq" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in pyproject.toml", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.6, "trust_score_v2": 34.6, "rank_v2": 1287, "rank_v2_delta": 268, "trust_v2_adjustment": -2.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.3, "identity": 10.8, "transparency": 11.6, "maintenance": 1.3, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Antrieb MCP Server", "repo": "jade-pico/antrieb-mcp-server", "display_repo": "", "url": "https://github.com/jade-pico/antrieb-mcp-server", "listing_class": "agent", "rank": 1288, "previous_rank": 1285, "rank_delta": -3, "stars": 14, "stars_fmt": "14", "forks": 2, "forks_fmt": "2", "last_push": "2026-05-01", "days_ago": 164, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.5, "description": "Real VMs for your LLM. Provision, execute, validate. In seconds. LLM4Ops.", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 751, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T22:49:38Z", "slug": "antrieb-mcp-server", "full_fetched_at": "2026-10-11T20:01:52Z", "source_note": "", "github_homepage": "https://antrieb.sh", "homepage_icon": "/site-icons/964491b6c9e60eef.png", "homepage_icon_for": "https://antrieb.sh", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ANTRIEB_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 34.6, "trust_score_v2": 34.6, "rank_v2": 1288, "rank_v2_delta": 335, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.2, "identity": 10.8, "transparency": 10.7, "maintenance": 1.1, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Jotform MCP Server", "repo": "jotform/mcp-server", "display_repo": "", "url": "https://github.com/jotform/mcp-server", "listing_class": "agent", "rank": 1289, "previous_rank": 1286, "rank_delta": -3, "stars": 27, "stars_fmt": "27", "forks": 4, "forks_fmt": "4", "last_push": "2026-02-26", "days_ago": 228, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.0, "description": "", "language": "", "open_issues": 0, "category": "MCP Servers", "category_rank": 752, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.667, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 5, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T19:29:38Z", "slug": "jotform-mcp-server", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.5, "trust_score_v2": 34.5, "rank_v2": 1289, "rank_v2_delta": 353, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.1, "identity": 10.8, "transparency": 11.1, "maintenance": 0.0, "adoption": 3.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Yuvalsuede Memory MCP", "repo": "yuvalsuede/memory-mcp", "display_repo": "", "url": "https://github.com/yuvalsuede/memory-mcp", "listing_class": "agent", "rank": 1290, "previous_rank": 1287, "rank_delta": -3, "stars": 99, "stars_fmt": "99", "forks": 11, "forks_fmt": "11", "last_push": "2026-01-29", "days_ago": 256, "weekly_commits": 0, "commits_low_confidence": false, "score": 17.0, "description": "Persistent memory for Claude Code — never lose context between sessions", "language": "JavaScript", "open_issues": 2, "category": "MCP Servers", "category_rank": 753, "npm_package": "claude-code-memory", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 75, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:01:10Z", "slug": "yuvalsuede-memory-mcp", "full_fetched_at": "2026-10-12T04:02:15Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'claude-code-memory' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "claude-code-memory", "version": "1.2.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:15Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.5, "trust_score_v2": 34.5, "rank_v2": 1290, "rank_v2_delta": 394, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.7, "identity": 10.8, "transparency": 9.7, "maintenance": 0.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Interactive Terminal", "repo": "amol21p/mcp-interactive-terminal", "display_repo": "", "url": "https://github.com/amol21p/mcp-interactive-terminal", "listing_class": "agent", "rank": 1291, "previous_rank": 1288, "rank_delta": -3, "stars": 19, "stars_fmt": "19", "forks": 6, "forks_fmt": "6", "last_push": "2026-02-16", "days_ago": 238, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.7, "description": "MCP server that gives AI agents (Claude Code, Cursor, Windsurf) real interactive terminal sessions — REPLs, SSH, databases, Docker, and any interactive CLI with clean output and smart completion detection", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 754, "npm_package": "mcp-interactive-terminal", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 75, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T04:06:54Z", "slug": "mcp-interactive-terminal", "full_fetched_at": "2026-10-12T08:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-interactive-terminal' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-interactive-terminal", "version": "1.0.9" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:42Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.3, "trust_score_v2": 34.3, "rank_v2": 1291, "rank_v2_delta": 403, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.0, "identity": 10.8, "transparency": 9.9, "maintenance": 0.0, "adoption": 5.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Claude Brain", "repo": "memvid/claude-brain", "display_repo": "", "url": "https://github.com/memvid/claude-brain", "listing_class": "skill", "rank": 352, "previous_rank": 350, "rank_delta": -2, "stars": 579, "stars_fmt": "579", "forks": 59, "forks_fmt": "59", "last_push": "2026-01-19", "days_ago": 266, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.9, "description": "Give Claude Code photographic memory in ONE portable file. No database, no SQLite, no ChromaDB - just a single .mv2 file you can git commit, scp, or share. Native Rust core with sub-ms operations.", "language": "TypeScript", "open_issues": 6, "category": "Agent Skills", "category_rank": 352, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 23, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.114, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 6, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T01:40:02Z", "slug": "claude-brain", "full_fetched_at": "2026-10-11T20:01:58Z", "source_note": "", "github_homepage": "https://memvid.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships Claude Code wiring ('.claude-plugin') in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.2, "trust_score_v2": 34.2, "rank_v2": 352, "rank_v2_delta": 1256, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 11.0, "maintenance": 0.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tongyi DeepResearch", "repo": "Alibaba-NLP/DeepResearch", "display_repo": "", "url": "https://github.com/Alibaba-NLP/DeepResearch", "listing_class": "agent", "rank": 1292, "previous_rank": 1289, "rank_delta": -3, "stars": 20035, "stars_fmt": "20.0k", "forks": 1534, "forks_fmt": "1.5k", "last_push": "2026-02-27", "days_ago": 227, "weekly_commits": 0, "commits_low_confidence": false, "score": 40.6, "description": "Tongyi Deep Research, the Leading Open-source Deep Research Agent", "language": "Python", "open_issues": 81, "category": "Research & Data", "category_rank": 30, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.59, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:16:19Z", "slug": "tongyi-deepresearch", "full_fetched_at": "2026-10-12T04:02:08Z", "source_note": "", "github_homepage": "https://tongyi-agent.github.io/blog/introducing-tongyi-deep-research/", "homepage_icon": "/site-icons/c4474dce9feaea90.png", "homepage_icon_for": "https://tongyi-agent.github.io/blog/introducing-tongyi-deep-research/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in requirements.txt", "Found credential/config marker 'DASHSCOPE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 34.2, "trust_score_v2": 34.2, "rank_v2": 1292, "rank_v2_delta": 296, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 9.8, "maintenance": 0.0, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "KonQuest Meta Ads MCP", "repo": "brandu-mos/konquest-meta-ads-mcp", "display_repo": "", "url": "https://github.com/brandu-mos/konquest-meta-ads-mcp", "listing_class": "agent", "rank": 1293, "previous_rank": 1290, "rank_delta": -3, "stars": 44, "stars_fmt": "44", "forks": 12, "forks_fmt": "12", "last_push": "2026-04-23", "days_ago": 172, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.2, "description": "57-tool supervised Meta Ads MCP server for Claude Code. Open-core: full CRUD, multi-asset ads, targeting, diagnostics, safety gates. Premium adds 41 tools: optimization engine, vault intelligence, copy generation.", "language": "Python", "open_issues": 1, "category": "MCP Servers", "category_rank": 755, "npm_package": "", "crate_package": "", "pypi_package": "konquest-meta-ads-mcp", "docker_image": "", "vscode_extension": "", "weekly_downloads": 22, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.095, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:55:01Z", "slug": "konquest-meta-ads-mcp", "full_fetched_at": "2026-10-12T12:02:47Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'META_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'konquest-meta-ads-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "konquest-meta-ads-mcp", "version": "2.0.0" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:47Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 34.0, "trust_score_v2": 34.0, "rank_v2": 1293, "rank_v2_delta": 394, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.2, "identity": 10.8, "transparency": 9.7, "maintenance": 0.5, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "A2asearch MCP", "repo": "tadas-github/a2asearch-mcp", "display_repo": "", "url": "https://github.com/tadas-github/a2asearch-mcp", "listing_class": "agent", "rank": 1294, "previous_rank": 1291, "rank_delta": -3, "stars": 21, "stars_fmt": "21", "forks": 0, "forks_fmt": "0", "last_push": "2026-03-30", "days_ago": 196, "weekly_commits": 0, "commits_low_confidence": false, "score": 8.1, "description": "MCP server for searching AI agents, MCP servers, CLI tools and agent skills via A2ASearch", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 756, "npm_package": "a2asearch-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 68, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:37:19Z", "slug": "a2asearch-mcp", "full_fetched_at": "2026-10-12T00:02:20Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'a2asearch-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "a2asearch-mcp", "version": "1.1.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:20Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.9, "trust_score_v2": 33.9, "rank_v2": 1294, "rank_v2_delta": 402, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.7, "identity": 10.8, "transparency": 9.7, "maintenance": 0.0, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "RoboOS", "repo": "FlagOpen/RoboOS", "display_repo": "", "url": "https://github.com/FlagOpen/RoboOS", "listing_class": "agent", "rank": 1295, "previous_rank": 1292, "rank_delta": -3, "stars": 628, "stars_fmt": "628", "forks": 92, "forks_fmt": "92", "last_push": "2025-12-18", "days_ago": 298, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.0, "description": "🤖 RoboOS: A Universal Embodied Operating System for Cross-Embodied and Multi-Robot Collaboration", "language": "Python", "open_issues": 11, "category": "Robotics & Embodied", "category_rank": 3, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:13:18Z", "slug": "roboos", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found Redis dependency 'redis' in requirements.txt", "README/docs also mention Redis" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in requirements.txt", "README/docs also mention database capabilities", "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 33.7, "trust_score_v2": 33.7, "rank_v2": 1295, "rank_v2_delta": 309, "trust_v2_adjustment": -1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 7.3, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Chrome MCP Server", "repo": "hangwin/mcp-chrome", "display_repo": "", "url": "https://github.com/hangwin/mcp-chrome", "listing_class": "agent", "rank": 1296, "previous_rank": 1293, "rank_delta": -3, "stars": 12486, "stars_fmt": "12.5k", "forks": 1146, "forks_fmt": "1.1k", "last_push": "2026-01-06", "days_ago": 279, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.8, "description": "Chrome MCP Server is a Chrome extension-based Model Context Protocol (MCP) server that exposes your Chrome browser functionality to AI assistants like Claude, enabling complex browser automation, content analysis, and semantic search.", "language": "TypeScript", "open_issues": 201, "category": "MCP Servers", "category_rank": 757, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 1.3, "scorecard_checks": { "Binary-Artifacts": 7, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:43:15Z", "slug": "chrome-mcp-server", "full_fetched_at": "2026-10-12T16:02:15Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: app/native-server/src/mcp/mcp-server-stdio.ts", "Found MCP-related server path: app/native-server/src/mcp/mcp-server.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/shared/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in app/native-server/package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: app/chrome-extension/entrypoints/background/record-replay-v3/engine/plugins/index.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.7, "trust_score_v2": 33.7, "rank_v2": 1296, "rank_v2_delta": 355, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.8, "identity": 10.8, "transparency": 9.6, "maintenance": 0.0, "adoption": 9.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "HAL", "repo": "DeanWard/HAL", "display_repo": "", "url": "https://github.com/DeanWard/HAL", "listing_class": "agent", "rank": 1297, "previous_rank": 1294, "rank_delta": -3, "stars": 38, "stars_fmt": "38", "forks": 7, "forks_fmt": "7", "last_push": "2025-10-22", "days_ago": 355, "weekly_commits": 0, "commits_low_confidence": false, "score": 13.7, "description": "HAL (HTTP API Layer) is a Model Context Protocol (MCP) server that provides HTTP API capabilities to Large Language Models.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 758, "npm_package": "hal-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 56, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.091, "scorecard_score": 2.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:30:51Z", "slug": "hal", "full_fetched_at": "2026-10-12T12:03:02Z", "source_note": "", "github_homepage": "https://deanward.github.io/HAL/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "README/docs mention MCP support", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'HAL_SECRET_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'hal-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "hal-mcp", "version": "1.0.14" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:02Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.6, "trust_score_v2": 33.6, "rank_v2": 1297, "rank_v2_delta": 376, "trust_v2_adjustment": 3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.4, "maintenance": 0.0, "adoption": 6.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Explorium", "repo": "explorium-ai/mcp-explorium", "display_repo": "", "url": "https://github.com/explorium-ai/mcp-explorium", "listing_class": "agent", "rank": 1298, "previous_rank": 1295, "rank_delta": -3, "stars": 21, "stars_fmt": "21", "forks": 4, "forks_fmt": "4", "last_push": "2026-03-03", "days_ago": 223, "weekly_commits": 0, "commits_low_confidence": false, "score": 11.4, "description": "Explorium B2B Data - MCP Server", "language": "Dockerfile", "open_issues": 2, "category": "MCP Servers", "category_rank": 759, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.319, "scorecard_score": 4.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 4, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-22T22:45:26Z", "slug": "mcp-explorium", "full_fetched_at": "2026-10-12T16:01:54Z", "source_note": "", "github_homepage": "https://www.explorium.ai", "homepage_icon": "/site-icons/26c798e40660527f.png", "homepage_icon_for": "https://www.explorium.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'API_ACCESS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.5, "trust_score_v2": 33.5, "rank_v2": 1298, "rank_v2_delta": 345, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 11.9, "maintenance": 0.0, "adoption": 3.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "STORM", "repo": "stanford-oval/storm", "display_repo": "", "url": "https://github.com/stanford-oval/storm", "listing_class": "agent", "rank": 1299, "previous_rank": 1298, "rank_delta": -1, "stars": 31614, "stars_fmt": "31.6k", "forks": 2981, "forks_fmt": "3.0k", "last_push": "2025-09-30", "days_ago": 377, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.2, "description": "An LLM-powered knowledge curation system that researches a topic and generates a full-length report with citations.", "language": "Python", "open_issues": 61, "category": "Research & Data", "category_rank": 31, "npm_package": "", "crate_package": "", "pypi_package": "knowledge-storm", "docker_image": "", "vscode_extension": "", "weekly_downloads": 292, "dl_source": "pypi", "hn_mentions_30d": 4, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.33, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 7 }, "scorecard_scanned_at": "2026-10-10T08:13:44Z", "slug": "storm", "full_fetched_at": "2026-10-12T08:02:29Z", "source_note": "", "github_homepage": "http://storm.genie.stanford.edu", "homepage_icon": "/site-icons/1134310c07ed84b2.png", "homepage_icon_for": "http://storm.genie.stanford.edu", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI", "Qdrant" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in requirements.txt", "README/docs also mention Multi-provider (LiteLLM)", "Found Qdrant dependency 'qdrant' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'qdrant' in requirements.txt" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'knowledge-storm' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "knowledge-storm", "version": "1.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:29Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "stanford-oval/storm", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-30)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.5, "trust_score_v2": 33.5, "rank_v2": 1299, "rank_v2_delta": 354, "trust_v2_adjustment": 1.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.7, "identity": 10.8, "transparency": 11.2, "maintenance": 0.0, "adoption": 14.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Zeroboot", "repo": "zerobootdev/zeroboot", "display_repo": "", "url": "https://github.com/zerobootdev/zeroboot", "listing_class": "agent", "rank": 1300, "previous_rank": 1296, "rank_delta": -4, "stars": 2459, "stars_fmt": "2.5k", "forks": 110, "forks_fmt": "110", "last_push": "2026-03-21", "days_ago": 205, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.8, "description": "Sub-millisecond VM sandboxes for AI agents via copy-on-write forking", "language": "Rust", "open_issues": 6, "category": "Sandboxes & Runtimes", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.042, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T10:36:05Z", "slug": "zeroboot", "full_fetched_at": "2026-10-12T12:02:24Z", "source_note": "", "github_homepage": "https://zeroboot.dev", "homepage_icon": "/site-icons/9754e0750d884518.png", "homepage_icon_for": "https://zeroboot.dev", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 33.5, "trust_score_v2": 33.5, "rank_v2": 1300, "rank_v2_delta": 325, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.7, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Debug Agent", "repo": "millionco/debug-agent", "display_repo": "", "url": "https://github.com/millionco/debug-agent", "listing_class": "skill", "rank": 353, "previous_rank": 351, "rank_delta": -2, "stars": 352, "stars_fmt": "352", "forks": 23, "forks_fmt": "23", "last_push": "2026-05-25", "days_ago": 140, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.3, "description": "Debugging skill for AI agents", "language": "TypeScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 353, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.034, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T08:27:38Z", "slug": "debug-agent", "full_fetched_at": "2026-10-11T20:02:00Z", "source_note": "", "github_homepage": "https://debug-agent.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.5, "trust_score_v2": 33.5, "rank_v2": 353, "rank_v2_delta": 1274, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.3, "identity": 10.8, "transparency": 10.6, "maintenance": 2.7, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "IBKR Portfolio Builder", "repo": "adwiteeymauriya/ibkr-portfolio-builder-mcp", "display_repo": "", "url": "https://github.com/adwiteeymauriya/ibkr-portfolio-builder-mcp", "listing_class": "agent", "rank": 1301, "previous_rank": 1297, "rank_delta": -4, "stars": 19, "stars_fmt": "19", "forks": 3, "forks_fmt": "3", "last_push": "2026-06-08", "days_ago": 126, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.1, "description": "Remote MCP server for top-down portfolio construction with Interactive Brokers typed catalog of 468 IBKR screeners tagged by strategy intent (value/growth/income/momentum/quality), news, live account access. OAuth + static bearer auth. Works with Claude.ai custom connectors, Claude Code, and any…", "language": "Python", "open_issues": 2, "category": "MCP Servers", "category_rank": 760, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.385, "scorecard_score": 2.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 0, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-07T09:42:10Z", "slug": "ibkr-portfolio-builder", "full_fetched_at": "2026-10-12T08:02:24Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'STATIC_BEARER_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.4, "trust_score_v2": 33.4, "rank_v2": 1301, "rank_v2_delta": 343, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 10.3, "maintenance": 3.6, "adoption": 3.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Bundles Forge", "repo": "OdradekAI/bundles-forge", "display_repo": "", "url": "https://github.com/OdradekAI/bundles-forge", "listing_class": "skill", "rank": 354, "previous_rank": 352, "rank_delta": -2, "stars": 229, "stars_fmt": "229", "forks": 14, "forks_fmt": "14", "last_push": "2026-04-27", "days_ago": 168, "weekly_commits": 0, "commits_low_confidence": false, "score": 21.4, "description": "An agentic skills framework & bundle-plugin engineering toolkit that works.", "language": "Python", "open_issues": 0, "category": "Agent Skills", "category_rank": 354, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-11T16:32:05Z", "slug": "bundles-forge", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 33.2, "trust_score_v2": 33.2, "rank_v2": 354, "rank_v2_delta": 1261, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.9, "identity": 10.8, "transparency": 11.8, "maintenance": 0.8, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Founder Skills", "repo": "ognjengt/founder-skills", "display_repo": "", "url": "https://github.com/ognjengt/founder-skills", "listing_class": "skill", "rank": 355, "previous_rank": 353, "rank_delta": -2, "stars": 469, "stars_fmt": "469", "forks": 57, "forks_fmt": "57", "last_push": "2026-05-18", "days_ago": 147, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.9, "description": "Claude skills for founders", "language": "JavaScript", "open_issues": 2, "category": "Agent Skills", "category_rank": 355, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 0, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.022, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:23:36Z", "slug": "founder-skills", "full_fetched_at": "2026-10-11T20:02:04Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/marketplace.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.2, "trust_score_v2": 33.2, "rank_v2": 355, "rank_v2_delta": 1271, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.4, "identity": 10.8, "transparency": 10.7, "maintenance": 2.2, "adoption": 6.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DevSpace", "repo": "Waishnav/devspace", "display_repo": "", "url": "https://github.com/Waishnav/devspace", "listing_class": "agent", "rank": 1302, "previous_rank": 1301, "rank_delta": -1, "stars": 5233, "stars_fmt": "5.2k", "forks": 593, "forks_fmt": "593", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 7, "commits_low_confidence": true, "score": 71.5, "description": "Minimal Coding Agent Harness on MCP for ChatGPT, Claude, Hermes, Grok Bot, OpenClaw", "language": "TypeScript", "open_issues": 28, "category": "MCP Servers", "category_rank": 761, "npm_package": "@waishnav/devspace", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 541, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.22, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "devspace", "full_fetched_at": "2026-10-12T16:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package '@waishnav/devspace' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@waishnav/devspace", "version": "1.0.8" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:11Z" }, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.2, "trust_score_v2": 33.2, "rank_v2": 1302, "rank_v2_delta": 360, "trust_v2_adjustment": 2.0, "trust_confidence": 0.67, "trust_breakdown": { "safety": 1.1, "identity": 10.8, "transparency": 8.5, "maintenance": 13.8, "adoption": 12.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenCUA", "repo": "xlang-ai/OpenCUA", "display_repo": "", "url": "https://github.com/xlang-ai/OpenCUA", "listing_class": "agent", "rank": 1303, "previous_rank": 1300, "rank_delta": -3, "stars": 852, "stars_fmt": "852", "forks": 110, "forks_fmt": "110", "last_push": "2026-05-25", "days_ago": 140, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.7, "description": "[NeurIPS 2025 Spotlight] OpenCUA: Open Foundations for Computer-Use Agents", "language": "Python", "open_issues": 15, "category": "Browser & Computer Use", "category_rank": 40, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 322, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.267, "scorecard_score": 1.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:58:19Z", "slug": "opencua", "full_fetched_at": "2026-10-12T12:02:22Z", "source_note": "", "github_homepage": "https://opencua.xlang.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.1, "trust_score_v2": 33.1, "rank_v2": 1303, "rank_v2_delta": 331, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.0, "identity": 10.8, "transparency": 9.6, "maintenance": 2.7, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Continue", "repo": "continuedev/continue", "display_repo": "", "url": "https://github.com/continuedev/continue", "listing_class": "agent", "rank": 1304, "previous_rank": 1299, "rank_delta": -5, "stars": 36195, "stars_fmt": "36.2k", "forks": 5462, "forks_fmt": "5.5k", "last_push": "2026-10-09", "days_ago": 3, "weekly_commits": 0, "commits_low_confidence": true, "score": 69.5, "description": "open-source coding agent", "language": "TypeScript", "open_issues": 290, "category": "Coding Agents", "category_rank": 70, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "continue.continue", "weekly_downloads": 4323709, "dl_source": "vscode", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.79, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "continue", "full_fetched_at": "2026-10-12T04:02:24Z", "source_note": "", "github_homepage": "https://continue.dev", "homepage_icon": "/site-icons/11e0637b9b454232.png", "homepage_icon_for": "https://continue.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'modelcontextprotocol' in gui/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in core/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "Postgres", "Replicate" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in core/package.json", "Found Anthropic dependency 'anthropic' in core/package.json", "Found DeepSeek dependency 'deepseek' in package.json", "Found Replicate dependency 'replicate' in core/package.json", "Found Postgres dependency 'pg' in core/package.json" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [ "browser", "code", "database" ], "confidence": "high", "evidence": [ "Found extension-based path: docs/ide-extensions/agent/context-selection.mdx", "README/docs also mention a marketplace plugin/integration surface", "Found browser dependency 'puppeteer' in core/package.json", "Found database dependency 'pg' in core/package.json", "Found code dependency '@octokit' in core/package.json", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 33.1, "trust_score_v2": 33.1, "rank_v2": 1304, "rank_v2_delta": 272, "trust_v2_adjustment": -3.5, "trust_confidence": 0.67, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 8.5, "maintenance": 11.8, "adoption": 19.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -1.5, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Web Asset Generator", "repo": "alonw0/web-asset-generator", "display_repo": "", "url": "https://github.com/alonw0/web-asset-generator", "listing_class": "skill", "rank": 356, "previous_rank": 354, "rank_delta": -2, "stars": 516, "stars_fmt": "516", "forks": 55, "forks_fmt": "55", "last_push": "2026-01-28", "days_ago": 257, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.4, "description": "Claude skill to generate favicons, app icons, and social media images from logos, text, or emojis. Supports emoji suggestions, validation, and framework auto-integration.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 356, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.417, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-10T15:04:36Z", "slug": "web-asset-generator", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 33.0, "trust_score_v2": 33.0, "rank_v2": 356, "rank_v2_delta": 1275, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.3, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Academia MCP", "repo": "IlyaGusev/academia_mcp", "display_repo": "", "url": "https://github.com/IlyaGusev/academia_mcp", "listing_class": "agent", "rank": 1305, "previous_rank": 1302, "rank_delta": -3, "stars": 93, "stars_fmt": "93", "forks": 8, "forks_fmt": "8", "last_push": "2026-01-25", "days_ago": 260, "weekly_commits": 0, "commits_low_confidence": false, "score": 16.2, "description": "Academia MCP server: Tools for automatic scientific research", "language": "Python", "open_issues": 3, "category": "MCP Servers", "category_rank": 762, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.17, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 4, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T00:17:09Z", "slug": "academia-mcp", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "OpenAI", "OpenRouter", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 32.6, "trust_score_v2": 32.6, "rank_v2": 1305, "rank_v2_delta": 334, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.5, "identity": 10.8, "transparency": 11.6, "maintenance": 0.0, "adoption": 4.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Youtu-Agent", "repo": "TencentCloudADP/youtu-agent", "display_repo": "", "url": "https://github.com/TencentCloudADP/youtu-agent", "listing_class": "agent", "rank": 1306, "previous_rank": 1304, "rank_delta": -2, "stars": 4622, "stars_fmt": "4.6k", "forks": 487, "forks_fmt": "487", "last_push": "2026-03-21", "days_ago": 205, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.5, "description": "A simple yet powerful agent framework that delivers with open-source models", "language": "Python", "open_issues": 60, "category": "Agent Frameworks", "category_rank": 115, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.23, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-30T18:57:15Z", "slug": "youtu-agent", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "https://tencentcloudadp.github.io/youtu-agent/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/mcp/sse_example/server.py", "Found MCP-related server path: examples/mcp/streamablehttp_example/server.py" ] }, "external_service_dependencies": { "providers": [ "E2B", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Google Gemini dependency 'google-genai' in pyproject.toml", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "Found E2B dependency 'e2b' in pyproject.toml", "Found Postgres dependency 'psycopg' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 32.4, "trust_score_v2": 32.4, "rank_v2": 1306, "rank_v2_delta": 289, "trust_v2_adjustment": -3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.0, "maintenance": 0.0, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Banco MCP", "repo": "douglac/banco-mcp", "display_repo": "", "url": "https://github.com/douglac/banco-mcp", "listing_class": "agent", "rank": 1307, "previous_rank": 1303, "rank_delta": -4, "stars": 24, "stars_fmt": "24", "forks": 2, "forks_fmt": "2", "last_push": "2026-05-15", "days_ago": 150, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.8, "description": "Open Finance MCP para Claude e Cursor — conecte Itaú, Bradesco, Santander, Nubank, Inter, BB, Caixa, C6 e mais 30 bancos brasileiros ao seu agente de IA via Pluggy. 13 ferramentas: extrato, saldos, transações, investimentos, cartão de crédito.", "language": "", "open_issues": 1, "category": "MCP Servers", "category_rank": 763, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T23:04:18Z", "slug": "banco-mcp", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 32.3, "trust_score_v2": 32.3, "rank_v2": 1307, "rank_v2_delta": 341, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 11.6, "maintenance": 2.0, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Auto Commenter", "repo": "rokpiy/auto-commenter", "display_repo": "", "url": "https://github.com/rokpiy/auto-commenter", "listing_class": "skill", "rank": 357, "previous_rank": 355, "rank_delta": -2, "stars": 585, "stars_fmt": "585", "forks": 112, "forks_fmt": "112", "last_push": "2026-03-15", "days_ago": 211, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.1, "description": "A Claude skill that automatically posts personalized, authentic comments in your target communities.", "language": "", "open_issues": 0, "category": "Agent Skills", "category_rank": 357, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-09T02:48:21Z", "slug": "auto-commenter", "full_fetched_at": "2026-10-12T00:01:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 32.3, "trust_score_v2": 32.3, "rank_v2": 357, "rank_v2_delta": 1289, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Subtask", "repo": "zippoxer/subtask", "display_repo": "", "url": "https://github.com/zippoxer/subtask", "listing_class": "skill", "rank": 358, "previous_rank": 356, "rank_delta": -2, "stars": 338, "stars_fmt": "338", "forks": 30, "forks_fmt": "30", "last_push": "2026-04-27", "days_ago": 168, "weekly_commits": 0, "commits_low_confidence": false, "score": 23.9, "description": "Claude Skill to do your tasks with subagents in Git worktrees", "language": "Go", "open_issues": 4, "category": "Agent Skills", "category_rank": 358, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.257, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T07:00:22Z", "slug": "subtask", "full_fetched_at": "2026-10-12T04:02:13Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (plugin/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 32.2, "trust_score_v2": 32.2, "rank_v2": 358, "rank_v2_delta": 1283, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.3, "identity": 10.8, "transparency": 10.5, "maintenance": 0.8, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenBrowser", "repo": "ntegrals/openbrowser", "display_repo": "", "url": "https://github.com/ntegrals/openbrowser", "listing_class": "agent", "rank": 1308, "previous_rank": 1306, "rank_delta": -2, "stars": 9560, "stars_fmt": "9.6k", "forks": 866, "forks_fmt": "866", "last_push": "2026-04-02", "days_ago": 193, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.6, "description": "Let AI agents browse the web. An autonomous toolkit for browser-based AI agents.", "language": "TypeScript", "open_issues": 0, "category": "Browser & Computer Use", "category_rank": 41, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-10-10T23:09:14Z", "slug": "openbrowser", "full_fetched_at": "2026-10-12T08:02:11Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in packages/core/package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in packages/core/package.json", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in packages/core/package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 32.1, "trust_score_v2": 32.1, "rank_v2": 1308, "rank_v2_delta": 308, "trust_v2_adjustment": -1.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.0, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "N8n MCP", "repo": "AutomateLab-tech/n8n-mcp", "display_repo": "", "url": "https://github.com/AutomateLab-tech/n8n-mcp", "listing_class": "agent", "rank": 1309, "previous_rank": 1305, "rank_delta": -4, "stars": 14, "stars_fmt": "14", "forks": 0, "forks_fmt": "0", "last_push": "2026-06-08", "days_ago": 126, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.6, "description": "Debugging-first MCP server for n8n. Tools for workflow generation, linting, per-node execution diagnosis, and driving live n8n instances. Built for AI agents.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 764, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T02:42:29Z", "slug": "automatelab-tech-n8n-mcp", "full_fetched_at": "2026-10-12T12:02:41Z", "source_note": "", "github_homepage": "https://automatelab.tech/products/mcp/n8n-mcp/", "homepage_icon": "/site-icons/601109c56ce3df91.png", "homepage_icon_for": "https://automatelab.tech/products/mcp/n8n-mcp/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)", "Found credential/config marker 'N8N_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/plugin.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 32.0, "trust_score_v2": 32.0, "rank_v2": 1309, "rank_v2_delta": 345, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 11.0, "maintenance": 3.6, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude to IM skill", "repo": "op7418/Claude-to-IM-skill", "display_repo": "", "url": "https://github.com/op7418/Claude-to-IM-skill", "listing_class": "skill", "rank": 359, "previous_rank": 357, "rank_delta": -2, "stars": 2891, "stars_fmt": "2.9k", "forks": 316, "forks_fmt": "316", "last_push": "2026-03-23", "days_ago": 203, "weekly_commits": 0, "commits_low_confidence": false, "score": 32.4, "description": "Bridge Claude Code / Codex to IM platforms — chat with AI coding agents from Telegram, Discord, or Feishu/Lark.", "language": "TypeScript", "open_issues": 60, "category": "Agent Skills", "category_rank": 359, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.065, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 4, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 9 }, "scorecard_scanned_at": "2026-10-11T03:38:38Z", "slug": "claude-to-im-skill", "full_fetched_at": "2026-10-11T20:02:05Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 31.9, "trust_score_v2": 31.9, "rank_v2": 359, "rank_v2_delta": 1270, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DeepResearchAgent", "repo": "SkyworkAI/DeepResearchAgent", "display_repo": "", "url": "https://github.com/SkyworkAI/DeepResearchAgent", "listing_class": "agent", "rank": 1310, "previous_rank": 1309, "rank_delta": -1, "stars": 3558, "stars_fmt": "3.6k", "forks": 457, "forks_fmt": "457", "last_push": "2026-05-04", "days_ago": 161, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.3, "description": "DeepResearchAgent is a hierarchical multi-agent system designed not only for deep research tasks but also for general-purpose task solving. The framework leverages a top-level planning agent to coordinate multiple specialized lower-level agents, enabling automated task decomposition and efficient…", "language": "Python", "open_issues": 5, "category": "Multi-Agent Systems", "category_rank": 38, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 9, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 10, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T04:46:06Z", "slug": "deepresearchagent", "full_fetched_at": "2026-10-12T08:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Firecrawl", "Google Gemini", "OpenAI", "OpenRouter", "Postgres" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Google Gemini dependency 'google-generativeai' in requirements.txt", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found Firecrawl dependency 'firecrawl' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 31.8, "trust_score_v2": 31.8, "rank_v2": 1310, "rank_v2_delta": 282, "trust_v2_adjustment": -3.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 1.3, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "KaibanJS", "repo": "kaiban-ai/KaibanJS", "display_repo": "", "url": "https://github.com/kaiban-ai/KaibanJS", "listing_class": "agent", "rank": 1311, "previous_rank": 1307, "rank_delta": -4, "stars": 1479, "stars_fmt": "1.5k", "forks": 159, "forks_fmt": "159", "last_push": "2026-05-15", "days_ago": 150, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.5, "description": "KaibanJS is a JavaScript-native framework for building and managing multi-agent systems with a Kanban-inspired approach.", "language": "TypeScript", "open_issues": 68, "category": "Multi-Agent Systems", "category_rank": 39, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 2.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T16:57:20Z", "slug": "kaibanjs", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "https://www.kaibanjs.com/", "homepage_icon": "/site-icons/80af3f0fb0d47433.png", "homepage_icon_for": "https://www.kaibanjs.com/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "DeepSeek", "Google Gemini", "Groq", "Mistral AI", "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "search" ], "confidence": "high", "evidence": [ "Found declared path: packages/openclaw-plugin/README.md", "README/docs also mention a declared plugin/integration surface", "Found search dependency 'tavily' in playground/react/package.json", "README/docs also mention search capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 31.8, "trust_score_v2": 31.8, "rank_v2": 1311, "rank_v2_delta": 267, "trust_v2_adjustment": -4.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.2, "identity": 10.8, "transparency": 10.8, "maintenance": 2.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ByteAsk Embedded MCP", "repo": "ByteAsk/ByteAsk-Embedded-MCP", "display_repo": "", "url": "https://github.com/ByteAsk/ByteAsk-Embedded-MCP", "listing_class": "agent", "rank": 1312, "previous_rank": 1308, "rank_delta": -4, "stars": 25, "stars_fmt": "25", "forks": 4, "forks_fmt": "4", "last_push": "2026-06-20", "days_ago": 114, "weekly_commits": 0, "commits_low_confidence": false, "score": 21.0, "description": "The open-source MCP server behind ByteAsk Embedded Docs: a source-grounded, page-cited evidence-retrieval server for coding agents (Claude Code, Codex, Cursor) that write firmware / driver / protocol code and need exact facts.", "language": "Python", "open_issues": 5, "category": "MCP Servers", "category_rank": 765, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.067, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T19:05:18Z", "slug": "byteask-embedded-mcp", "full_fetched_at": "2026-10-12T12:02:48Z", "source_note": "", "github_homepage": "https://docs.byteask.ai/embedded", "homepage_icon": "/site-icons/553c3e776ad96c25.png", "homepage_icon_for": "https://docs.byteask.ai/embedded", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency 'fastmcp' in pyproject.toml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'MCP_HTTP_AUTH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 31.8, "trust_score_v2": 31.8, "rank_v2": 1312, "rank_v2_delta": 358, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.3, "identity": 10.8, "transparency": 9.9, "maintenance": 4.4, "adoption": 3.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Sweep", "repo": "sweepai/sweep", "display_repo": "", "url": "https://github.com/sweepai/sweep", "listing_class": "agent", "rank": 1313, "previous_rank": 1311, "rank_delta": -2, "stars": 7707, "stars_fmt": "7.7k", "forks": 466, "forks_fmt": "466", "last_push": "2025-09-18", "days_ago": 389, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.7, "description": "Sweep: AI coding assistant for JetBrains", "language": "Jupyter Notebook", "open_issues": 246, "category": "Coding Agents", "category_rank": 71, "npm_package": "", "crate_package": "", "pypi_package": "sweepai", "docker_image": "", "vscode_extension": "", "weekly_downloads": 25, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.24, "scorecard_score": 4.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:18:26Z", "slug": "sweep", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "OpenAI", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Cohere dependency 'cohere' in pyproject.toml", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "Found Redis dependency 'redis' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "database", "shell" ], "confidence": "high", "evidence": [ "Found shell dependency 'pty' in requirements.txt", "Found database dependency 'redis' in pyproject.toml", "Found code dependency 'gitpython' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'sweepai' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "sweepai", "version": "3.2.5" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:31Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "sweepai/sweep", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-18)" } ], "license_spdx": "NOASSERTION", "license_type": "source-available", "license_override": "source-available", "trust_score": 31.7, "trust_score_v2": 31.7, "rank_v2": 1313, "rank_v2_delta": 359, "trust_v2_adjustment": 1.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.5, "identity": 10.8, "transparency": 12.1, "maintenance": 0.0, "adoption": 11.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.9, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "A Mem MCP", "repo": "DiaaAj/a-mem-mcp", "display_repo": "", "url": "https://github.com/DiaaAj/a-mem-mcp", "listing_class": "agent", "rank": 1314, "previous_rank": 1310, "rank_delta": -4, "stars": 35, "stars_fmt": "35", "forks": 3, "forks_fmt": "3", "last_push": "2026-01-17", "days_ago": 268, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.1, "description": "", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 766, "npm_package": "", "crate_package": "", "pypi_package": "a-mem", "docker_image": "", "vscode_extension": "", "weekly_downloads": 59, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.203, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:15:27Z", "slug": "a-mem-mcp", "full_fetched_at": "2026-10-12T12:03:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/mcp_server_example.py", "Found MCP-related server path: run_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'a-mem' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "a-mem", "version": "0.2.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:03:03Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 31.6, "trust_score_v2": 31.6, "rank_v2": 1314, "rank_v2_delta": 368, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.9, "identity": 10.8, "transparency": 9.8, "maintenance": 0.0, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Memory Bank MCP", "repo": "alioshr/memory-bank-mcp", "display_repo": "", "url": "https://github.com/alioshr/memory-bank-mcp", "listing_class": "agent", "rank": 1315, "previous_rank": 1312, "rank_delta": -3, "stars": 919, "stars_fmt": "919", "forks": 87, "forks_fmt": "87", "last_push": "2025-08-20", "days_ago": 418, "weekly_commits": 0, "commits_low_confidence": false, "score": 26.8, "description": "A Model Context Protocol (MCP) server implementation for remote memory bank management, inspired by Cline Memory Bank.", "language": "TypeScript", "open_issues": 13, "category": "MCP Servers", "category_rank": 767, "npm_package": "@allpepper/memory-bank-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 485, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.296, "scorecard_score": 2.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:56:21Z", "slug": "memory-bank-mcp", "full_fetched_at": "2026-10-12T08:02:41Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/main/protocols/mcp/adapters/mcp-server-adapter.ts", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "filesystem" ], "confidence": "high", "evidence": [ "Found filesystem dependency 'fs-extra' in package.json", "README/docs also mention filesystem capabilities" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@allpepper/memory-bank-mcp' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@allpepper/memory-bank-mcp", "version": "0.2.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:41Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "alioshr/memory-bank-mcp", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-08-20)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 31.4, "trust_score_v2": 31.4, "rank_v2": 1315, "rank_v2_delta": 396, "trust_v2_adjustment": 5.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 10.2, "maintenance": 0.0, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "xpander.ai", "repo": "xpander-ai/xpander.ai", "display_repo": "", "url": "https://github.com/xpander-ai/xpander.ai", "listing_class": "agent", "rank": 1316, "previous_rank": 1313, "rank_delta": -3, "stars": 869, "stars_fmt": "869", "forks": 125, "forks_fmt": "125", "last_push": "2025-11-11", "days_ago": 335, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.4, "description": "xpander.ai is the runtime and control plane to build, run, and ship reliable AI agents fast and anywhere", "language": "Jupyter Notebook", "open_issues": 1, "category": "Agent Frameworks", "category_rank": 116, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 2.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 3 }, "scorecard_scanned_at": "2026-09-25T01:27:56Z", "slug": "xpander-ai", "full_fetched_at": "2026-10-12T04:02:10Z", "source_note": "", "github_homepage": "https://app.xpander.ai", "homepage_icon": "/site-icons/82eed7b059df6d32.png", "homepage_icon_for": "https://app.xpander.ai", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in 02-agents/devops/requirements.txt", "Found Anthropic dependency 'anthropic' in 02-agents/devops/requirements.txt", "Found Multi-provider (LiteLLM) dependency 'litellm' in 03-framework-examples/nemo-agno-personal-finance-agent/pyproject.toml", "Found credential/config marker 'XPANDER_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.9, "trust_score_v2": 30.9, "rank_v2": 1316, "rank_v2_delta": 320, "trust_v2_adjustment": -2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 10.4, "maintenance": 0.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenSSA", "repo": "aitomatic/openssa", "display_repo": "", "url": "https://github.com/aitomatic/openssa", "listing_class": "agent", "rank": 1317, "previous_rank": 1315, "rank_delta": -2, "stars": 351, "stars_fmt": "351", "forks": 61, "forks_fmt": "61", "last_push": "2025-08-14", "days_ago": 424, "weekly_commits": 0, "commits_low_confidence": false, "score": 23.6, "description": "OpenSSA: Small Specialist Agents based on Domain-Aware Neurosymbolic Agent (DANA) architecture for industrial problem-solving", "language": "Python", "open_issues": 10, "category": "Agent Frameworks", "category_rank": 117, "npm_package": "", "crate_package": "", "pypi_package": "openssa", "docker_image": "", "vscode_extension": "", "weekly_downloads": 14, "dl_source": "pypi", "hn_mentions_30d": 44, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.42, "scorecard_score": 3.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 10, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T01:29:04Z", "slug": "openssa", "full_fetched_at": "2026-10-12T04:02:17Z", "source_note": "", "github_homepage": "https://aitomatic.github.io/openssa/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'openssa' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "openssa", "version": "0.24.12.12" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:17Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "aitomatic/openssa", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-08-14)" } ], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 30.8, "trust_score_v2": 30.8, "rank_v2": 1317, "rank_v2_delta": 387, "trust_v2_adjustment": 4.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.7, "identity": 10.8, "transparency": 11.6, "maintenance": 0.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "MCP Server Taiwan Weather", "repo": "GoneTone/mcp-server-taiwan-weather", "display_repo": "", "url": "https://github.com/GoneTone/mcp-server-taiwan-weather", "listing_class": "agent", "rank": 1318, "previous_rank": 1314, "rank_delta": -4, "stars": 11, "stars_fmt": "11", "forks": 1, "forks_fmt": "1", "last_push": "2025-09-21", "days_ago": 386, "weekly_commits": 0, "commits_low_confidence": false, "score": 7.9, "description": "用於取得臺灣中央氣象署 API 資料的 Model Context Protocol (MCP) Server。", "language": "TypeScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 768, "npm_package": "@gonetone/mcp-server-taiwan-weather", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 43, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 3.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:38:04Z", "slug": "mcp-server-taiwan-weather", "full_fetched_at": "2026-10-12T16:02:10Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CWA_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@gonetone/mcp-server-taiwan-weather' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@gonetone/mcp-server-taiwan-weather", "version": "0.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:10Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "GoneTone/mcp-server-taiwan-weather", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-21)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.8, "trust_score_v2": 30.8, "rank_v2": 1318, "rank_v2_delta": 392, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.0, "identity": 10.8, "transparency": 11.2, "maintenance": 0.0, "adoption": 4.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Scira MCP Chat", "repo": "zaidmukaddam/scira-mcp-chat", "display_repo": "", "url": "https://github.com/zaidmukaddam/scira-mcp-chat", "listing_class": "agent", "rank": 1319, "previous_rank": 1316, "rank_delta": -3, "stars": 825, "stars_fmt": "825", "forks": 211, "forks_fmt": "211", "last_push": "2025-12-11", "days_ago": 305, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.3, "description": "A minimalistic MCP client with a good feature set.", "language": "TypeScript", "open_issues": 5, "category": "Protocols & Tool Integration", "category_rank": 62, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.2, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 2, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T08:28:47Z", "slug": "scira-mcp-chat", "full_fetched_at": "2026-10-12T04:02:00Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: components/mcp-server-manager.tsx", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Groq", "OpenAI", "Postgres", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "Found Anthropic dependency 'anthropic' in package.json", "Found Groq dependency 'groq' in package.json", "Found xAI Grok dependency '@ai-sdk/xai' in package.json", "Found Postgres dependency 'pg' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 30.7, "trust_score_v2": 30.7, "rank_v2": 1319, "rank_v2_delta": 347, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.2, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Logoloom", "repo": "mcpware/logoloom", "display_repo": "", "url": "https://github.com/mcpware/logoloom", "listing_class": "agent", "rank": 1320, "previous_rank": 1317, "rank_delta": -3, "stars": 47, "stars_fmt": "47", "forks": 11, "forks_fmt": "11", "last_push": "2026-03-23", "days_ago": 203, "weekly_commits": 0, "commits_low_confidence": false, "score": 15.1, "description": "AI-powered logo design → SVG → full brand kit. Free, local, MCP-native.", "language": "JavaScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 769, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": 10, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 9, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:44:03Z", "slug": "logoloom", "full_fetched_at": "2026-10-11T20:01:51Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: .claude-plugin/plugin.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.6, "trust_score_v2": 30.6, "rank_v2": 1320, "rank_v2_delta": 348, "trust_v2_adjustment": -0.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.5, "identity": 10.8, "transparency": 11.6, "maintenance": 0.0, "adoption": 4.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PapersFlow", "repo": "papersflow-ai/papersflow-mcp", "display_repo": "", "url": "https://github.com/papersflow-ai/papersflow-mcp", "listing_class": "agent", "rank": 1321, "previous_rank": 1318, "rank_delta": -3, "stars": 14, "stars_fmt": "14", "forks": 1, "forks_fmt": "1", "last_push": "2026-03-11", "days_ago": 215, "weekly_commits": 0, "commits_low_confidence": false, "score": 8.5, "description": "papersflow-mcp is PapersFlow’s production MCP server for literature search, citation verification, related-paper discovery, and authenticated research workflows across Claude, Codex, Gemini, and other MCP clients.", "language": "", "open_issues": 1, "category": "MCP Servers", "category_rank": 770, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.111, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-08T17:25:08Z", "slug": "papersflow", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "https://papersflow.ai/", "homepage_icon": "/site-icons/a953c4d69e409d8d.png", "homepage_icon_for": "https://papersflow.ai/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.6, "trust_score_v2": 30.6, "rank_v2": 1321, "rank_v2_delta": 370, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 10.9, "maintenance": 0.0, "adoption": 2.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Operant MCP", "repo": "operantlabs/operant-mcp", "display_repo": "", "url": "https://github.com/operantlabs/operant-mcp", "listing_class": "agent", "rank": 1322, "previous_rank": 1319, "rank_delta": -3, "stars": 25, "stars_fmt": "25", "forks": 7, "forks_fmt": "7", "last_push": "2026-04-01", "days_ago": 194, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.7, "description": "Turn your AI agent into a hacker by plugging in this MCP", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 771, "npm_package": "operant-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 35, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-05T18:04:08Z", "slug": "operant-mcp", "full_fetched_at": "2026-10-11T20:02:11Z", "source_note": "", "github_homepage": "https://operantlabs.com", "homepage_icon": "/site-icons/727e764763e739e8.png", "homepage_icon_for": "https://operantlabs.com", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'operant-mcp' does not expose a source repo URL" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "operant-mcp", "version": "1.1.0" } ], "found": [], "worst": null, "checked_at": "2026-10-11T20:02:11Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.5, "trust_score_v2": 30.5, "rank_v2": 1322, "rank_v2_delta": 371, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.2, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 5.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AutoAgent", "repo": "HKUDS/AutoAgent", "display_repo": "", "url": "https://github.com/HKUDS/AutoAgent", "listing_class": "agent", "rank": 1323, "previous_rank": 1321, "rank_delta": -2, "stars": 9804, "stars_fmt": "9.8k", "forks": 1358, "forks_fmt": "1.4k", "last_push": "2025-10-16", "days_ago": 361, "weekly_commits": 0, "commits_low_confidence": false, "score": 38.5, "description": "\"AutoAgent: Fully-Automated and Zero-Code LLM Agent Framework\"", "language": "Python", "open_issues": 55, "category": "Agent Frameworks", "category_rank": 118, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T13:32:12Z", "slug": "autoagent", "full_fetched_at": "2026-10-12T04:02:38Z", "source_note": "", "github_homepage": "https://arxiv.org/abs/2502.05957", "homepage_icon": "/site-icons/886c3c4a4b4e64e6.png", "homepage_icon_for": "https://arxiv.org/abs/2502.05957", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Groq", "Mistral AI", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: docs/plugins/tailwind-config.cjs", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.4, "trust_score_v2": 30.4, "rank_v2": 1323, "rank_v2_delta": 282, "trust_v2_adjustment": -4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 10.1, "maintenance": 0.0, "adoption": 9.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "WorldSeed", "repo": "AIScientists-Dev/WorldSeed", "display_repo": "", "url": "https://github.com/AIScientists-Dev/WorldSeed", "listing_class": "agent", "rank": 1324, "previous_rank": 1320, "rank_delta": -4, "stars": 821, "stars_fmt": "821", "forks": 58, "forks_fmt": "58", "last_push": "2026-05-08", "days_ago": 157, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.9, "description": "More is Different. A multi-agent world engine where AI agents live, talk, compete, ally.", "language": "Python", "open_issues": 0, "category": "Multi-Agent Systems", "category_rank": 40, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.053, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T20:47:05Z", "slug": "worldseed", "full_fetched_at": "2026-10-12T08:02:45Z", "source_note": "", "github_homepage": "https://worldseed.morphmind.ai/demo", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Multi-provider (LiteLLM)" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Multi-provider (LiteLLM) dependency 'litellm' in pyproject.toml", "README/docs also mention Multi-provider (LiteLLM)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: openclaw-plugin/README.md" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.4, "trust_score_v2": 30.4, "rank_v2": 1324, "rank_v2_delta": 339, "trust_v2_adjustment": -0.8, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.1, "identity": 10.8, "transparency": 9.8, "maintenance": 1.5, "adoption": 7.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "10x", "repo": "ntegrals/10x", "display_repo": "", "url": "https://github.com/ntegrals/10x", "listing_class": "agent", "rank": 1325, "previous_rank": 1322, "rank_delta": -3, "stars": 1370, "stars_fmt": "1.4k", "forks": 112, "forks_fmt": "112", "last_push": "2026-01-05", "days_ago": 280, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.3, "description": "⚡️ 10x - Up to 20x faster AI coding with multi-step Superpowers. Open-source agent with smart model routing, BYOK, fully self-hosted.", "language": "TypeScript", "open_issues": 26, "category": "Coding Agents", "category_rank": 72, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.21, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:06:28Z", "slug": "10x", "full_fetched_at": "2026-10-11T20:02:10Z", "source_note": "", "github_homepage": "https://try10x.co", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenRouter", "Postgres", "Supabase" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenRouter dependency 'openrouter' in packages/core/package.json", "README/docs also mention OpenRouter", "Found Supabase dependency 'supabase' in apps/web/package.json", "Found Postgres dependency 'postgres' in apps/web/package.json", "README/docs also mention Postgres" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'postgres' in apps/web/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.3, "trust_score_v2": 30.3, "rank_v2": 1325, "rank_v2_delta": 331, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.3, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Connectrylab Architect Cert MCP", "repo": "Connectry-io/connectrylab-architect-cert-mcp", "display_repo": "", "url": "https://github.com/Connectry-io/connectrylab-architect-cert-mcp", "listing_class": "agent", "rank": 1326, "previous_rank": 1323, "rank_delta": -3, "stars": 38, "stars_fmt": "38", "forks": 15, "forks_fmt": "15", "last_push": "2026-03-19", "days_ago": 207, "weekly_commits": 0, "commits_low_confidence": false, "score": 15.1, "description": "Free certification prep for the Claude Certified Architect exam. 390 questions. Spaced repetition. Zero sycophancy.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 772, "npm_package": "connectry-architect-mcp", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 37, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-12T00:11:25Z", "slug": "connectrylab-architect-cert-mcp", "full_fetched_at": "2026-10-12T12:02:57Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/data/handouts/2.4-integrate-mcp-servers-into-claude-code-and-agent-workflows.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in projects/capstone/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in projects/capstone/package.json", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "npm package 'connectry-architect-mcp' points to connectry-io/connectry-architect-mcp (same owner as connectry-io/connectrylab-architect-cert-mcp, not treated as drift)" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "connectry-architect-mcp", "version": "0.1.13" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:57Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 30.1, "trust_score_v2": 30.1, "rank_v2": 1326, "rank_v2_delta": 369, "trust_v2_adjustment": 2.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.7, "identity": 10.8, "transparency": 9.7, "maintenance": 0.0, "adoption": 5.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ScaleCUA", "repo": "OpenGVLab/ScaleCUA", "display_repo": "", "url": "https://github.com/OpenGVLab/ScaleCUA", "listing_class": "agent", "rank": 1327, "previous_rank": 1324, "rank_delta": -3, "stars": 1146, "stars_fmt": "1.1k", "forks": 83, "forks_fmt": "83", "last_push": "2026-01-07", "days_ago": 278, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.3, "description": "[ICLR 2026 Oral] ScaleCUA is the open-sourced computer use agents that can operate on cross-platform environments (Windows, macOS, Ubuntu, Android).", "language": "Python", "open_issues": 15, "category": "Browser & Computer Use", "category_rank": 42, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.609, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-07-11T03:40:17Z", "slug": "scalecua", "full_fetched_at": "2026-10-12T08:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Groq", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Google Gemini dependency 'google-generativeai' in playground/requirements.txt", "Found Groq dependency 'groq' in requirements.txt", "Found Amazon Bedrock dependency 'boto3' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found declared path: evaluation/AndroidWorld/apps/java/com/google/androidenv/miniwob/app/assets/html/flight/AA/apps/common/js/jquery/aacom/plugins/aaAirportAutoComplete.js", "Found browser dependency 'playwright' in requirements.txt" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 30.0, "trust_score_v2": 30.0, "rank_v2": 1327, "rank_v2_delta": 311, "trust_v2_adjustment": -2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 9.7, "maintenance": 0.0, "adoption": 7.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "cashclaw", "repo": "moltlaunch/cashclaw", "display_repo": "", "url": "https://github.com/moltlaunch/cashclaw", "listing_class": "agent", "rank": 1328, "previous_rank": 1325, "rank_delta": -3, "stars": 1224, "stars_fmt": "1.2k", "forks": 229, "forks_fmt": "229", "last_push": "2026-03-14", "days_ago": 212, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.5, "description": "An autonomous agent that takes work, does work, gets paid, and gets better at it.", "language": "TypeScript", "open_issues": 49, "category": "Agent Frameworks", "category_rank": 119, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T22:27:26Z", "slug": "cashclaw", "full_fetched_at": "2026-10-11T20:02:01Z", "source_note": "", "github_homepage": "https://moltlaunch.com", "homepage_icon": "/site-icons/cb077dfc89fe5c0f.png", "homepage_icon_for": "https://moltlaunch.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 29.9, "trust_score_v2": 29.9, "rank_v2": 1328, "rank_v2_delta": 352, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 1.9, "identity": 10.8, "transparency": 9.8, "maintenance": 0.0, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "OpenManus", "repo": "FoundationAgents/OpenManus", "display_repo": "", "url": "https://github.com/FoundationAgents/OpenManus", "listing_class": "agent", "rank": 1329, "previous_rank": 1326, "rank_delta": -3, "stars": 58634, "stars_fmt": "58.6k", "forks": 10168, "forks_fmt": "10.2k", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 0, "commits_low_confidence": false, "score": 70.5, "description": "No fortress, purely open ground. OpenManus is Coming.", "language": "Python", "open_issues": 242, "category": "Agent Frameworks", "category_rank": 120, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 10, "dl_source": "pypi", "hn_mentions_30d": 2, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "openmanus", "full_fetched_at": "2026-10-12T04:02:33Z", "source_note": "", "github_homepage": "https://openmanus.github.io/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: app/mcp/server.py", "Found MCP-related server path: run_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in setup.py", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in requirements.txt", "Found credential/config marker 'BROWSER_USE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in requirements.txt", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 29.9, "trust_score_v2": 29.9, "rank_v2": 1329, "rank_v2_delta": 352, "trust_v2_adjustment": 0.2, "trust_confidence": 0.67, "trust_breakdown": { "safety": 1.2, "identity": 10.8, "transparency": 8.5, "maintenance": 11.2, "adoption": 12.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Lingxi", "repo": "lingxi-agent/Lingxi", "display_repo": "", "url": "https://github.com/lingxi-agent/Lingxi", "listing_class": "agent", "rank": 1330, "previous_rank": 1327, "rank_delta": -3, "stars": 256, "stars_fmt": "256", "forks": 33, "forks_fmt": "33", "last_push": "2026-04-07", "days_ago": 188, "weekly_commits": 0, "commits_low_confidence": false, "score": 21.6, "description": "", "language": "Python", "open_issues": 5, "category": "Agent Frameworks", "category_rank": 121, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.316, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-12T06:58:16Z", "slug": "lingxi", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found DeepSeek credential/config marker 'DEEPSEEK_API_KEY'", "README/docs also mention DeepSeek" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code" ], "confidence": "high", "evidence": [ "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 29.8, "trust_score_v2": 29.8, "rank_v2": 1330, "rank_v2_delta": 320, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "BabyAGI", "repo": "yoheinakajima/babyagi", "display_repo": "", "url": "https://github.com/yoheinakajima/babyagi", "listing_class": "agent", "rank": 1331, "previous_rank": 1328, "rank_delta": -3, "stars": 22356, "stars_fmt": "22.4k", "forks": 2841, "forks_fmt": "2.8k", "last_push": "2026-01-31", "days_ago": 254, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.2, "description": "", "language": "Python", "open_issues": 19, "category": "Agent Frameworks", "category_rank": 122, "npm_package": "", "crate_package": "", "pypi_package": "babyagi", "docker_image": "", "vscode_extension": "", "weekly_downloads": 17, "dl_source": "pypi", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.4, "scorecard_score": 1.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 0, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T03:07:32Z", "slug": "babyagi", "full_fetched_at": "2026-10-12T12:02:27Z", "source_note": "", "github_homepage": "https://babyagi.org/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Multi-provider (LiteLLM) dependency 'litellm' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: babyagi/functionz/packs/plugins/airtable.py", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'babyagi' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "babyagi", "version": "0.1.4" } ], "found": [], "worst": null, "checked_at": "2026-10-12T12:02:27Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "yoheinakajima/babyagi", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "unlicensed", "license_override": "", "trust_score": 29.6, "trust_score_v2": 29.6, "rank_v2": 1331, "rank_v2_delta": 370, "trust_v2_adjustment": 2.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 1.0, "maintenance": 0.0, "adoption": 12.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "PyWinAssistant", "repo": "a-real-ai/pywinassistant", "display_repo": "", "url": "https://github.com/a-real-ai/pywinassistant", "listing_class": "agent", "rank": 1332, "previous_rank": 1329, "rank_delta": -3, "stars": 1342, "stars_fmt": "1.3k", "forks": 190, "forks_fmt": "190", "last_push": "2025-02-13", "days_ago": 606, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.4, "description": "The first open-source Artificial Narrow Intelligence generalist agentic framework Computer-Using-Agent that fully operates graphical-user-interfaces (GUIs) by using only natural language. Uses Visualization-of-Thought and Chain-of-Thought reasoning to elicit spatial reasoning and perception…", "language": "Python", "open_issues": 10, "category": "Browser & Computer Use", "category_rank": 43, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.942, "scorecard_score": 3.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 2, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 10, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-05T01:34:42Z", "slug": "pywinassistant", "full_fetched_at": "2026-10-12T04:02:17Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "a-real-ai/pywinassistant", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-02-13)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 29.5, "trust_score_v2": 29.5, "rank_v2": 1332, "rank_v2_delta": 351, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 9.5, "identity": 10.8, "transparency": 11.7, "maintenance": 0.0, "adoption": 7.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Continuous Claude v3", "repo": "parcadei/Continuous-Claude-v3", "display_repo": "", "url": "https://github.com/parcadei/Continuous-Claude-v3", "listing_class": "skill", "rank": 360, "previous_rank": 358, "rank_delta": -2, "stars": 3942, "stars_fmt": "3.9k", "forks": 303, "forks_fmt": "303", "last_push": "2026-01-26", "days_ago": 259, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.1, "description": "Context management for Claude Code. Hooks maintain state via ledgers and handoffs. MCP execution without context pollution. Agent orchestration with isolated context windows.", "language": "Python", "open_issues": 32, "category": "Agent Skills", "category_rank": 360, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.24, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T23:15:42Z", "slug": "continuous-claude-v3", "full_fetched_at": "2026-10-11T20:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "OpenAI", "Perplexity", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in opc/pyproject.toml", "Found Anthropic dependency 'anthropic' in opc/pyproject.toml", "README/docs also mention Anthropic", "Found Perplexity credential/config marker 'PERPLEXITY_API_KEY'", "README/docs also mention Perplexity", "Found Postgres dependency 'psycopg' in opc/pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude/plugins/braintrust-tracing/.claude-plugin/plugin.json", "README/docs also mention a extension-based plugin/integration surface", "Found database dependency 'pg' in opc/pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 29.3, "trust_score_v2": 29.3, "rank_v2": 360, "rank_v2_delta": 1275, "trust_v2_adjustment": -3.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Yunjue-Agent", "repo": "YunjueTech/Yunjue-Agent", "display_repo": "", "url": "https://github.com/YunjueTech/Yunjue-Agent", "listing_class": "agent", "rank": 1333, "previous_rank": 1331, "rank_delta": -2, "stars": 536, "stars_fmt": "536", "forks": 66, "forks_fmt": "66", "last_push": "2026-03-06", "days_ago": 220, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.9, "description": "Yunjue Agent: A Fully Reproducible, Zero-Start In-Situ Self-Evolving Agent System for Open-Ended Tasks", "language": "Python", "open_issues": 3, "category": "Agent Frameworks", "category_rank": 123, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.265, "scorecard_score": 1.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T03:49:35Z", "slug": "yunjue-agent", "full_fetched_at": "2026-10-12T04:02:31Z", "source_note": "", "github_homepage": "https://www.yunjuetech.com/Yunjue-Agent/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI", "Tavily" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Tavily credential/config marker 'TAVILY_API_KEY'", "README/docs also mention Tavily" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 29.3, "trust_score_v2": 29.3, "rank_v2": 1333, "rank_v2_delta": 336, "trust_v2_adjustment": -1.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 9.9, "maintenance": 0.0, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ChatArena", "repo": "Farama-Foundation/ChatArena", "display_repo": "", "url": "https://github.com/Farama-Foundation/ChatArena", "listing_class": "agent", "rank": 1334, "previous_rank": 1330, "rank_delta": -4, "stars": 1567, "stars_fmt": "1.6k", "forks": 151, "forks_fmt": "151", "last_push": "2025-08-11", "days_ago": 427, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.3, "description": "ChatArena (or Chat Arena) is a Multi-Agent Language Game Environments for LLMs. The goal is to develop communication and collaboration capabilities of AIs.", "language": "Python", "open_issues": 5, "category": "Multi-Agent Systems", "category_rank": 41, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.97, "scorecard_score": 4.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 6, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 10, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T03:59:41Z", "slug": "chatarena", "full_fetched_at": "2026-10-12T04:02:27Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Cohere", "OpenAI", "Supabase" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Cohere dependency 'cohere' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "Farama-Foundation/ChatArena", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-08-11)" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 29.2, "trust_score_v2": 29.2, "rank_v2": 1334, "rank_v2_delta": 321, "trust_v2_adjustment": -2.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 10.7, "identity": 10.8, "transparency": 12.5, "maintenance": 0.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Server Spec Driven Development", "repo": "formulahendry/mcp-server-spec-driven-development", "display_repo": "", "url": "https://github.com/formulahendry/mcp-server-spec-driven-development", "listing_class": "agent", "rank": 1335, "previous_rank": 1332, "rank_delta": -3, "stars": 439, "stars_fmt": "439", "forks": 41, "forks_fmt": "41", "last_push": "2025-09-26", "days_ago": 381, "weekly_commits": 0, "commits_low_confidence": false, "score": 23.4, "description": "Spec-Driven Development MCP Server, not just Vibe Coding", "language": "TypeScript", "open_issues": 3, "category": "MCP Servers", "category_rank": 773, "npm_package": "mcp-server-spec-driven-development", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 49, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.222, "scorecard_score": 1.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-01T02:03:01Z", "slug": "mcp-server-spec-driven-development", "full_fetched_at": "2026-10-12T16:02:03Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .vscode/mcp.json", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package 'mcp-server-spec-driven-development' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "mcp-server-spec-driven-development", "version": "0.1.1" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:03Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "formulahendry/mcp-server-spec-driven-development", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-26)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 29.0, "trust_score_v2": 29.0, "rank_v2": 1335, "rank_v2_delta": 389, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.5, "identity": 10.8, "transparency": 10.1, "maintenance": 0.0, "adoption": 8.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Crawleo MCP", "repo": "Crawleo/Crawleo-MCP", "display_repo": "", "url": "https://github.com/Crawleo/Crawleo-MCP", "listing_class": "agent", "rank": 1336, "previous_rank": 1333, "rank_delta": -3, "stars": 11, "stars_fmt": "11", "forks": 4, "forks_fmt": "4", "last_push": "2025-12-31", "days_ago": 285, "weekly_commits": 0, "commits_low_confidence": false, "score": 9.8, "description": "Crawleo MCP Server - Real-Time Web Knowledge for AI Crawleo's Model Context Protocol (MCP) server enables AI assistants like Claude to access real-time web data directly through native tool integration.", "language": "JavaScript", "open_issues": 0, "category": "MCP Servers", "category_rank": 774, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.429, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-09T10:15:34Z", "slug": "crawleo-mcp", "full_fetched_at": "2026-10-12T12:02:56Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'CRAWLEO_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 28.8, "trust_score_v2": 28.8, "rank_v2": 1336, "rank_v2_delta": 361, "trust_v2_adjustment": 1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.4, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 2.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Utopia", "repo": "deeplethe/utopia", "display_repo": "", "url": "https://github.com/deeplethe/utopia", "listing_class": "agent", "rank": 1337, "previous_rank": 1335, "rank_delta": -2, "stars": 8286, "stars_fmt": "8.3k", "forks": 1151, "forks_fmt": "1.2k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 408, "commits_low_confidence": false, "score": 87.7, "description": "World's first open-source enterprise world model.", "language": "Rust", "open_issues": 25, "category": "Memory & Knowledge", "category_rank": 48, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.93, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "utopia", "full_fetched_at": "2026-10-12T12:03:06Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 28.7, "trust_score_v2": 28.7, "rank_v2": 1337, "rank_v2_delta": 368, "trust_v2_adjustment": 2.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 9.4 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "PearAI", "repo": "trypear/pearai-master", "display_repo": "", "url": "https://github.com/trypear/pearai-master", "listing_class": "agent", "rank": 1338, "previous_rank": 1334, "rank_delta": -4, "stars": 774, "stars_fmt": "774", "forks": 107, "forks_fmt": "107", "last_push": "2026-06-19", "days_ago": 115, "weekly_commits": 0, "commits_low_confidence": false, "score": 35.8, "description": "Master Repo For PearAI", "language": "Shell", "open_issues": 28, "category": "Coding Agents", "category_rank": 73, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": 2.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 0, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-02T00:44:55Z", "slug": "pearai", "full_fetched_at": "2026-10-12T08:02:31Z", "source_note": "", "github_homepage": "https://trypear.ai", "homepage_icon": "/site-icons/82cc74d020399047.png", "homepage_icon_for": "https://trypear.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "trypear/pearai-master", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "unlicensed", "license_override": "", "trust_score": 28.6, "trust_score_v2": 28.6, "rank_v2": 1338, "rank_v2_delta": 352, "trust_v2_adjustment": 0.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 2.4, "maintenance": 4.3, "adoption": 6.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "tinykit", "repo": "tinykit-studio/tinykit", "display_repo": "", "url": "https://github.com/tinykit-studio/tinykit", "listing_class": "agent", "rank": 1339, "previous_rank": 1336, "rank_delta": -3, "stars": 524, "stars_fmt": "524", "forks": 78, "forks_fmt": "78", "last_push": "2026-01-09", "days_ago": 276, "weekly_commits": 0, "commits_low_confidence": false, "score": 25.1, "description": "Self-hosted Lovable/v0 alternative. Realtime database & storage included.", "language": "Svelte", "open_issues": 4, "category": "UI & App Builders", "category_rank": 18, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.02, "scorecard_score": 1.7, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 5, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T10:32:34Z", "slug": "tinykit", "full_fetched_at": "2026-10-12T00:02:26Z", "source_note": "", "github_homepage": "https://tinykit.studio", "homepage_icon": "/site-icons/6238cf0def4c0c83.png", "homepage_icon_for": "https://tinykit.studio", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency '@google/genai' in package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: src/lib/compiler/workers/plugins/commonjs.js", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 28.1, "trust_score_v2": 28.1, "rank_v2": 1339, "rank_v2_delta": 346, "trust_v2_adjustment": -1.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.2, "identity": 10.8, "transparency": 9.9, "maintenance": 0.0, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Universal Modder", "repo": "rehan-remade/universal-modder", "display_repo": "", "url": "https://github.com/rehan-remade/universal-modder", "listing_class": "skill", "rank": 361, "previous_rank": 359, "rank_delta": -2, "stars": 6954, "stars_fmt": "7.0k", "forks": 716, "forks_fmt": "716", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 156, "commits_low_confidence": false, "score": 86.4, "description": "Point Claude at any game. Skills, tools and the fal MCP that let Claude Code mod almost any PC game you own: recon, reverse engineering, fal-generated art/3D/audio, in-game testing, showcase videos.", "language": "Python", "open_issues": 4, "category": "Agent Skills", "category_rank": 361, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "universal-modder", "full_fetched_at": "2026-10-12T12:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .cursor/mcp.json", "Found MCP-related server path: .vscode/mcp.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)", "Ships a Gemini CLI plugin manifest (gemini-extension.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 28.0, "trust_score_v2": 28.0, "rank_v2": 361, "rank_v2_delta": 1342, "trust_v2_adjustment": 1.2, "trust_confidence": 0.5, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Adversarial Spec", "repo": "zscole/adversarial-spec", "display_repo": "", "url": "https://github.com/zscole/adversarial-spec", "listing_class": "skill", "rank": 362, "previous_rank": 360, "rank_delta": -2, "stars": 556, "stars_fmt": "556", "forks": 50, "forks_fmt": "50", "last_push": "2026-01-22", "days_ago": 263, "weekly_commits": 0, "commits_low_confidence": false, "score": 24.4, "description": "A Claude Code plugin that iteratively refines product specifications by debating between multiple LLMs until all models reach consensus.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 362, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.146, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 3, "CII-Best-Practices": 0, "Code-Review": 1, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-04T10:34:09Z", "slug": "adversarial-spec", "full_fetched_at": "2026-10-12T04:02:14Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Groq", "Mistral AI", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 27.8, "trust_score_v2": 27.8, "rank_v2": 362, "rank_v2_delta": 1287, "trust_v2_adjustment": -4.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.0, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 6.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Fortnox MCP", "repo": "erp-mafia/fortnox-mcp", "display_repo": "", "url": "https://github.com/erp-mafia/fortnox-mcp", "listing_class": "agent", "rank": 1340, "previous_rank": 1337, "rank_delta": -3, "stars": 40, "stars_fmt": "40", "forks": 30, "forks_fmt": "30", "last_push": "2026-04-28", "days_ago": 167, "weekly_commits": 0, "commits_low_confidence": false, "score": 18.4, "description": "", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 775, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.045, "scorecard_score": 1.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-06T11:56:09Z", "slug": "fortnox-mcp", "full_fetched_at": "2026-10-11T16:02:20Z", "source_note": "", "github_homepage": "https://fortnox-mcp.vercel.app", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: .claude/skills/mcp-builder/reference/node_mcp_server.md", "Found MCP-related server path: .claude/skills/mcp-builder/reference/python_mcp_server.md", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Anthropic dependency 'anthropic' in .claude/skills/mcp-builder/scripts/requirements.txt", "Found Redis dependency 'redis' in package.json", "README/docs also mention Redis", "Found credential/config marker 'FORTNOX_REFRESH_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in package.json", "README/docs also mention database capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 27.7, "trust_score_v2": 27.7, "rank_v2": 1340, "rank_v2_delta": 360, "trust_v2_adjustment": 0.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.1, "identity": 10.8, "transparency": 9.8, "maintenance": 0.9, "adoption": 3.9 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MindSearch", "repo": "InternLM/MindSearch", "display_repo": "", "url": "https://github.com/InternLM/MindSearch", "listing_class": "agent", "rank": 1341, "previous_rank": 1339, "rank_delta": -2, "stars": 6937, "stars_fmt": "6.9k", "forks": 692, "forks_fmt": "692", "last_push": "2025-07-04", "days_ago": 465, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.2, "description": "🔍 An LLM-based Multi-agent Framework of Web Search Engine (like Perplexity.ai Pro and SearchGPT)", "language": "JavaScript", "open_issues": 48, "category": "Research & Data", "category_rank": 32, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 9, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-09-27T17:32:04Z", "slug": "mindsearch", "full_fetched_at": "2026-10-12T04:02:44Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'WEB_SEARCH_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "InternLM/MindSearch", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-07-04)" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 27.5, "trust_score_v2": 27.5, "rank_v2": 1341, "rank_v2_delta": 351, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 8.0, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 9.2 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Hatago MCP Hub", "repo": "himorishige/hatago-mcp-hub", "display_repo": "", "url": "https://github.com/himorishige/hatago-mcp-hub", "listing_class": "agent", "rank": 1342, "previous_rank": 1338, "rank_delta": -4, "stars": 27, "stars_fmt": "27", "forks": 5, "forks_fmt": "5", "last_push": "2025-09-14", "days_ago": 393, "weekly_commits": 0, "commits_low_confidence": false, "score": 12.3, "description": "Hatago MCP Hub is a lightweight hub server that provides unified management for multiple MCP servers.", "language": "TypeScript", "open_issues": 4, "category": "MCP Servers", "category_rank": 776, "npm_package": "@himorishige/hatago-mcp-hub", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 55, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.23, "scorecard_score": 2.9, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-11T16:43:59Z", "slug": "hatago-mcp-hub", "full_fetched_at": "2026-10-12T16:02:32Z", "source_note": "", "github_homepage": "https://hatago.dev", "homepage_icon": "/site-icons/e2ee2655990e190f.png", "homepage_icon_for": "https://hatago.dev", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/cli/package.json", "Found MCP dependency '@modelcontextprotocol/sdk' in packages/hub/package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'WORK_GITHUB_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@himorishige/hatago-mcp-hub' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@himorishige/hatago-mcp-hub", "version": "0.0.16" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:32Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "himorishige/hatago-mcp-hub", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-14)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 27.4, "trust_score_v2": 27.4, "rank_v2": 1342, "rank_v2_delta": 388, "trust_v2_adjustment": 5.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.8, "identity": 10.8, "transparency": 11.0, "maintenance": 0.0, "adoption": 5.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "typedai", "repo": "TrafficGuard/typedai", "display_repo": "", "url": "https://github.com/TrafficGuard/typedai", "listing_class": "agent", "rank": 1343, "previous_rank": 1340, "rank_delta": -3, "stars": 1198, "stars_fmt": "1.2k", "forks": 91, "forks_fmt": "91", "last_push": "2025-12-22", "days_ago": 294, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.6, "description": "TypeScript AI platform with AI chat, Autonomous agents, Software developer agents, chatbots and more", "language": "TypeScript", "open_issues": 8, "category": "Coding Agents", "category_rank": 74, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 1, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T17:25:03Z", "slug": "typedai", "full_fetched_at": "2026-10-12T00:02:29Z", "source_note": "", "github_homepage": "https://typedai.dev", "homepage_icon": "/site-icons/b4e96f2cdcfeaf8a.png", "homepage_icon_for": "https://typedai.dev", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "Google Gemini", "Groq", "Mistral AI", "OpenAI", "OpenRouter", "Perplexity", "Postgres", "SerpAPI", "xAI Grok" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in package.json", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "README/docs also mention Anthropic", "Found Google Gemini dependency 'vertexai' in package.json", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "browser", "code", "database", "search" ], "confidence": "high", "evidence": [ "Found declared path: claude-plugins/README.md", "README/docs also mention a declared plugin/integration surface", "Found browser dependency 'playwright' in package.json", "Found search dependency 'serpapi' in package.json", "README/docs also mention search capabilities", "Found database dependency 'pg' in package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 27.1, "trust_score_v2": 27.1, "rank_v2": 1343, "rank_v2_delta": 314, "trust_v2_adjustment": -4.5, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.9, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -1.5, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Toolbox for Databases", "repo": "googleapis/mcp-toolbox", "display_repo": "", "url": "https://github.com/googleapis/mcp-toolbox", "listing_class": "agent", "rank": 1344, "previous_rank": 1341, "rank_delta": -3, "stars": 16651, "stars_fmt": "16.7k", "forks": 1757, "forks_fmt": "1.8k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 62, "commits_low_confidence": false, "score": 87.8, "description": "MCP Toolbox for Databases is an open source MCP server for databases.", "language": "Go", "open_issues": 153, "category": "MCP Servers", "category_rank": 777, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.91, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "mcp-toolbox-for-databases", "full_fetched_at": "2026-10-12T04:02:39Z", "source_note": "", "github_homepage": "https://mcp-toolbox.dev/documentation/introduction/", "homepage_icon": "/site-icons/17fdcf3a1524587b.png", "homepage_icon_for": "https://mcp-toolbox.dev/documentation/introduction/", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Google Gemini" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: extensions/2026-07-28/README.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 27.0, "trust_score_v2": 27.0, "rank_v2": 1344, "rank_v2_delta": 363, "trust_v2_adjustment": 0.4, "trust_confidence": 0.5, "trust_breakdown": { "safety": 4.6, "identity": 10.8, "transparency": 8.5, "maintenance": 19.2, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SwarmZero", "repo": "swarmzero/swarmzero", "display_repo": "", "url": "https://github.com/swarmzero/swarmzero", "listing_class": "agent", "rank": 1345, "previous_rank": 1342, "rank_delta": -3, "stars": 276, "stars_fmt": "276", "forks": 53, "forks_fmt": "53", "last_push": "2025-08-06", "days_ago": 432, "weekly_commits": 0, "commits_low_confidence": false, "score": 22.8, "description": "SwarmZero's SDK for building AI agents, swarms of agents and much more.", "language": "Python", "open_issues": 0, "category": "Multi-Agent Systems", "category_rank": 42, "npm_package": "", "crate_package": "", "pypi_package": "swarmzero", "docker_image": "", "vscode_extension": "", "weekly_downloads": 21, "dl_source": "pypi", "hn_mentions_30d": 1, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.627, "scorecard_score": 2.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-02T23:01:03Z", "slug": "swarmzero", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://swarmzero.ai", "homepage_icon": "/site-icons/ec3ba617e1fbac10.png", "homepage_icon_for": "https://swarmzero.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "OpenAI", "Postgres", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Amazon Bedrock dependency 'boto3' in pyproject.toml", "README/docs also mention Amazon Bedrock", "Found Postgres dependency 'asyncpg' in pyproject.toml", "Found Redis dependency 'redis' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'swarmzero' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "swarmzero", "version": "0.0.3" } ], "found": [], "worst": null, "checked_at": "2026-10-12T08:02:30Z" }, "evidence_grade": "D", "coverage_grade": "A", "signal_coverage": 0.8, "signal_types": 4, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "swarmzero/swarmzero", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-08-06)" } ], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 26.8, "trust_score_v2": 26.8, "rank_v2": 1345, "rank_v2_delta": 367, "trust_v2_adjustment": 1.2, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.4, "identity": 10.8, "transparency": 10.7, "maintenance": 0.0, "adoption": 7.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Driflyte MCP Server", "repo": "serkan-ozal/driflyte-mcp-server", "display_repo": "", "url": "https://github.com/serkan-ozal/driflyte-mcp-server", "listing_class": "agent", "rank": 1346, "previous_rank": 1343, "rank_delta": -3, "stars": 11, "stars_fmt": "11", "forks": 6, "forks_fmt": "6", "last_push": "2025-10-02", "days_ago": 375, "weekly_commits": 0, "commits_low_confidence": false, "score": 10.4, "description": "The Driflyte MCP Server exposes tools that allow AI assistants to query and retrieve topic-specific knowledge from recursively crawled and indexed web pages.", "language": "TypeScript", "open_issues": 1, "category": "MCP Servers", "category_rank": 778, "npm_package": "@driflyte/mcp-server", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": 212, "dl_source": "npm", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": false, "pypi_provenance": null, "signed_commits_ratio": 0.094, "scorecard_score": 2.5, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 10, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T15:06:34Z", "slug": "driflyte-mcp-server", "full_fetched_at": "2026-10-12T00:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP dependency '@modelcontextprotocol/sdk' in package.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "npm package '@driflyte/mcp-server' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "npm", "name": "@driflyte/mcp-server", "version": "0.1.15" } ], "found": [], "worst": null, "checked_at": "2026-10-12T00:02:09Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "serkan-ozal/driflyte-mcp-server", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-10-02)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 26.7, "trust_score_v2": 26.7, "rank_v2": 1346, "rank_v2_delta": 390, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 10.6, "maintenance": 0.0, "adoption": 5.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Chat on Steroids", "repo": "totec448-spec/chat-on-steroids", "display_repo": "", "url": "https://github.com/totec448-spec/chat-on-steroids", "listing_class": "agent", "rank": 1347, "previous_rank": 1345, "rank_delta": -2, "stars": 4686, "stars_fmt": "4.7k", "forks": 612, "forks_fmt": "612", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1885, "commits_low_confidence": false, "score": 85.0, "description": "Cross-platform local MCP capabilities for ChatGPT with Chrome integration, Goal, Compact & Resume, and durable multi-agent workflows.", "language": "TypeScript", "open_issues": 18, "category": "MCP Servers", "category_rank": 779, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.37, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "chat-on-steroids", "full_fetched_at": "2026-10-12T16:02:08Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: src/main/mcp/server.ts", "Found MCP dependency 'modelcontextprotocol' in package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found Anthropic dependency 'anthropic' in package.json" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: docs/licenses/plugins/README.md", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 26.7, "trust_score_v2": 26.7, "rank_v2": 1347, "rank_v2_delta": 367, "trust_v2_adjustment": 1.7, "trust_confidence": 0.5, "trust_breakdown": { "safety": 1.8, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Supervision", "repo": "roboflow/supervision", "display_repo": "", "url": "https://github.com/roboflow/supervision", "listing_class": "agent", "rank": 1348, "previous_rank": 1347, "rank_delta": -1, "stars": 51181, "stars_fmt": "51.2k", "forks": 4873, "forks_fmt": "4.9k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 131, "commits_low_confidence": false, "score": 95.4, "description": "We write your reusable computer vision tools. 💜", "language": "Python", "open_issues": 40, "category": "Needs review", "category_rank": 11, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "supervision", "full_fetched_at": "2026-10-12T08:02:22Z", "source_note": "", "github_homepage": "https://supervision.roboflow.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'ROBOFLOW_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 26.6, "trust_score_v2": 26.6, "rank_v2": 1348, "rank_v2_delta": 350, "trust_v2_adjustment": -1.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "JARVIS / HuggingGPT", "repo": "microsoft/JARVIS", "display_repo": "", "url": "https://github.com/microsoft/JARVIS", "listing_class": "agent", "rank": 1349, "previous_rank": 1346, "rank_delta": -3, "stars": 25426, "stars_fmt": "25.4k", "forks": 2245, "forks_fmt": "2.2k", "last_push": "2025-07-29", "days_ago": 440, "weekly_commits": 0, "commits_low_confidence": false, "score": 42.0, "description": "JARVIS, a system to connect LLMs with ML community. Paper: https://arxiv.org/pdf/2303.17580.pdf", "language": "Python", "open_issues": 4187, "category": "Agent Frameworks", "category_rank": 124, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.55, "scorecard_score": 2.3, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 10, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T22:54:43Z", "slug": "jarvis-hugginggpt", "full_fetched_at": "2026-10-12T04:02:52Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in easytool/requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "microsoft/JARVIS", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-07-29)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 26.5, "trust_score_v2": 26.5, "rank_v2": 1349, "rank_v2_delta": 350, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 5.6, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 10.6 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MCP Apple Notes", "repo": "henilcalagiya/mcp-apple-notes", "display_repo": "", "url": "https://github.com/henilcalagiya/mcp-apple-notes", "listing_class": "agent", "rank": 1350, "previous_rank": 1348, "rank_delta": -2, "stars": 52, "stars_fmt": "52", "forks": 8, "forks_fmt": "8", "last_push": "2025-09-11", "days_ago": 396, "weekly_commits": 0, "commits_low_confidence": false, "score": 14.7, "description": "An local mcp server for interacting with Apple Notes via LLM.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 780, "npm_package": "", "crate_package": "", "pypi_package": "mcp-apple-notes", "docker_image": "", "vscode_extension": "", "weekly_downloads": 31, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.069, "scorecard_score": 2.2, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T19:18:54Z", "slug": "mcp-apple-notes", "full_fetched_at": "2026-10-12T16:02:16Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "match", "confidence": "high", "summary": "Published package metadata matches the tracked repo", "evidence": [ "pypi package 'mcp-apple-notes' points to the tracked repo" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-apple-notes", "version": "0.1.2" } ], "found": [], "worst": null, "checked_at": "2026-10-12T16:02:16Z" }, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "henilcalagiya/mcp-apple-notes", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-11)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 26.4, "trust_score_v2": 26.4, "rank_v2": 1350, "rank_v2_delta": 387, "trust_v2_adjustment": 6.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.4, "maintenance": 0.0, "adoption": 6.1 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 4.0 }, "pending_signals": false }, { "name": "Devika", "repo": "stitionai/devika", "display_repo": "", "url": "https://github.com/stitionai/devika", "listing_class": "agent", "rank": 1351, "previous_rank": 1350, "rank_delta": -1, "stars": 19553, "stars_fmt": "19.6k", "forks": 2566, "forks_fmt": "2.6k", "last_push": "2025-09-25", "days_ago": 382, "weekly_commits": 0, "commits_low_confidence": false, "score": 41.6, "description": "Devika is the first open-source implementation of an Agentic Software Engineer. Initially started as an open-source alternative to Devin.", "language": "Python", "open_issues": 148, "category": "Coding Agents", "category_rank": 75, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 4, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.56, "scorecard_score": 3.0, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 3, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-04T22:25:24Z", "slug": "devika", "full_fetched_at": "2026-10-12T08:02:30Z", "source_note": "", "github_homepage": "https://winfunc.com", "homepage_icon": "/site-icons/9960716d57bb81b7.png", "homepage_icon_for": "https://winfunc.com", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Groq", "Mistral AI", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-generativeai' in requirements.txt", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "code" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in requirements.txt", "README/docs also mention browser capabilities", "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "stitionai/devika", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-25)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 26.2, "trust_score_v2": 26.2, "rank_v2": 1351, "rank_v2_delta": 338, "trust_v2_adjustment": -2.6, "trust_confidence": 1.0, "trust_breakdown": { "safety": 6.6, "identity": 10.8, "transparency": 11.1, "maintenance": 0.0, "adoption": 10.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Diagram Design", "repo": "cathrynlavery/diagram-design", "display_repo": "", "url": "https://github.com/cathrynlavery/diagram-design", "listing_class": "skill", "rank": 363, "previous_rank": 361, "rank_delta": -2, "stars": 52076, "stars_fmt": "52.1k", "forks": 3281, "forks_fmt": "3.3k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 134, "commits_low_confidence": false, "score": 94.7, "description": "Editorial diagram design for Claude Code, Codex, GitHub Copilot, Cursor, Factory Droid, and Pi. 44 diagram types. Self-contained HTML + SVG. No shadows. No Mermaid slop.", "language": "HTML", "open_issues": 24, "category": "Agent Skills", "category_rank": 363, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.43, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "diagram-design", "full_fetched_at": "2026-10-12T12:02:34Z", "source_note": "", "github_homepage": "https://diagramdesign.dev", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/plugins/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 26.1, "trust_score_v2": 26.1, "rank_v2": 363, "rank_v2_delta": 1345, "trust_v2_adjustment": -0.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 2.2, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Clawhub", "repo": "openclaw/clawhub", "display_repo": "", "url": "https://github.com/openclaw/clawhub", "listing_class": "skill", "rank": 364, "previous_rank": 362, "rank_delta": -2, "stars": 9501, "stars_fmt": "9.5k", "forks": 1493, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 139, "commits_low_confidence": false, "score": 88.7, "description": "Skill + Plugin Registry for OpenClaw", "language": "TypeScript", "open_issues": 53, "category": "Agent Skills", "category_rank": 364, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.99, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "clawhub", "full_fetched_at": "2026-10-12T00:02:14Z", "source_note": "", "github_homepage": "https://clawhub.ai", "homepage_icon": "/site-icons/5b1c89116aadfb38.png", "homepage_icon_for": "https://clawhub.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .agents/skills/convex-improve-convex-plugin/SKILL.md", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 25.6, "trust_score_v2": 25.6, "rank_v2": 364, "rank_v2_delta": 1338, "trust_v2_adjustment": -1.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 9.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Tigerless Agent Memory", "repo": "tigerless-labs/agent-memory", "display_repo": "", "url": "https://github.com/tigerless-labs/agent-memory", "listing_class": "agent", "rank": 1352, "previous_rank": 1351, "rank_delta": -1, "stars": 3403, "stars_fmt": "3.4k", "forks": 144, "forks_fmt": "144", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 70, "commits_low_confidence": false, "score": 79.4, "description": "Long-term memory runtime for AI agents — plain Markdown as the source of truth, local ranked retrieval, and an independent sleep-time Manage layer. Claude Code and Codex share one store. No API key.", "language": "Python", "open_issues": 6, "category": "Memory & Knowledge", "category_rank": 49, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.36, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "tigerless-agent-memory", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: packages/mcp/src/agent_memory/mcp/server.py" ] }, "external_service_dependencies": { "providers": [ "Google Gemini", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found Google Gemini credential/config marker 'GEMINI_API_KEY'", "README/docs also mention Google Gemini", "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 25.0, "trust_score_v2": 25.0, "rank_v2": 1352, "rank_v2_delta": 364, "trust_v2_adjustment": 0.5, "trust_confidence": 0.5, "trust_breakdown": { "safety": 1.8, "identity": 10.8, "transparency": 8.5, "maintenance": 19.4, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AgentScope Java", "repo": "agentscope-ai/agentscope-java", "display_repo": "", "url": "https://github.com/agentscope-ai/agentscope-java", "listing_class": "agent", "rank": 1353, "previous_rank": 1352, "rank_delta": -1, "stars": 5941, "stars_fmt": "5.9k", "forks": 1471, "forks_fmt": "1.5k", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 114, "commits_low_confidence": false, "score": 87.3, "description": "Build distributed, production-grade, long-running agents.", "language": "Java", "open_issues": 621, "category": "Agent Frameworks", "category_rank": 125, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 1.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "agentscope-java", "full_fetched_at": "2026-10-12T12:02:33Z", "source_note": "", "github_homepage": "https://java.agentscope.io/", "homepage_icon": "/site-icons/dedf6ed649339c6b.png", "homepage_icon_for": "https://java.agentscope.io/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: agentscope-examples/agents/agentscope-paw/src/main/resources/catalog/mcp-servers.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'DASHSCOPE_API_KEY'" ] }, "tool_plugin_surface": { "plugin_system": "marketplace", "tool_tags": [], "confidence": "high", "evidence": [ "Found marketplace path: agentscope-examples/agents/agentscope-dataagent/src/main/java/io/agentscope/dataagent/runtime/marketplace/DataAgentMarketplace.java", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 24.7, "trust_score_v2": 24.7, "rank_v2": 1353, "rank_v2_delta": 353, "trust_v2_adjustment": -2.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 5.0, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -1.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AIlice", "repo": "myshell-ai/AIlice", "display_repo": "", "url": "https://github.com/myshell-ai/AIlice", "listing_class": "agent", "rank": 1354, "previous_rank": 1353, "rank_delta": -1, "stars": 1418, "stars_fmt": "1.4k", "forks": 209, "forks_fmt": "209", "last_push": "2025-08-18", "days_ago": 420, "weekly_commits": 0, "commits_low_confidence": false, "score": 29.7, "description": "AIlice is a fully autonomous, general-purpose AI agent.", "language": "Python", "open_issues": 7, "category": "Agent Frameworks", "category_rank": 126, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 5, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": 3.1, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": 0, "Vulnerabilities": 10 }, "scorecard_scanned_at": "2026-10-06T04:33:29Z", "slug": "ailice", "full_fetched_at": "2026-10-12T08:02:09Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Mistral AI", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Mistral AI dependency 'mistralai' in pyproject.toml", "README/docs also mention Mistral AI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'selenium' in pyproject.toml" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "myshell-ai/AIlice", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-08-18)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 24.1, "trust_score_v2": 24.1, "rank_v2": 1354, "rank_v2_delta": 367, "trust_v2_adjustment": 0.7, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.9, "identity": 10.8, "transparency": 11.1, "maintenance": 0.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Open Operator", "repo": "browserbase/open-operator", "display_repo": "", "url": "https://github.com/browserbase/open-operator", "listing_class": "agent", "rank": 1355, "previous_rank": 1354, "rank_delta": -1, "stars": 1950, "stars_fmt": "1.9k", "forks": 322, "forks_fmt": "322", "last_push": "2026-05-04", "days_ago": 161, "weekly_commits": 0, "commits_low_confidence": false, "score": 34.2, "description": "A template for building web agents with Stagehand on Browserbase", "language": "TypeScript", "open_issues": 14, "category": "Browser & Computer Use", "category_rank": 44, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.232, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 5, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 4, "Contributors": 10, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 0, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T01:42:09Z", "slug": "open-operator", "full_fetched_at": "2026-10-12T04:02:09Z", "source_note": "", "github_homepage": "https://operator.browserbase.com/", "homepage_icon": "/site-icons/6a5314ffca3778c3.png", "homepage_icon_for": "https://operator.browserbase.com/", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Browserbase", "OpenAI" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in package.json", "Found Browserbase dependency 'browserbase' in package.json", "Found Browserbase credential/config marker 'BROWSERBASE_API_KEY'", "README/docs also mention Browserbase" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in package.json", "README/docs also mention browser capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "browserbase/open-operator", "criterion": "5.1", "detail": "repository is archived" }, { "repo": "browserbase/open-operator", "criterion": "4.1.1", "detail": "no declared license (GitHub license field is null)" } ], "license_spdx": null, "license_type": "unlicensed", "license_override": "", "trust_score": 23.9, "trust_score_v2": 23.9, "rank_v2": 1355, "rank_v2_delta": 354, "trust_v2_adjustment": -2.3, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 2.0, "maintenance": 1.3, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "cost-xray", "repo": "tigerless-labs/cost-xray", "display_repo": "", "url": "https://github.com/tigerless-labs/cost-xray", "listing_class": "agent", "rank": 1356, "previous_rank": 1355, "rank_delta": -1, "stars": 4696, "stars_fmt": "4.7k", "forks": 322, "forks_fmt": "322", "last_push": "2026-09-29", "days_ago": 13, "weekly_commits": 5, "commits_low_confidence": false, "score": 66.7, "description": "See what Claude Code and Codex actually send to the API — and what each part costs.", "language": "Python", "open_issues": 10, "category": "Observability & Evaluation", "category_rank": 25, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.263, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "cost-xray", "full_fetched_at": "2026-10-12T16:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "medium", "evidence": [ "README/docs explicitly mention an MCP server" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 23.8, "trust_score_v2": 23.8, "rank_v2": 1356, "rank_v2_delta": 377, "trust_v2_adjustment": 2.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 1.3, "identity": 10.8, "transparency": 8.5, "maintenance": 14.2, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Plandex", "repo": "plandex-ai/plandex", "display_repo": "", "url": "https://github.com/plandex-ai/plandex", "listing_class": "agent", "rank": 1357, "previous_rank": 1357, "rank_delta": 0, "stars": 15712, "stars_fmt": "15.7k", "forks": 1175, "forks_fmt": "1.2k", "last_push": "2025-10-03", "days_ago": 374, "weekly_commits": 0, "commits_low_confidence": false, "score": 39.5, "description": "Open source AI coding agent. Designed for large projects and real world tasks.", "language": "Go", "open_issues": 43, "category": "Coding Agents", "category_rank": 76, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": 2.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 3, "CI-Tests": -1, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": 10, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": 0, "SAST": 0, "Security-Policy": 0, "Signed-Releases": 0, "Token-Permissions": 0, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-10T08:09:08Z", "slug": "plandex", "full_fetched_at": "2026-10-12T12:02:22Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenRouter credential/config marker 'OPENROUTER_API_KEY'", "README/docs also mention OpenRouter" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "plandex-ai/plandex", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-10-03)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 23.5, "trust_score_v2": 23.5, "rank_v2": 1357, "rank_v2_delta": 360, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 10.5, "maintenance": 0.0, "adoption": 10.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "mcp-agent", "repo": "lastmile-ai/mcp-agent", "display_repo": "", "url": "https://github.com/lastmile-ai/mcp-agent", "listing_class": "agent", "rank": 1358, "previous_rank": 1358, "rank_delta": 0, "stars": 8570, "stars_fmt": "8.6k", "forks": 893, "forks_fmt": "893", "last_push": "2026-01-25", "days_ago": 260, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.3, "description": "Build effective agents using Model Context Protocol and simple workflow patterns", "language": "Python", "open_issues": 77, "category": "Agent Frameworks", "category_rank": 127, "npm_package": "", "crate_package": "", "pypi_package": "mcp-agent", "docker_image": "", "vscode_extension": "", "weekly_downloads": 9118, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.72, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "mcp-agent", "full_fetched_at": "2026-10-12T04:02:50Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: examples/basic/mcp_server_aggregator/README.md", "Found MCP-related server path: examples/basic/mcp_server_aggregator/main.py", "Found MCP-related server docs path: docs/cloud/mcp-agent-cloud/deploy-mcp-server.mdx" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Cohere", "Google Gemini", "OpenAI", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "README/docs also mention Anthropic", "Found Google Gemini dependency 'google-genai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "database" ], "confidence": "medium", "evidence": [ "Found database dependency 'redis' in pyproject.toml" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'mcp-agent' has a non-GitHub or unparseable source URL" ] }, "advisories": { "checked": [ { "ecosystem": "PyPI", "name": "mcp-agent", "version": "0.2.6" } ], "found": [], "worst": null, "checked_at": "2026-10-12T04:02:50Z" }, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 23.3, "trust_score_v2": 23.3, "rank_v2": 1358, "rank_v2_delta": 355, "trust_v2_adjustment": -1.8, "trust_confidence": 0.67, "trust_breakdown": { "safety": 3.6, "identity": 10.8, "transparency": 8.5, "maintenance": 0.0, "adoption": 14.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -3.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "AWorld", "repo": "inclusionAI/AWorld", "display_repo": "", "url": "https://github.com/inclusionAI/AWorld", "listing_class": "agent", "rank": 1359, "previous_rank": 1359, "rank_delta": 0, "stars": 1242, "stars_fmt": "1.2k", "forks": 130, "forks_fmt": "130", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 428, "commits_low_confidence": false, "score": 78.4, "description": "Search, understand, reproduce, and improve an idea with ease", "language": "Python", "open_issues": 41, "category": "Agent Frameworks", "category_rank": 128, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "aworld", "full_fetched_at": "2026-10-11T20:01:50Z", "source_note": "", "github_homepage": "https://www.aworldagents.com", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: aworld/experimental/mcp_server/__init__.py", "Found MCP-related server path: aworld/experimental/mcp_server/agent_server.py", "Found MCP-related server test path: env/aworld-env/env-images/mcp-server-base/mcp_server_proxy/tests/core/mcp_client.py", "Found MCP-related server test path: env/aworld-env/env-images/mcp-server-base/mcp_server_proxy/tests/core/mcp_client_test.py" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "medium", "evidence": [ "Found declared path: aworld-cli/src/aworld_cli/builtin_plugins/__init__.py" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 23.2, "trust_score_v2": 23.2, "rank_v2": 1359, "rank_v2_delta": 361, "trust_v2_adjustment": -0.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.3, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 7.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Agent Laboratory", "repo": "SamuelSchmidgall/AgentLaboratory", "display_repo": "", "url": "https://github.com/SamuelSchmidgall/AgentLaboratory", "listing_class": "agent", "rank": 1360, "previous_rank": 1360, "rank_delta": 0, "stars": 5901, "stars_fmt": "5.9k", "forks": 804, "forks_fmt": "804", "last_push": "2025-08-20", "days_ago": 418, "weekly_commits": 0, "commits_low_confidence": false, "score": 36.1, "description": "Agent Laboratory is an end-to-end autonomous research workflow meant to assist you as the human researcher toward implementing your research ideas", "language": "Python", "open_issues": 39, "category": "Research & Data", "category_rank": 33, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": 0, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.386, "scorecard_score": 1.8, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 2, "Contributors": 3, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-07-11T08:14:23Z", "slug": "agent-laboratory", "full_fetched_at": "2026-10-12T08:02:19Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Google Gemini dependency 'google-generativeai' in requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "B", "signal_coverage": 0.6, "signal_types": 3, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "SamuelSchmidgall/AgentLaboratory", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-08-20)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 23.1, "trust_score_v2": 23.1, "rank_v2": 1360, "rank_v2_delta": 358, "trust_v2_adjustment": -1.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 4.2, "identity": 10.8, "transparency": 10.0, "maintenance": 0.0, "adoption": 9.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Prometheus MCP Server", "repo": "pab1it0/prometheus-mcp-server", "display_repo": "", "url": "https://github.com/pab1it0/prometheus-mcp-server", "listing_class": "agent", "rank": 1361, "previous_rank": 1361, "rank_delta": 0, "stars": 518, "stars_fmt": "518", "forks": 104, "forks_fmt": "104", "last_push": "2026-10-11", "days_ago": 1, "weekly_commits": 7, "commits_low_confidence": true, "score": 61.9, "description": "A Model Context Protocol (MCP) server that enables AI agents and LLMs to query and analyze Prometheus metrics through standardized interfaces.", "language": "Python", "open_issues": 0, "category": "MCP Servers", "category_rank": 781, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "ghcr.io/pab1it0/prometheus-mcp-server:1.6.2", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.94, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "prometheus-mcp-server", "full_fetched_at": "2026-10-11T20:02:07Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: charts/prometheus-mcp-server/.helmignore", "Found MCP-related server path: charts/prometheus-mcp-server/Chart.yaml", "Found MCP-related server test path: charts/prometheus-mcp-server/templates/tests/test-connection.yaml" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": true, "confidence": "low", "evidence": [ "Found credential/config marker 'PROMETHEUS_TOKEN'" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 23.1, "trust_score_v2": 23.1, "rank_v2": 1361, "rank_v2_delta": 370, "trust_v2_adjustment": 1.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 4.7, "identity": 10.8, "transparency": 8.5, "maintenance": 13.7, "adoption": 6.5 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -1.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Unreal Agent", "repo": "unreallabsai/unreal-agent", "display_repo": "", "url": "https://github.com/unreallabsai/unreal-agent", "listing_class": "agent", "rank": 1362, "previous_rank": 1356, "rank_delta": -6, "stars": 2190, "stars_fmt": "2.2k", "forks": 127, "forks_fmt": "127", "last_push": "2026-10-06", "days_ago": 6, "weekly_commits": 51, "commits_low_confidence": false, "score": 75.5, "description": "Async-first agent harness", "language": "Go", "open_issues": 8, "category": "Agent Frameworks", "category_rank": 129, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.1, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "unreal-agent", "full_fetched_at": "2026-10-12T12:02:39Z", "source_note": "", "github_homepage": "https://unreallabs.ai", "homepage_icon": "/site-icons/4f93a4769fb4337a.png", "homepage_icon_for": "https://unreallabs.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 23.1, "trust_score_v2": 23.1, "rank_v2": 1362, "rank_v2_delta": 360, "trust_v2_adjustment": 0.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.5, "identity": 10.8, "transparency": 8.5, "maintenance": 18.4, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "SoL-Pi", "repo": "NVlabs/SoL-Pi", "display_repo": "", "url": "https://github.com/NVlabs/SoL-Pi", "listing_class": "agent", "rank": 1363, "previous_rank": 1362, "rank_delta": -1, "stars": 3438, "stars_fmt": "3.4k", "forks": 273, "forks_fmt": "273", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 31, "commits_low_confidence": false, "score": 76.3, "description": "SoL-Pi: Scaling Auto-Research Loops for Efficient Agent Harnesses", "language": "TypeScript", "open_issues": 28, "category": "Research & Data", "category_rank": 34, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.302, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "sol-pi", "full_fetched_at": "2026-10-12T16:02:00Z", "source_note": "", "github_homepage": "https://nvlabs.github.io/SoL-Pi/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "extension-based", "tool_tags": [], "confidence": "high", "evidence": [ "Found extension-based path: src/sol-pi/extensions/action-fusion/file-queue.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 23.0, "trust_score_v2": 23.0, "rank_v2": 1363, "rank_v2_delta": 356, "trust_v2_adjustment": -0.6, "trust_confidence": 0.5, "trust_breakdown": { "safety": 1.5, "identity": 10.8, "transparency": 8.5, "maintenance": 18.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "geo-sleuth", "repo": "Oldcircle/geo-sleuth", "display_repo": "", "url": "https://github.com/Oldcircle/geo-sleuth", "listing_class": "skill", "rank": 365, "previous_rank": 364, "rank_delta": -1, "stars": 2155, "stars_fmt": "2.2k", "forks": 266, "forks_fmt": "266", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 27, "commits_low_confidence": false, "score": 74.4, "description": "An agent skill that finds where a photo was taken — OpenStreetMap geometry, elevation skylines, satellite imagery and street view — and shows its work. Works with Claude Code, Codex, Cursor, Gemini CLI, OpenCode and GitHub Copilot.", "language": "Python", "open_issues": 2, "category": "Agent Skills", "category_rank": 365, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.148, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "geo-sleuth", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 22.9, "trust_score_v2": 22.9, "rank_v2": 365, "rank_v2_delta": 1360, "trust_v2_adjustment": 0.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.7, "identity": 10.8, "transparency": 8.5, "maintenance": 17.8, "adoption": 8.0 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Skills", "repo": "alirezarezvani/claude-skills", "display_repo": "", "url": "https://github.com/alirezarezvani/claude-skills", "listing_class": "skill", "rank": 366, "previous_rank": 365, "rank_delta": -1, "stars": 28061, "stars_fmt": "28.1k", "forks": 3929, "forks_fmt": "3.9k", "last_push": "2026-08-30", "days_ago": 43, "weekly_commits": 0, "commits_low_confidence": false, "score": 62.4, "description": "380 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 380+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering, marketing, product, compliance, C-level advisory, research, business operations…", "language": "Python", "open_issues": 13, "category": "Agent Skills", "category_rank": 366, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.82, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "claude-skills", "full_fetched_at": "2026-10-12T08:02:41Z", "source_note": "", "github_homepage": "https://alirezarezvani.medium.com/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: .codex/skills/mcp-server-builder", "Found MCP-related server path: .gemini/skills/mcp-server-builder/SKILL.md", "Found MCP-related server docs path: docs/skills/engineering/mcp-server-builder.md", "Found MCP dependency '@modelcontextprotocol/sdk' in engineering-team/playwright-pro/integrations/testrail-mcp/package.json" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "Redis" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found Redis dependency 'redis' in engineering/skills/dependency-auditor/test-project/package.json", "Ships a Claude Code plugin manifest (agent-launcher/.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [ "database" ], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface", "Found database dependency 'redis' in engineering/skills/dependency-auditor/test-project/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 22.5, "trust_score_v2": 22.5, "rank_v2": 366, "rank_v2_delta": 1369, "trust_v2_adjustment": 0.9, "trust_confidence": 0.5, "trust_breakdown": { "safety": 4.1, "identity": 10.8, "transparency": 8.5, "maintenance": 9.1, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -0.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "LLM Space", "repo": "deer-flow/llm-space", "display_repo": "", "url": "https://github.com/deer-flow/llm-space", "listing_class": "agent", "rank": 1364, "previous_rank": 1363, "rank_delta": -1, "stars": 2011, "stars_fmt": "2.0k", "forks": 217, "forks_fmt": "217", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 26, "commits_low_confidence": false, "score": 73.6, "description": "A desktop app to prototype agent ideas, inspect every harness step, replay failures, and evaluate performance, all in one place. Local-first, cloud-ready for managed agents.", "language": "TypeScript", "open_issues": 5, "category": "Observability & Evaluation", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "llm-space", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "https://deer-flow.github.io/llm-space/", "homepage_icon": "/site-icons/1aef6cb9d732d493.png", "homepage_icon_for": "https://deer-flow.github.io/llm-space/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: examples/atlas-plugin/mcp.json" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: apps/desktop/src/bun/plugins/memory-plugin-files.ts", "README/docs also mention a extension-based plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 22.5, "trust_score_v2": 22.5, "rank_v2": 1364, "rank_v2_delta": 362, "trust_v2_adjustment": -0.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.7, "identity": 10.8, "transparency": 8.5, "maintenance": 17.7, "adoption": 7.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Logo Design Skill", "repo": "kaankiziltug/logo-design-skill", "display_repo": "", "url": "https://github.com/kaankiziltug/logo-design-skill", "listing_class": "skill", "rank": 367, "previous_rank": 367, "rank_delta": 0, "stars": 2839, "stars_fmt": "2.8k", "forks": 206, "forks_fmt": "206", "last_push": "2026-09-30", "days_ago": 12, "weekly_commits": 23, "commits_low_confidence": false, "score": 72.2, "description": "A comprehensive logo-design skill for Claude, Gemini CLI, Codex and other AI agents: principles, process, SVG craft, testing tools and a 1,400+ logo reference library.", "language": "HTML", "open_issues": 0, "category": "Agent Skills", "category_rank": 367, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.174, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "logo-design-skill", "full_fetched_at": "2026-10-12T12:02:34Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 22.3, "trust_score_v2": 22.3, "rank_v2": 367, "rank_v2_delta": 1360, "trust_v2_adjustment": -0.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.9, "identity": 10.8, "transparency": 8.5, "maintenance": 16.7, "adoption": 8.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Obsidian Skills", "repo": "kepano/obsidian-skills", "display_repo": "", "url": "https://github.com/kepano/obsidian-skills", "listing_class": "skill", "rank": 368, "previous_rank": 366, "rank_delta": -2, "stars": 49443, "stars_fmt": "49.4k", "forks": 3503, "forks_fmt": "3.5k", "last_push": "2026-09-15", "days_ago": 27, "weekly_commits": 1, "commits_low_confidence": false, "score": 69.7, "description": "Agent skills for Obsidian. Teach your agent to use Obsidian CLI and open formats including Markdown, Bases, JSON Canvas.", "language": "", "open_issues": 37, "category": "Agent Skills", "category_rank": 368, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.612, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "obsidian-skills", "full_fetched_at": "2026-10-12T16:02:36Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic" ], "requires_api_keys": false, "confidence": "medium", "evidence": [ "Ships a Claude Code plugin manifest (.claude-plugin/plugin.json)" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: .claude-plugin/marketplace.json", "README/docs also mention a marketplace plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 22.2, "trust_score_v2": 22.2, "rank_v2": 368, "rank_v2_delta": 1360, "trust_v2_adjustment": -0.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 3.1, "identity": 10.8, "transparency": 8.5, "maintenance": 11.4, "adoption": 11.3 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "oh-my-hermes", "repo": "rlaope/oh-my-hermes", "display_repo": "", "url": "https://github.com/rlaope/oh-my-hermes", "listing_class": "skill", "rank": 369, "previous_rank": 368, "rank_delta": -1, "stars": 3332, "stars_fmt": "3.3k", "forks": 246, "forks_fmt": "246", "last_push": "2026-10-12", "days_ago": 0, "weekly_commits": 1052, "commits_low_confidence": false, "score": 82.2, "description": "All in one plugin for Hermes Agent ⚚ the coding intelligence, a long-term memory system and model optimized workflow packages", "language": "Python", "open_issues": 11, "category": "Agent Skills", "category_rank": 369, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.38, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "oh-my-hermes", "full_fetched_at": "2026-10-12T16:02:21Z", "source_note": "", "github_homepage": "https://rlaope.github.io/oh-my-hermes/", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in src/commands/setup.py", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "Found Anthropic dependency 'anthropic' in src/commands/setup.py", "Found DeepSeek dependency 'deepseek' in src/commands/setup.py", "README/docs also mention DeepSeek", "Found OpenRouter dependency 'openrouter' in src/commands/setup.py" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "shell" ], "confidence": "high", "evidence": [ "Found shell dependency 'subprocess' in src/commands/setup.py", "README/docs also mention shell capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 22.1, "trust_score_v2": 22.1, "rank_v2": 369, "rank_v2_delta": 1346, "trust_v2_adjustment": -2.8, "trust_confidence": 0.5, "trust_breakdown": { "safety": 1.9, "identity": 10.8, "transparency": 8.5, "maintenance": 20.0, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.5, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "DeepAnalyze", "repo": "ruc-datalab/DeepAnalyze", "display_repo": "", "url": "https://github.com/ruc-datalab/DeepAnalyze", "listing_class": "agent", "rank": 1365, "previous_rank": 1365, "rank_delta": 0, "stars": 4695, "stars_fmt": "4.7k", "forks": 740, "forks_fmt": "740", "last_push": "2026-09-23", "days_ago": 19, "weekly_commits": 12, "commits_low_confidence": false, "score": 71.6, "description": "DeepAnalyze is the first agentic LLM for autonomous data science. 🎈你的AI数据分析师，自动分析大量数据，一键生成专业分析报告！", "language": "Python", "open_issues": 17, "category": "Research & Data", "category_rank": 35, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.14, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "deepanalyze", "full_fetched_at": "2026-10-12T08:02:22Z", "source_note": "", "github_homepage": "https://ruc-deepanalyze.github.io", "homepage_icon": "/site-icons/60456996842445e3.png", "homepage_icon_for": "https://ruc-deepanalyze.github.io", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP dependency 'fastmcp' in demo/jupyter/pyproject.toml" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "declared", "tool_tags": [], "confidence": "high", "evidence": [ "Found declared path: deepanalyze/ms-swift/examples/train/grpo/plugin/plugin.py", "README/docs also mention a declared plugin/integration surface" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 21.7, "trust_score_v2": 21.7, "rank_v2": 1365, "rank_v2_delta": 367, "trust_v2_adjustment": -0.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.7, "identity": 10.8, "transparency": 8.5, "maintenance": 15.2, "adoption": 8.8 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "MassGen", "repo": "massgen/MassGen", "display_repo": "", "url": "https://github.com/massgen/MassGen", "listing_class": "agent", "rank": 1366, "previous_rank": 1366, "rank_delta": 0, "stars": 1140, "stars_fmt": "1.1k", "forks": 178, "forks_fmt": "178", "last_push": "2026-06-12", "days_ago": 122, "weekly_commits": 0, "commits_low_confidence": false, "score": 37.0, "description": "🚀 MassGen is an open-source multi-agent scaling system that runs in your terminal, autonomously orchestrating frontier models and agents to collaborate, reason, and produce high-quality results. | Join us on Discord: discord.massgen.ai", "language": "Python", "open_issues": 1, "category": "Multi-Agent Systems", "category_rank": 43, "npm_package": "", "crate_package": "", "pypi_package": "massgen", "docker_image": "", "vscode_extension": "", "weekly_downloads": 348, "dl_source": "pypi", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": false, "signed_commits_ratio": 0.15, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "massgen", "full_fetched_at": "2026-10-12T08:02:01Z", "source_note": "", "github_homepage": "https://docs.massgen.ai", "homepage_icon": "/site-icons/926e95be9e52b928.png", "homepage_icon_for": "https://docs.massgen.ai", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "README/docs explicitly mention an MCP server", "Found MCP-related server path: massgen/mcp_tools/checkpoint/_checkpoint_mcp_server.py", "Found MCP-related server path: massgen/mcp_tools/planning/_planning_mcp_server.py", "Found MCP-related server docs path: docs/source/reference/mcp_server_registry.rst" ] }, "external_service_dependencies": { "providers": [ "Anthropic", "ElevenLabs", "Google Gemini", "Groq", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "Redis", "Together AI", "xAI Grok" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in pyproject.toml", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in pyproject.toml", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "code", "database" ], "confidence": "high", "evidence": [ "Found database dependency 'redis' in pyproject.toml", "README/docs also mention database capabilities", "Found code dependency 'gitpython' in pyproject.toml", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "unknown", "confidence": "low", "summary": "Package source metadata is missing or inconclusive", "evidence": [ "pypi package 'massgen' points to leezekun/massgen, which GitHub redirects to the tracked repo after a rename/transfer (not treated as drift)" ] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 20.5, "trust_score_v2": 20.5, "rank_v2": 1366, "rank_v2_delta": 357, "trust_v2_adjustment": -2.6, "trust_confidence": 0.67, "trust_breakdown": { "safety": 0.8, "identity": 10.8, "transparency": 8.5, "maintenance": 3.9, "adoption": 10.7 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mantis", "repo": "google/mantis", "display_repo": "", "url": "https://github.com/google/mantis", "listing_class": "agent", "rank": 1367, "previous_rank": 1367, "rank_delta": 0, "stars": 2417, "stars_fmt": "2.4k", "forks": 204, "forks_fmt": "204", "last_push": "2026-10-07", "days_ago": 5, "weekly_commits": 27, "commits_low_confidence": false, "score": 73.4, "description": "A modular, stack-agnostic toolkit for AI coding agents to autonomously find, reproduce, and patch vulnerabilities.", "language": "Python", "open_issues": 0, "category": "Security & Guardrails", "category_rank": 26, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "mantis", "full_fetched_at": "2026-10-12T12:02:35Z", "source_note": "", "github_homepage": "https://cloud.google.com/", "homepage_icon": "/site-icons/62cf648830990c6a.png", "homepage_icon_for": "https://cloud.google.com/", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "medium", "evidence": [ "Found MCP-related server path: reference/scripts/mcp_server.py", "Found MCP-related server test path: reference/tests/test_mcp_server.py" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in reference/requirements.txt", "Found Anthropic dependency 'anthropic' in reference/requirements.txt", "Found Google Gemini dependency 'google-genai' in reference/requirements.txt", "Found Multi-provider (LiteLLM) dependency 'litellm' in reference/requirements.txt", "Found Amazon Bedrock dependency 'boto3' in reference/requirements.txt" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "Apache-2.0", "license_type": "open", "license_override": "", "trust_score": 20.4, "trust_score_v2": 20.4, "rank_v2": 1367, "rank_v2_delta": 362, "trust_v2_adjustment": -2.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.0, "identity": 10.8, "transparency": 8.5, "maintenance": 17.4, "adoption": 8.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -2.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Kodu", "repo": "kodu-ai/claude-coder", "display_repo": "", "url": "https://github.com/kodu-ai/claude-coder", "listing_class": "agent", "rank": 1368, "previous_rank": 1368, "rank_delta": 0, "stars": 5214, "stars_fmt": "5.2k", "forks": 198, "forks_fmt": "198", "last_push": "2025-04-30", "days_ago": 530, "weekly_commits": 0, "commits_low_confidence": false, "score": 33.0, "description": "Kodu is an autonomous coding agent that lives in your IDE. It is a VSCode extension that can help you build your dream project step by step by leveraging the latest technologies in automated coding agents ", "language": "TypeScript", "open_issues": 41, "category": "Coding Agents", "category_rank": 77, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.01, "scorecard_score": 1.6, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 6, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 9, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-03T20:33:07Z", "slug": "kodu", "full_fetched_at": "2026-10-12T04:02:48Z", "source_note": "", "github_homepage": "https://www.kodu.ai", "homepage_icon": "/site-icons/c8d6dd34b8a95f3f.png", "homepage_icon_for": "https://www.kodu.ai", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "DeepSeek", "OpenAI", "OpenRouter" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in extension/package.json", "Found Anthropic dependency 'anthropic' in extension/package.json", "Found DeepSeek dependency 'deepseek' in extension/package.json", "Found OpenRouter dependency 'openrouter' in extension/package.json" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "shell" ], "confidence": "high", "evidence": [ "Found browser dependency 'puppeteer' in extension/package.json", "Found shell dependency 'execa' in extension/package.json" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "kodu-ai/claude-coder", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-04-30)" } ], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 19.6, "trust_score_v2": 19.6, "rank_v2": 1368, "rank_v2_delta": 366, "trust_v2_adjustment": -2.1, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.1, "identity": 10.8, "transparency": 9.9, "maintenance": 0.0, "adoption": 8.9 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -1.5, "tool_plugin_surface": -0.6, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "TuriX", "repo": "TurixAI/TuriX-CUA", "display_repo": "", "url": "https://github.com/TurixAI/TuriX-CUA", "listing_class": "agent", "rank": 1369, "previous_rank": 1369, "rank_delta": 0, "stars": 3172, "stars_fmt": "3.2k", "forks": 331, "forks_fmt": "331", "last_push": "2026-09-14", "days_ago": 28, "weekly_commits": 2, "commits_low_confidence": false, "score": 59.8, "description": "This is the official website for TuriX Computer-use-Agent", "language": "Python", "open_issues": 2, "category": "Browser & Computer Use", "category_rank": 45, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.03, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "turix", "full_fetched_at": "2026-10-12T08:02:44Z", "source_note": "", "github_homepage": "https://turix.ai", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [ "OpenAI" ], "requires_api_keys": false, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "README/docs also mention OpenAI" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser" ], "confidence": "medium", "evidence": [ "Found browser dependency 'playwright' in requirements.txt" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 19.6, "trust_score_v2": 19.6, "rank_v2": 1369, "rank_v2_delta": 369, "trust_v2_adjustment": -0.3, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.1, "identity": 10.8, "transparency": 8.5, "maintenance": 12.0, "adoption": 8.4 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.3, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Mono Color Skill", "repo": "yanliudesign/mono-color-skill", "display_repo": "", "url": "https://github.com/yanliudesign/mono-color-skill", "listing_class": "skill", "rank": 370, "previous_rank": 370, "rank_delta": 0, "stars": 3410, "stars_fmt": "3.4k", "forks": 101, "forks_fmt": "101", "last_push": "2026-09-02", "days_ago": 40, "weekly_commits": 0, "commits_low_confidence": false, "score": 50.1, "description": "One-ink editorial print image skill — warm paper, halftone photography, active negative space, and restrained typography.", "language": "Python", "open_issues": 1, "category": "Agent Skills", "category_rank": 370, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.0, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "mono-color-skill", "full_fetched_at": "2026-10-12T16:01:59Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 18.6, "trust_score_v2": 18.6, "rank_v2": 370, "rank_v2_delta": 1370, "trust_v2_adjustment": 0.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.0, "identity": 10.8, "transparency": 8.5, "maintenance": 9.3, "adoption": 8.5 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "ai-hedge-fund-crypto", "repo": "51bitquant/ai-hedge-fund-crypto", "display_repo": "", "url": "https://github.com/51bitquant/ai-hedge-fund-crypto", "listing_class": "agent", "rank": 1370, "previous_rank": 1370, "rank_delta": 0, "stars": 623, "stars_fmt": "623", "forks": 156, "forks_fmt": "156", "last_push": "2025-09-05", "days_ago": 402, "weekly_commits": 0, "commits_low_confidence": false, "score": 27.0, "description": "AI-Hedge-Fund for Crypto 🚀 AI-powered hedge fund for cryptocurrency trading, leveraging LLM agents for intelligent decision-making.", "language": "Python", "open_issues": 7, "category": "Research & Data", "category_rank": 36, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.06, "scorecard_score": 1.4, "scorecard_checks": { "Binary-Artifacts": 10, "Branch-Protection": 0, "CI-Tests": 0, "CII-Best-Practices": 0, "Code-Review": 0, "Contributors": 0, "Dangerous-Workflow": -1, "Dependency-Update-Tool": 0, "Fuzzing": 0, "License": 10, "Maintained": 0, "Packaging": -1, "Pinned-Dependencies": -1, "SAST": 0, "Security-Policy": 0, "Signed-Releases": -1, "Token-Permissions": -1, "Vulnerabilities": 0 }, "scorecard_scanned_at": "2026-10-08T23:06:14Z", "slug": "ai-hedge-fund-crypto", "full_fetched_at": "2026-10-12T04:02:42Z", "source_note": "", "github_homepage": "", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "none", "confidence": null, "evidence": [] }, "external_service_dependencies": { "providers": [ "Anthropic", "Google Gemini", "Groq", "OpenAI", "OpenRouter" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic", "Found Google Gemini credential/config marker 'GOOGLE_API_KEY'", "README/docs also mention Google Gemini" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "C", "signal_coverage": 0.4, "signal_types": 2, "listing_status": "warning", "display_listing_status": "warning", "display_status_label": "Needs review", "has_warning": true, "warning_reasons": [ { "repo": "51bitquant/ai-hedge-fund-crypto", "criterion": "4.2.1", "detail": "no meaningful activity in 12 months (last push 2025-09-05)" } ], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 16.2, "trust_score_v2": 16.2, "rank_v2": 1370, "rank_v2_delta": 369, "trust_v2_adjustment": -3.0, "trust_confidence": 1.0, "trust_breakdown": { "safety": 2.0, "identity": 10.8, "transparency": 9.7, "maintenance": 0.0, "adoption": 6.7 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -3.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "Claude Code Skill Factory", "repo": "alirezarezvani/claude-code-skill-factory", "display_repo": "", "url": "https://github.com/alirezarezvani/claude-code-skill-factory", "listing_class": "skill", "rank": 371, "previous_rank": 371, "rank_delta": 0, "stars": 884, "stars_fmt": "884", "forks": 179, "forks_fmt": "179", "last_push": "2025-11-12", "days_ago": 334, "weekly_commits": 0, "commits_low_confidence": false, "score": 28.2, "description": "Claude Code Skill Factory — A powerful open-source toolkit for building and deploying production-ready Claude Skills, Code Agents, custom Slash Commands, and LLM Prompts at scale. Easily generate structured skill templates, automate workflow integration, and accelerate AI agent development with a…", "language": "Python", "open_issues": 20, "category": "Agent Skills", "category_rank": 371, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.484, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "claude-code-skill-factory", "full_fetched_at": "2026-10-12T08:02:35Z", "source_note": "", "github_homepage": "https://medium.com/@alirezarezvani/the-claude-skills-factory-how-you-can-generate-production-ready-ai-tools-in-15-minutes-eb0b86087f31?sk=4c0f7e762b9d7caf49d4234a978f3b0a", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "declared", "confidence": "low", "evidence": [ "README/docs mention MCP support" ] }, "external_service_dependencies": { "providers": [], "requires_api_keys": false, "confidence": null, "evidence": [] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [], "confidence": null, "evidence": [] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "MIT", "license_type": "open", "license_override": "", "trust_score": 14.4, "trust_score_v2": 14.4, "rank_v2": 371, "rank_v2_delta": 1371, "trust_v2_adjustment": 0.0, "trust_confidence": 0.5, "trust_breakdown": { "safety": 2.4, "identity": 10.8, "transparency": 8.5, "maintenance": 0.0, "adoption": 7.1 }, "trust_v2_breakdown": { "mcp": 0.0, "external_dependencies": -0.0, "tool_plugin_surface": -0.0, "package_provenance_drift": 0.0 }, "pending_signals": false }, { "name": "InternAgent", "repo": "InternScience/InternAgent", "display_repo": "", "url": "https://github.com/InternScience/InternAgent", "listing_class": "agent", "rank": 1371, "previous_rank": 1371, "rank_delta": 0, "stars": 1451, "stars_fmt": "1.5k", "forks": 131, "forks_fmt": "131", "last_push": "2026-07-29", "days_ago": 75, "weekly_commits": 0, "commits_low_confidence": false, "score": 43.5, "description": "InternAgent-1.5: A Unified Agentic Framework for Long-Horizon Autonomous Scientific Discovery", "language": "Python", "open_issues": 4, "category": "Research & Data", "category_rank": 37, "npm_package": "", "crate_package": "", "pypi_package": "", "docker_image": "", "vscode_extension": "", "weekly_downloads": null, "dl_source": "", "hn_mentions_30d": null, "has_provenance": false, "npm_provenance": null, "pypi_provenance": null, "signed_commits_ratio": 0.102, "scorecard_score": null, "scorecard_checks": {}, "scorecard_scanned_at": null, "slug": "internagent", "full_fetched_at": "2026-10-12T08:02:10Z", "source_note": "", "github_homepage": "https://discovery.intern-ai.org.cn/home", "homepage_icon": "", "homepage_icon_for": "", "public_actions": null, "mcp_server_support": { "status": "implemented", "confidence": "high", "evidence": [ "Found MCP-related server path: internagent/mas/tools/mcp/demo_server.py", "Found MCP-related server path: internagent/mas/tools/mcp_manager_fastmcp.py", "Found MCP-related server test path: tasks/AutoTTRL/code/verl/tests/workers/rollout/resource/tool_configs/mcp_server.json", "Found MCP-related server test path: tasks/AutoTTRL/run_0/code/verl/tests/workers/rollout/resource/tool_configs/mcp_server.json" ] }, "external_service_dependencies": { "providers": [ "Amazon Bedrock", "Anthropic", "Firecrawl", "Google Gemini", "Multi-provider (LiteLLM)", "OpenAI", "OpenRouter", "Redis" ], "requires_api_keys": true, "confidence": "high", "evidence": [ "Found OpenAI dependency 'openai' in requirements.txt", "Found OpenAI credential/config marker 'OPENAI_API_KEY'", "README/docs also mention OpenAI", "Found Anthropic dependency 'anthropic' in requirements.txt", "Found Anthropic credential/config marker 'ANTHROPIC_API_KEY'", "README/docs also mention Anthropic" ] }, "tool_plugin_surface": { "plugin_system": "none", "tool_tags": [ "browser", "code", "database", "shell" ], "confidence": "high", "evidence": [ "Found browser dependency 'playwright' in requirements.txt", "Found shell dependency 'pty' in requirements.txt", "Found database dependency 'redis' in requirements.txt", "Found code dependency 'gitpython' in requirements.txt", "README/docs also mention code capabilities" ] }, "package_provenance_drift": { "status": "not_applicable", "confidence": null, "summary": "No package source configured", "evidence": [] }, "advisories": null, "evidence_grade": "D", "coverage_grade": "D", "signal_coverage": 0.2, "signal_types": 1, "listing_status": "listed", "display_listing_status": "listed", "display_status_label": "Listed", "has_warning": false, "warning_reasons": [], "license_spdx": "NOASSERTION", "license_type": "open", "license_override": "", "trust_score": 14.0, "trust_score_v2": 14.0, "rank_v2": 1371, "rank_v2_delta": 370, "trust_v2_adjustment": -3.2, "trust_confidence": 0.5, "trust_breakdown": { "safety": 0.5, "identity": 10.8, "transparency": 8.5, "maintenance": 7.0, "adoption": 7.6 }, "trust_v2_breakdown": { "mcp": 2.0, "external_dependencies": -4.0, "tool_plugin_surface": -1.2, "package_provenance_drift": 0.0 }, "pending_signals": false } ] }