
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
Inspect any package.json or GitHub repo through the FAF GRID — a debugging UI at mcpaas.live/grid. CLI wrapper that fetches the canonical text view.
Inspect any package.json through the FAF GRID — a debugging UI at mcpaas.live/grid.
The badge above is faf-grid grading itself. Click it. The format that grades others has to grade itself first.
npx faf-grid react
That prints the canonical grid for react@* straight to your terminal — the same structural debug surface live at mcpaas.live/grid?npm=react, in plain text, parseable.
Two questions, two views, one URL primitive:
| View | Question | What you see |
|---|---|---|
| Structural (default) | What's declared in package.json? What's missing? | 6 blocks (identity, distribution, scripts, dependencies, engines, signals) of ~33 slots — filled or empty |
TSA (--tsa) | Of what's declared, what's actually used? | Each declared dep classified as CORE / ACTIVE / DORMANT by counting actual imports in source |
Empty cells stay empty. Sparse stays sparse. We print what we see — no padding, no "coming soon."
# Default — FAF skill grid (the periodic table)
npx faf-grid
# An npm package
npx faf-grid lodash
npx faf-grid @types/node
npx faf-grid request # deprecated — banner surfaces honestly
# A GitHub repo
npx faf-grid facebook/react
npx faf-grid Wolfe-Jam/faf-cli
# TSA view — declared vs actually used (JS/TS only)
npx faf-grid lodash --tsa
npx faf-grid Wolfe-Jam/faf-cli --tsa
# Open in browser instead of printing
npx faf-grid react --open
The actual rendering lives at mcpaas.live/grid. This CLI is a thin wrapper that fetches the canonical text view and prints it.
Two surfaces. One source of truth. The URL stays the canonical view (browser-shareable, link-unfurl friendly, embeddable as README badges). The CLI gives you the same data piped into a terminal, into a PR description, into an email — anywhere the URL can't reach.
# Pipe the grid into your PR description
gh pr create --body "$(npx faf-grid react)"
# Watch your repo's TSA view in CI
npx faf-grid Wolfe-Jam/your-repo --tsa
Plain Markdown. Each block becomes a ## section followed by a slot table:
# 🌐 GRID — react@19.2.5
**Source:** npm · **Canonical:** https://registry.npmjs.org/react/19.2.5
**Slots:** 33 · **Filled:** 11 · **Empty:** 22 · **Warn:** 1
## identity
| Slot | Value | Filled |
|---|---|---|
| `name` | `react` | ✓ |
| `version` | `19.2.5` | ✓ |
| `license` | `MIT` | ✓ |
| `author` | — | |
| `funding` | — | |
...
Format: application/vnd.faf-grid (IANA candidate sister to the registered application/vnd.faf+yaml).
# One-off (recommended)
npx faf-grid <pkg>
# Or install globally
npm install -g faf-grid
faf-grid react
Add this to any repo's README to show its grid score live:
[](https://mcpaas.live/grid?npm=YOUR_PKG)
Each click takes the reader to the live grid for your package. The badge updates automatically when the underlying data changes.
MIT — see LICENSE.
FAF defines. MD instructs. AI codes.
FAQs
Inspect any package.json or GitHub repo through the FAF GRID — a debugging UI at mcpaas.live/grid. CLI wrapper that fetches the canonical text view.
The npm package faf-grid receives a total of 0 weekly downloads. As such, faf-grid popularity was classified as not popular.
We found that faf-grid demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.