Packages
Developers pick dependencies in registry UIs, not on GitHub. Paste a package name and see how agent-friendly its source repo actually is.
Look up a package
Prefer JSON? /api/package/<registry>/<name>
What happens when it's not scored?
If a package resolves to a source repo we don't track yet, the page shows you which repo it mapped to and links to a pre-filled GitHub issueyou can submit to request scoring. If the registry manifest doesn't point at a parseable source URL at all, the issue template asks for the correct link.