hikariming/ghfind/ghfind-score

ghfind — GitHub developer value & trust scoring

ghfind rates any GitHub account from 0 to 100 for real contribution value and trustworthiness using a fully deterministic, open-source engine (no LLM in the scoring core — the same inputs always produce the same score). It also detects AI/bot/farmed contribution, compares developers head-to-head, and ranks developers by language, organization, and project.

When to use this skill

• Vet a GitHub account before hiring, sponsoring, or merging a PR.
• Decide whether an account's activity is genuine or farmed (template-PR spam,

star inflation, contributions to repos it doesn't own).

• Get a reproducible, auditable score instead of eyeballing stars/followers.
• Compare two developers, or discover top developers in an ecosystem.

How to call it (no authentication required)

Deterministic score for one account:

curl -s https://ghfind.com/api/score/{username}

Full evidence payload (metrics, top repos, recent PRs, red flags):

curl -s -X POST https://ghfind.com/api/scan \
  -H 'Content-Type: application/json' \
  -d '{"username":"{username}"}'

Other endpoints: GET /api/leaderboard, GET /api/developers?type=language|org|repo&value=..., GET /api/search-users?q=..., POST /api/vs-verdict {"a":"...","b":"..."}.

Full API contract: https://ghfind.com/openapi.json · Agent docs: https://ghfind.com/llms.txt

MCP server

Streamable HTTP MCP server at https://ghfind.com/mcp exposing the tools score_user, scan_user, compare_users, get_leaderboard, search_users. Server card: https://ghfind.com/.well-known/mcp/server-card.json

Notes

• The score reflects an account's public GitHub footprint only; private-org

work is invisible to it, so a low score is not a factual claim about a person.

• Scoring is deterministic; only the optional roast text is LLM-written.
• Engine is open source (AGPL): https://github.com/hikariming/ghfind