packages

Query registry APIs for repository packages and write metrics to report.json.

Updated May 20, 2026
One-click install
npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill packages-lukehinds
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: packages
Source: https://github.com/lukehinds/scrutineer-attest-test/tree/main/skills/packages
Command: npx skills add https://github.com/lukehinds/scrutineer-attest-test --skill packages-lukehinds

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Look up every published package for a repository across registries and record key metrics.

Core Features & Use Cases

  • Query the packages API for a repository URL and collect per-package data such as name, ecosystem, latest_version, licenses, downloads, and dependency counts.
  • Normalize and emit a report.json under the packages key, conforming to the provided schema.
  • Use Case: Build a centralized Packages tab for a project to surface package metrics across ecosystems.

Quick Start

Query the packages API for the repository and write the results to report.json.

Frequently Asked Questions about packages

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I aggregate package data across multiple registries for a repository?

To aggregate package data across registries, query the packages API with the repository URL to collect names, versions, licenses, downloads, and dependencies, then normalize the results into a report.json file.

What package metrics are tracked when looking up versions across ecosystems?

Looking up versions across ecosystems tracks per-package metrics including name, ecosystem, latest_version, licenses, download counts, and dependency counts, writing the collected data array to report.json.

Can I build a centralized Packages tab to surface package metrics across ecosystems?

Yes, you can build a centralized Packages tab by querying the registry API for a repository URL, collecting normalized package metrics, and emitting a structured packages array that conforms to a defined schema.

Does the package lookup process require network access to the registry API?

Yes, the package lookup process requires network access to the registry API to fetch per-package data such as versions, licenses, downloads, and dependency counts for the specified repository.

How do I normalize and report package lookup results to follow a specific schema?

To normalize and report package lookup results, collect the registry API data and emit a report.json file under the packages key, ensuring the output array conforms to the provided schema.json structure.

What is the best way to track names, versions, and licenses for published packages?

The best way to track names, versions, and licenses is to query the packages API for the repository URL, collect the per-package data across registries, and record the key metrics in a normalized report.json file.