Optional. Raises the GitHub repository-search rate limit; discovery works without it. Secret.
LIBRARY_IO_API_KEY
No
Optional libraries.io key, used as the PyPI discovery fallback when no local index has been built. Without it, and without an index, PyPI search reports itself unavailable rather than returning nothing. Secret.
OSSFIND_FIXTURES
No
Set to 1 to run fully offline against frozen supplier responses, for evaluation without network access.
Tools show up when the registry metadata or the repository README lists them. GitHub enrichment fills this in when a token is configured.
About
Safety-ranked open-source component discovery across npm, PyPI, crates.io, RubyGems, GitHub and Hugging Face — for humans and AI agents. Ships an MCP server and verified API signatures so agents stop guessing.
FAQ
What is ossfind?
Safety-ranked open-source component discovery for agents across six package ecosystems.
How do I install ossfind?
Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.
Is ossfind official?
No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.
How is the trust score calculated?
This listing scores 35 (Limited). The formula is published on the methodology page.