settings — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited settings (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Dependency guardrail for AI coding agents. Validates packages before installation, catches hallucinations and typosquats, and provides compatibility intelligence across 6,500+ developer tools.
10,000+ PyPI installs | 110,000+ unique visitors | 23 MCP tools
claude mcp add indiestack -- uvx --from indiestack indiestack-mcpThen ask your agent:
Before your AI installs a dependency or writes boilerplate — IndieStack validates it exists, checks for typosquats, and searches 6,500+ curated developer tools with real compatibility data from 4,500+ repos. You get install commands, health scores, and what tools actually work together in production.
"Indie" is the curation filter: independent developers and small teams. Focused, lean, maintained, honest pricing.
Claude Code (zero install — runs via uvx):
claude mcp add indiestack -- uvx --from indiestack indiestack-mcpClaude Desktop — add to claude_desktop_config.json:
{
"mcpServers": {
"indiestack": {
"command": "uvx",
"args": ["--from", "indiestack", "indiestack-mcp"]
}
}
}Cursor / Windsurf — add to your MCP config:
{"command": "uvx", "args": ["--from", "indiestack", "indiestack-mcp"]}Persistent install:
pipx install indiestack
claude mcp add indiestack -- indiestack-mcpCLI (terminal use):
pip install indiestack
indiestack search "analytics"
indiestack details simple-analytics
indiestack stack "auth, payments, email"| Tool | What it does |
|---|---|
find_tools | Search 6,500+ developer tools with 11 filters: price, health, stars, success rate, language, tags, compatibility |
find_compatible | Find tools compatible with a given tool — grouped by category, with verified stacks and conflict warnings |
get_tool_details | Integration code, pricing, API specs, and compatibility data |
scan_project | Analyze a project description + tech stack, get a complete tool recommendation |
report_compatibility | Report that two tools work well together — builds the compatibility graph |
report_outcome | Report success/failure with used_with and incompatible_with — feeds the compatibility graph |
check_health | GitHub health audit — maintenance grade, last commit, stars, alternatives for stale tools |
list_categories | Browse all 25 categories |
compare_tools | Side-by-side comparison of any two tools |
build_stack | Turn a 50,000-token generation into a 2,000-token assembly |
publish_tool | Submit a developer tool so other agents can recommend it |
browse_new_tools | Recently added tools with pagination |
list_tags | All tags sorted by popularity |
get_market_gaps | Top unmet needs — what developers search for but can't find |
list_stacks | Curated stacks for common use cases |
analyze_dependencies | Scan package.json/requirements.txt for better alternatives |
evaluate_build_vs_buy | Financial breakdown: build from scratch vs use what exists |
get_recommendations | Personalized suggestions based on your search history |
| Resource | What it provides |
|---|---|
indiestack://categories | All 25 categories with slugs for filtering |
indiestack://trending | Top 10 trending developer tools this week |
indiestack://tools-index | Complete index for prompt caching — include once, reference forever |
| Prompt | When to use |
|---|---|
before-you-build | Check IndieStack before building common functionality |
find-alternatives | Find indie alternatives to mainstream SaaS products |
save-tokens | Audit your project for token-saving opportunities |
architect-feature | Plan a feature using existing indie building blocks |
discover-indie | Explore what indie developers have built |
validate_package() verifies packages exist and are safe before installation. Catches hallucinated and typosquatted packages.get_market_gaps() exposes zero-result queries ranked by search volume.MIT License
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.