CodeRifts installs statistics
By CodeRifts · GitHub Marketplace
Signed, offline-verifiable authorization for API-contract changes. Only a granted change can proceed
CodeRifts has 6 recorded installs on GitHub Marketplace.
It ranks #1119 of 1,393 tracked GitHub Marketplace listings by installs.
PluginStats has 1 daily observations since Oct 16, 2026; the latest is from Oct 16, 2026.
About CodeRifts
On every pull request that changes an API contract (OpenAPI, GraphQL, gRPC, AsyncAPI, MCP tool manifests), CodeRifts decides whether the change may proceed and issues a signed receipt you can verify offline — no key, no call back to us. Once your branch protection requires the check, a contract change stays red until a grant exists. Every decision names what it proves and what it does not.
Only a granted change can proceed.
CodeRifts is a gate for API-contract changes made by people and by AI agents. On every pull request that touches a contract artifact it computes the change, decides whether it may proceed, and issues an Ed25519-signed receipt bound to the head commit, the change fingerprint and the issuing App.
How it works
• Install CodeRifts on a repository. • In branch protection, require the check CodeRifts / issuer. Until it is required, the check is advisory. For the full gate, add the contract-gate Action as a second required check (CodeRifts / contract-gate): https://github.com/marketplace/actions/coderifts-contract-gate • Open a pull request that changes a contract — the check stays red without a grant; a config-only change is green.
What it decides on
Removed endpoints and fields, changed types, newly required request fields, removed enum values, auth-scheme changes, MCP tool-description drift (a schema that did not change can still carry a new instruction), and tool-schema drift for agent tools.
What you get
• A required GitHub check (CodeRifts / issuer) that is red without a grant and bound to this App's id — a check with the same name from another app does not satisfy it • A PR comment naming the breaking changes and the next step • A signed, offline-verifiable receipt — verify it with the MIT verifier, no key needed: https://coderifts.com/verify/ • Every decision names its limits: what it proves, and what it does not
Configuration
.coderifts.yml names the contract artifacts to track. Enforcement is a branch-protection setting, not a config key: policy keys describe the analysis, they do not move the grant.
Free during beta. Free covers public repositories; private authorization and enforcement are on Team.
Docs: https://coderifts.com/docs/ · Install: https://coderifts.com/install/ · Trust Center: https://coderifts.com/trust-center/
Description from the GitHub Marketplace listing.
- Code quality
- API management
Where CodeRifts sits in the listing
Each band is one page of 20. Installs on a log scale. Placement is projected from installs, so it can differ from the marketplace's own sort order. Hover a dot to see the listing.
Charts
Images: 30d · 1y · all time · 1600×900 dark
Adoption over time
7/30/90-day growth
Filled points are observed values; hollow points come from Internet Archive snapshots of the listing page. Dashed segments span periods with no observations — values between points are not interpolated.
Recent observations
Full history (1)Similar GitHub Marketplace plugins
Data source
Install counts (installations of each GitHub App across accounts and organizations) are read from public GitHub Marketplace listing pages. GitHub does not publish ratings. Category positions reflect GitHub's own popularity sort.
Listing: https://github.com/marketplace/coderifts. First seen Oct 16, 2026; last successful collection Oct 16, 2026. See the methodology.