TAG
The dependency picker for coding agents: an MCP server that recommends, compares and scores GitHub repos with a verdict. npx -y whichlib
Supply chain security risk scorer for npm, PyPI, Cargo, and Go — behavioral signals that can't be faked