sponsor-finder

Identifies sponsorable dependencies of a GitHub repository using the deps.dev API.

1|1|Updated Jan 29, 2026
One-click install
npx skills add https://github.com/ultraviollettnympho/transit-ticket --skill sponsor-finder-ultraviollettnympho
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sponsor-finder
Source: https://github.com/ultraviollettnympho/transit-ticket/tree/main/.github/skills/sponsor-finder
Command: npx skills add https://github.com/ultraviollettnympho/transit-ticket --skill sponsor-finder-ultraviollettnympho

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Open source projects depend on dozens of libraries whose maintainers often need financial support, but finding which dependencies accept sponsorship is tedious manual research across registries, FUNDING.yml files, and search engines. ## Core Features & Use Cases - Full dependency tree resolution: Uses the deps.dev API to enumerate direct and transitive dependencies across npm, PyPI, Cargo, Go, RubyGems, Maven, and NuGet. - Multi-source funding discovery: Checks npm funding metadata, per-repo and org-level FUNDING.yml files, and web search fallbacks, then verifies every link before reporting. - Health-aware reporting: Groups results by funding destination with OSSF Scorecard maintenance data so you can see the impact of sponsoring one maintainer. - Use Case: Run "/sponsor expressjs/express" to get a verified list of GitHub Sponsors and Open Collective pages covering the most dependencies in that project. ## Quick Start Ask the assistant to run /sponsor followed by a GitHub owner/repo, for example "/sponsor expressjs/express", to receive a verified sponsorship report for that repository's dependencies.

Frequently Asked Questions about sponsor-finder

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find which of my GitHub dependencies accept sponsorship?

Run /sponsor followed by an owner/repo, such as /sponsor expressjs/express. The skill resolves the full dependency tree via the deps.dev API, checks npm funding fields and FUNDING.yml files, and returns verified sponsorship links grouped by maintainer.

What package ecosystems does dependency sponsor lookup support?

It supports npm, PyPI, Cargo, Go, RubyGems, Maven, and NuGet through the deps.dev API. The ecosystem is detected automatically from manifest files like package.json, requirements.txt, Cargo.toml, go.mod, Gemfile, or pom.xml.

Does it check transitive dependencies or only direct ones?

It checks both. A single deps.dev GetDependencies call returns the entire resolved dependency tree with DIRECT and INDIRECT relations, so transitive dependencies are included in the sponsorship report.

Are the funding links in the report verified?

Yes. Every funding URL is fetched before inclusion; links returning 404 or not-enrolled pages are excluded. The report only contains links confirmed live at scan time.

What happens if deps.dev is rate-limited or the package is not found?

If deps.dev returns 404, the skill falls back to reading the manifest directly and resolving via registry APIs. If rate-limited, it notes partial results and still produces a report with whatever data was fetched.