npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

setup-engineering-harness

v0.1.0

Published

Install an evidence-gated engineering workflow into a repository.

Readme

setup-engineering-harness

License

setup-engineering-harness is a one-shot skill that configures a repository so one coding AI works evidence-first by default.

It is not a multi-agent manager. It improves the session the user is already using:

  • ambiguous product choices are asked together before implementation;
  • dependency work starts from the installed version, official sources, types, source, and a reproduction;
  • native library capabilities are checked before custom code;
  • writes require a scoped acceptance contract and lease;
  • completion requires fresh verification and a diff-backed receipt;
  • repository context is loaded progressively instead of dumped into the model;
  • durable documentation is canonical and updated, not accumulated as meeting notes or speculative roadmaps.

The current implementation supports Codex and Claude Code project hooks. It is an R&D-quality prototype, not a claim of statistically validated production readiness.

What Setup installs

The installer preserves existing repository instructions and adds one thin provider-native bridge. Detailed behavior lives in task-routed Playbooks under .agent-harness/.

AGENTS.md or CLAUDE.md            thin managed bridge
.codex/hooks.json or
.claude/settings.json             merged UserPromptSubmit and PreToolUse hooks
.agent-harness/
  config.json                     user-owned policy
  local.md                        user-owned local constraints
  repo-profile.json               regenerable repository facts
  router.md                       progressive Playbook router
  playbooks/                      focused conversation/research/work rules
  bin/                            read, lifecycle, and verification brokers
  checks/audit.py                 Harness integrity audit
  manifest.json                   ownership and host-runtime pointers

Authoritative Gate state and trusted runtime code are placed outside the repository under the user's XDG state directory. Secrets, raw logs, caches, and transient receipts are not added to Git.

Install

Choose one entrypoint. All three use the same versioned Skill and installer.

npm executable

Run without permanently installing a package:

npx setup-engineering-harness@latest plan \
  --provider codex --repo /path/to/project

npx setup-engineering-harness@latest install \
  --provider codex --repo /path/to/project

Use --provider claude-code for Claude Code. plan is read-only; install changes only the displayed scope.

Agent Skill

Install globally into Codex with the open skills CLI:

npx skills@latest add Mrbaeksang/setup-engineering-harness \
  --skill setup-engineering-harness \
  -a codex -g -y

Open Codex in the repository you want to configure and invoke:

$setup-engineering-harness

The skills command copies the versioned Skill from GitHub into the selected agent's skill directory. It does not install this repository's npm executable.

Claude Code Marketplace

Register this repository as a marketplace and install its managed plugin:

claude plugin marketplace add Mrbaeksang/setup-engineering-harness
claude plugin install setup-engineering-harness@mrbaeksang

Restart Claude Code or run /reload-plugins, then invoke:

/setup-engineering-harness:setup-engineering-harness

The skill first shows a read-only repository profile, unresolved decisions, and the exact planned changes. One approval covers that scope; it then installs, runs the real-provider canary, and audits the result.

Requirements after installation: Python 3.12, Git, the selected provider CLI, and a supported local isolation mechanism for managed verification (bubblewrap on Linux/WSL or sandbox-exec on macOS).

Run from a clone

For development or manual inspection, clone this repository and call the same installer directly:

python3 skills/setup-engineering-harness/scripts/setup_harness.py \
  plan --provider codex --repo /path/to/project

python3 skills/setup-engineering-harness/scripts/setup_harness.py \
  install --provider codex --repo /path/to/project

Then review and trust the exact project hook definitions in the selected provider and run:

python3 skills/setup-engineering-harness/scripts/setup_harness.py \
  verify-provider --provider codex --repo /path/to/project

python3 skills/setup-engineering-harness/scripts/setup_harness.py \
  audit --repo /path/to/project

install can intentionally report INCOMPLETE until provider trust and the write-deny canary are proven. It does not run project commands, install packages, read secrets, or change application code.

The same entrypoint supports repair and uninstall; both are explicit operations because managed drift and deletion should not be silently accepted.

Development checks

PYTHONDONTWRITEBYTECODE=1 \
python3 -m unittest discover -s tests -p 'test_*.py'

PYTHONDONTWRITEBYTECODE=1 \
python3 /path/to/skill-creator/scripts/quick_validate.py \
  skills/setup-engineering-harness

The benchmark fixture under benchmarks/fixtures/ is synthetic test data for the scoring engine. It is not empirical proof. Actual clean-context behavior screens and their limitations are recorded in the canonical design document.

Current boundaries

  • The installed provider adapter is Codex-specific.
  • Clean-context behavior screens currently have one run per arm, so findings are directional rather than statistically significant.
  • A live canary for the installed provider must pass on the user's machine; a simulated hook replay is not equivalent.

License

Licensed under the Apache License 2.0.