The three fastest-moving repositories in today's GitHub trending list are not a runtime, a compiler or a database. They are a plugin registry from Anthropic, a repository named plainly `plugins` inside Cursor's organisation, and an open-source coding agent that has changed its address.
The numbers, from GitHub's own one-day trending figures for 18 October: `anomalyco/opencode` added 1,417 stars, `anthropics/claude-plugins-official` added 1,187, and `cursor/plugins` added 351. Above all three, at 2,213, sits `MadsLorentzen/ai-job-search` — the exception that explains the rule, and we will come back to it.
For two years the coding-agent market was argued on leaderboard rows: benchmark scores, token prices, context windows, how many repositories an agent could refactor before it lost the thread. Not one repository in today's top five is trending on any of that. What is trending is the shelf the extensions sit on.
A registry is not a feature. It is a chokepoint. Whoever holds discovery, review, the update channel, billing and the telemetry that comes with installation holds the part of the stack that does not become substitutable when a better model ships next quarter. The model becomes a commodity you route between; the shelf stays. That is why a plugins directory with a few hundred stars a day is a more consequential artefact than a leaderboard win.
Anthropic opened its official Claude Code plugin marketplace on 26 September. Less than a month later, Cursor's organisation hosts a repository with the same flat name, and the same shape. Said once, that is a marketing move. Said twice, in the same month, by two of the three companies that matter in this category, it is a format — and formats are what the rest of the market has to interoperate with.
The August agreement between Amazon, Microsoft, OpenAI, Google and Vercel on a single plugin format for AI agents is the piece that makes this a market rather than a set of fiefdoms. The interesting question for the next two quarters is not which agent is best but which registry becomes the reference implementation that the cross-vendor format quietly copies. Default status is worth more than any single benchmark record, because default status compounds.
There is a bill attached. On 19 September, the Plugin4Shell flaw showed that a plugin is not a configuration file — it is code running with the agent's permissions, in the agent's context, with access to the agent's credentials and your repository. A curated registry is a better answer to that than a scattered pile of copy-pasted instructions, but only if curation means signed packages, review, revocation and an audit trail. Without a signing and revocation story, a registry is not a supply chain; it is a tidier attack surface with a logo on it.
The third data point is the quietest and, for anyone pinning a toolchain, the most practical. `opencode` — the open-source terminal coding agent that emerged from the SST team in 2025 — now publishes from a GitHub organisation called `anomalyco` rather than the org that hosted it through last year. The project has already survived one of open source's messier namespace fights: an original `opencode` by another author, a second project of the same name from SST, and the eventual Charm fork that became Crush. Provenance is not a detail for the enterprises now adopting these tools. A release is pinned to an org, a signing key and a trademark, and an org move resets that chain for every downstream mirror, container image and package lockfile.
Which brings us back to the top of the list. The single fastest-moving repository today is not a registry and not a coding agent. It is a job-search tool — a personal-scale project aimed at the part of white-collar work that agents were promised next. The registry owners are building infrastructure for people who write software. The stars are drifting toward people who want their errands run. Whoever reconciles those two audiences owns the next two years, and they will not do it with a benchmark.
The model is no longer the product. The shelf is — and it is being stocked by whoever gets there first.
