skills.rest
Endor-Solutions-Architecture
Endor-Solutions-ArchitectureOFFICIAL
Explore all skills by this author →
GitHub

endor-score

Evaluate open source package health using Endor Labs MCP tools and CLI.

2|Updated Feb 4, 2026
Search Tags:#security metrics#open-source#endor-score#package health#dependency scoring#OSS scorecard
One-click install
npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-score
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-score
Source: https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills/tree/main/.claude/skills/endor-score
Command: npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-score

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps developers evaluate open source package health before adoption, reducing the risk of insecure or poorly supported dependencies.

Core Features & Use Cases

  • Vulnerability and health checks: Retrieve activity, popularity, security, and quality metrics to assess overall risk.
  • Scorecard interpretation: Compare packages using an Endor Labs scorecard to guide selection.
  • Use Case: When choosing a dependency for a new project, run this Skill to compare candidate packages and select the safer option.

Quick Start

Run the skill with a package name (and optional version), for example: endor-score [email protected] or simply: endor-score lodash

Frequently Asked Questions about endor-score

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check open source package health before adding a dependency?▼

You can check open source package health by evaluating activity, popularity, security, and quality metrics to guide safe dependency selection and reduce the risk of insecure or poorly supported libraries.

Can I compare npm and PyPI packages using a scorecard?▼

Yes, you can compare packages across ecosystems like npm, PyPI, and Go by retrieving vulnerability data and scorecards to produce a structured health summary for safer selection.

What metrics are used to assess dependency risk for a new project?▼

Dependency risk is assessed using activity, popularity, security, and quality metrics, along with vulnerability data and scorecards, to output a structured health summary for candidate packages.

How do I retrieve vulnerability data and scorecards for a specific package version?▼

You can retrieve vulnerability data and scorecards for a specific package version by running the assessment with the package name and optional version, such as [email protected], to fetch metrics.

Does this package health evaluation work across multiple ecosystems?▼

Yes, this package health evaluation works across multiple ecosystems including npm, PyPI, and Go, fetching vulnerability data and scorecards to determine activity, popularity, security, and quality.

What is the best way to audit dependencies for security vulnerabilities and poor support?▼

The best way to audit dependencies for security vulnerabilities and poor support is to evaluate package health metrics and scorecards before adoption, reducing the risk of insecure or poorly supported dependencies.

Related Skills

Explore More Software Engineering Skills→
endorlabsendorlabs
2

endor-troubleshoot

Diagnoses Endor Labs scan failures by mapping error messages to known patterns.

Official
Intermediate
y1feng200156y1feng200156
33

owasp-scan

Performs OWASP Dependency-Check scans to detect CVE vulnerabilities in project dependencies.

Community
Intermediate
daishimandaishiman
6

security-reporting

Generate standardized security diagnostic reports from vulnerability findings.

Community
Intermediate
endorlabsendorlabs
2

endor-score

Evaluate open source package health with a 10-point scorecard.

Official
Intermediate