Unified search engine for userscripts — query Greasy Fork, Sleazy Fork, GitHub, OpenUserJS, Userscript.Zone, ScriptCat, and GitHub Gists from a single interface.

ScriptHunt is a zero-dependency, single-file HTML webapp that searches every major userscript repository in parallel and merges the results into one unified, deduplicated feed with trust scoring, security scanning, and comparison tools. No backend required — runs entirely in the browser, deployable as a static page on GitHub Pages.

Use it now: Open sysadmindoc.github.io/UserScriptHunt in any browser.

Pre-filled search: sysadmindoc.github.io/UserScriptHunt/?q=youtube+enhancer

Self-host:

git clone https://github.com/SysAdminDoc/UserScriptHunt.git
cd UserScriptHunt
open index.html

GitHub Pages deploy:

1. Fork or push to a GitHub repository
2. Go to Settings → Pages → Source → Deploy from branch (main, root)
3. Access at https://yourusername.github.io/UserScriptHunt/

┌──────────────────────────────────────────────────────────────────┐
│                        User Search Input                         │
│                     (450ms debounce / Enter)                     │
└──────────────────────────┬───────────────────────────────────────┘
                           │
         ┌────────┬────────┼────────┬──────────┬──────────┐
         ▼        ▼        ▼        ▼          ▼          ▼
    ┌─────────┐┌───────┐┌──────┐┌────────┐┌─────────┐┌────────┐
    │ Greasy  ││Sleazy ││GitHub││OpenUser││Script   ││  Gists │
    │  Fork   ││ Fork  ││ +Code││  JS    ││  Cat    ││        │
    │(Direct) ││(Direct)││(Dir.)││(Proxy) ││(Direct) ││(Proxy) │
    └────┬────┘└───┬───┘└──┬───┘└───┬────┘└────┬────┘└───┬────┘
         └─────────┴───────┴────┬───┴──────────┴─────────┘
                                │
                   Promise.allSettled()
                                │
                                ▼
                 ┌──────────────────────────┐
                 │  Normalize + Deduplicate  │
                 │  Trust Score + Security   │
                 └─────────────┬────────────┘
                               │
                               ▼
                 ┌──────────────────────────┐
                 │   Sort + Filter + Render  │
                 │  (Grid with source badges)│
                 └──────────────────────────┘

All source requests fire in parallel via the source adapter registry — each source defines a search() function and pageSize. Results render progressively as each source responds. Failed sources show an error chip and auto-disable with exponential backoff after 3 consecutive failures.

Click the source chips below the search bar to enable/disable sources at runtime. Preferences persist in localStorage.

Default state:

• Greasy Fork: Enabled
• Sleazy Fork: Disabled (opt-in for adult content)
• GitHub: Enabled
• OpenUserJS: Enabled
• Userscript.Zone: Enabled
• ScriptCat: Enabled
• GitHub Gists: Disabled (opt-in, uses CORS proxy)

For higher rate limits and .user.js file-level code search, set a GitHub token:

localStorage.setItem('sh_pref_ghtoken', '"ghp_your_token_here"');

This enables the code search endpoint (finds individual .user.js files across all repos) and increases the rate limit from 10 to 30 requests/minute.

The app uses CORS proxy services with automatic sequential fallback for sources that don't support CORS natively (OpenUserJS, Userscript.Zone, GitHub Gists).

Default proxy chain:

1. api.allorigins.win/get (primary)
2. api.codetabs.com (fallback)
3. everyorigin.jwvbremen.nl (fallback)

Self-hosted proxy (recommended for production):

A Cloudflare Worker template is included in cors-proxy/:

cd cors-proxy
npx wrangler deploy

This gives you a private proxy with domain allowlisting on Cloudflare's free tier (100K req/day).

To use your custom proxy:

localStorage.setItem('sh_pref_proxy', '"https://your-proxy.workers.dev"');

The app will try your proxy first, then fall back to the public proxies. The CSP is automatically updated to allow your custom proxy domain.

ScriptHunt is a standalone web app — open it, type any search query, and browse results across all repositories. No Tampermonkey required.

If you want to find scripts for the site you're currently browsing without leaving the page, use the companion userscript instead:

UserScript-Finder — A Tampermonkey/Violentmonkey userscript. Adds a menu entry to your script manager that detects the current site and instantly searches for scripts matching that domain. Zero visual footprint — nothing appears on the page until you click your script manager icon.

GitHub results seem broad / not all are userscripts GitHub source searches repositories (not individual files) using keyword matching against userscript OR tampermonkey OR greasemonkey. With a GitHub token set, code search additionally finds individual .user.js files for more precise results.

OpenUserJS or Gists return no results or fail These sources depend on CORS proxy availability. If all proxies are down or rate-limited, the source will show a "Failed" status chip and auto-pause with exponential backoff. Results from other sources will still display normally.

Rate limits GitHub enforces 10 search requests/minute for unauthenticated users (30/min with a token). Heavy pagination or rapid searching may trigger a 403 response — the app tracks rate limits and auto-backs off.

Can I self-host a CORS proxy? Yes. Deploy the included Cloudflare Worker template (free tier: 100K requests/day) and set your proxy URL in localStorage.

• Single-file HTML — no build step, no bundler, no framework
• Vanilla JavaScript (ES2022) — async/await, Promise.allSettled, AbortController, DOMParser, Popover API
• CSS Custom Properties — full theming via variables with 4 theme modes
• Source Adapter Registry — adding a new source requires only a SOURCES entry with a search() function
• Google Fonts — JetBrains Mono (logo/monospace) + Outfit (UI)
• CORS Proxy — allorigins.win → codetabs → everyorigin fallback chain with exponential backoff
• PWA — manifest.json + service worker for installability and offline caching
• localStorage — preferences, favorites, source toggles, and theme persist locally; no tracking, no cookies, no server-side state

• Filter panel (license, min installs, date range, @grant types)
• URL deep-linking for all state (sources, sort, filters)

See ROADMAP.md for the full plan with research notes and architecture patterns.

Issues and PRs welcome. Adding a new source is simple thanks to the adapter registry:

1. Create a srcYourSource(query, page) async function that returns results
2. Create a normYourSource(item) function that normalizes to the standard schema
3. Add an entry to the SOURCES object with search, pageSize, colors, and default enabled state

No changes to executeSearch() needed — the registry dispatches automatically.

MIT License — see LICENSE for details.