Evaluate open source package health with a 10-point scorecard.
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-score-endorlabs
Please help me install this Agent Skill. Skill: endor-score Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-score Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-score-endorlabs
Evaluate open source package health before adoption. This section should succinctly describe why evaluating package health matters in software decisions and reduce risk when choosing dependencies.
Provide a package name (and optional version) to receive an endor-score health assessment and comparison guidance.
High-intent search queries and answers about installing and using this skill.
To evaluate open-source package health before adoption, provide a package name to receive a 10-point scorecard. This assessment checks vulnerabilities and presents activity, popularity, security, and quality bars to guide dependency choices.
Yes, you can compare packages and check vulnerabilities across ecosystems like npm, Python, Go, Java, and Rust. The evaluation fetches package metrics and CVE history to help you select between alternatives and identify risk indicators.
The package scorecard includes metrics for activity, popularity, security, and quality. It also provides CVE history and recommended actions to help you assess risk and monitor ongoing health for your dependencies.
To assess risk when selecting between alternatives, compare their scorecard metrics. The evaluation highlights activity, popularity, security, and quality signals alongside CVE history to identify risk indicators and inform your dependency choices.
No, you only need to provide the package name to get a dependency health assessment, though specifying a version is optional. The tool will fetch package metrics and present a scorecard with recommended actions.
You should use a package health scorecard when deciding whether to adopt a package, selecting between alternatives, or monitoring ongoing health. It performs vulnerability checks and assesses activity, popularity, security, and quality to reduce dependency risk.
SJTU-IPADSAnalyze project dependencies for security, license, and maintenance risks.
dy9759Design CI/CD pipelines and cloud-native infrastructure with Terraform and Kubernetes.
a2musStandardize deployment patterns for CI/CD pipelines with Docker and GitHub Actions.
hiddink-aiAutomate CVE report triage with security analysis and remediation planning.
