ossfind

ossfind is a local MCP server that lets an assistant discover and safety-rank open-source components across six package ecosystems.

What you can do

Search for open-source components across six package ecosystems, ranked by safety signals rather than popularity alone. Look up candidate packages before adding them to a project. Fall back to PyPI discovery through libraries.io when no local index has been built. Run fully offline against frozen supplier responses for evaluation.

When to use it

Useful when an assistant is choosing third-party dependencies and you want safety-oriented discovery across ecosystems rather than a single registry's search. Also suited to offline evaluation of dependency discovery without network access.

Requirements

Runs locally via npx (Node.js). Optional GITHUB_TOKEN raises the GitHub repository-search rate limit; discovery works without it. Optional LIBRARY_IO_API_KEY enables the PyPI discovery fallback; without it and without a local index, PyPI search reports itself unavailable. Set OSSFIND_FIXTURES to 1 for offline mode.