npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

architectonic-skills

v0.3.6

Published

Reviewed core procedures plus an explicitly untrusted external skill registry and curation pipeline.

Downloads

470

Readme

Skills

Architectonic layer: main CLI and adaptive profiles

Status: experimental, pre-1.0. The reviewed core and the external registry are separate trust zones. A discovered, normalized, packaged, popular, or official-looking skill is not trusted merely because it is available.

skills defines reusable procedures with explicit triggers, inputs, ordered method, verification, failure handling, provenance, license context, and risk.

Trust zones

core/       small reviewed first-party procedures
skills/     working source; only explicit reviewed pack paths ship
dist/       generated external registry; untrusted until reviewed
sources/    provenance and review records
operations/ maintenance, classification, lifecycle, and curation machinery

The reviewed core is enumerated in core/manifest.json. External entries are discovery candidates. Local adoption must inspect provenance, license, hidden scripts and tool calls, prompt injection, destructive behavior, credential access, data movement, runtime fit, and authority boundaries.

Installing a skill does not authorize it. Installing an agent does not grant runtime authority.

Navigation graph

dist/navigation.json is the discovery-only browse tree for the full skills surface:

root
├── Reviewed core (13 procedures in two groups)
├── Reviewed packs (marketing, code intelligence, SEO, agent operations, design, research, media)
└── Distribution catalog (all dist skills by domain → artifact kind → leaf)

browse_default=true controls default visibility for dist leaves; hidden leaves remain in the tree for search and explicit pinning. Regenerate with npm run build:navigation after catalog or operations/navigation-sources.json changes.

Reviewed packs

skills/marketing/ contains the reviewed Marketing Top 50 pack. It provides one orchestrator, eight category procedures, and a machine-readable catalog. The procedures synthesize disclosed sources. They do not copy external skill bodies, book text, testimonials, performance claims, or marketplace listings.

Catalog classification

Imported skill bodies are preserved as source artifacts. When imported frontmatter is absent, misleading, or too weak for safe routing, reviewed metadata corrections live in operations/classification-overrides.json and are applied by scripts/build_distribution_catalog.py.

An override may add or correct:

domain
risk_level
requires_review
artifact_kind
target_surfaces
source_status
review_status
classification_evidence

classification_override=true means the catalog metadata was reviewed separately. It does not mean the imported procedure, code, dependencies, or runtime behavior are approved.

target_surfaces is a routing hint for Architectonic, Workframe, Click.Blue, or the design system. It is never an authority grant.

Catalog lifecycle decisions

Classification answers what an entry appears to be and how much review it needs. A deeper body-level review may additionally record a lifecycle and installation decision.

The original reviewed batches remain in operations/catalog-decisions.json. New bounded review clusters live in operations/catalog-decisions/*.json. scripts/apply_catalog_decisions.py merges all decision files, rejects duplicate name/path decisions, and exposes every contributing file in the generated install manifest.

lifecycle_status        candidate | review-required | reviewed | blocked | superseded | deprecated
install_recommendation  inspect | recommended | conditional | do-not-install
superseded_by           reviewed replacement when one exists
decision_evidence       concise reason grounded in the inspected body and provenance

catalog_decision=true means the packaged body was inspected for behavior, overlap, provenance, and safe installation role. It still does not grant runtime authority.

Installers and agents must treat:

  • install_recommendation=do-not-install as a package-level stop signal;
  • lifecycle_status=superseded as an instruction to use the recorded replacement instead;
  • install_recommendation=conditional as requiring the stated scope and review conditions;
  • absent lifecycle decisions as unreviewed, not implicitly safe.

Imported bodies remain available as evidence even when blocked or superseded. Deep review changes catalog routing; it does not silently rewrite upstream material.

Reviewed core

Grounding and collaboration

  • controlled-technical-writing — apply ASD-STE100-aligned rules to operational prose without changing technical meaning.
  • document-guided-organization-bootstrap — inspect documents first, then ask consequential questions tied to gaps.
  • source-grounding — route durable claims to recoverable evidence.
  • assumption-grilling — expose assumptions, missing reasoning, and disconfirming evidence.
  • agent-handoff — preserve bounded continuity across agents and sessions.
  • architecture-review — inspect system boundaries and drift before structural change.

Adaptive systems

  • adaptive-composition — choose no framework, one layer, a profile, or exact composition.
  • knowledge-lifecycle-design — choose memory, ordinary knowledge, or living knowledge and define maintenance gates.
  • source-first-wiki — compile source-backed wiki knowledge, inventory, datasets, outputs, sessions, and quiet archives.
  • second-brain-distillation — capture, organize, distill, and express personal knowledge around active outcomes.
  • loop-engineering — design recurring agent work with state, verification, budgets, authority, and stopping conditions.
  • graph-projection — derive inspectable graphs from canonical files without replacing them.
  • public-skill-adoption — review public skills as a supply-chain and authority decision rather than a popularity contest.

Skill contract

trigger        when the procedure applies
inputs         what must be inspected or received
procedure      ordered method
verification   how success is checked
failure modes  errors the procedure is intended to prevent or expose
provenance     source, revision, author, and license context
risk           mutation, network, credentials, production, and external effects

Ecosystem compatibility

Architectonic skills can coexist with public Agent Skills from Anthropic, OpenAI, Google, GitHub, and independent publishers. Compatibility is not approval. Vendor or reference the exact reviewed revision and preserve local policy, provenance, and update rules.

The core also encodes reusable lessons from source-first LLM wikis, OKF-style Markdown, Git/Markdown knowledge systems, second-brain methods, loop engineering, and graph engineering. These are procedures and boundaries, not mandatory tool dependencies.

Install

npx architectonic@latest add skills --source npm
npx architectonic@latest verify