MMarceloinpackagerating.hashnode.dev·4d ago · 5 min readYour AI agent doesn't read READMEs — we scored 95,000 packages to see what it's installing anywayBy Marcelo, builder of Package Rating Over the past few months I've been crawling npm, PyPI, crates.io, and RubyGems — pulling real GitHub activity, dependency health, and known vulnerability data for10