dependency-health

Cross-ecosystem dependency maintenance auditor: flags unmaintained, archived, stale, and below-the-fix deps across the full transitive graph. Ruby gems natively; npm/pypi/cargo/go/maven/nuget via CycloneDX SBOM. Signals: activity, OpenSSF Scorecard, OSV advisories, libyear, poison-pill, runtime-ceiling. Outputs SARIF/JSON/CycloneDX with CI gates.

Automated OSS maintenance evidence log. Tracks 1.6M npm downloads/week across 7 packages. Self-updating every 6h via GitHub Actions.

Find dying dependencies before they kill your app.

A local-first React Native & Expo project auditor for release readiness, dependency health, and risk reports.

Dependency health analyzer for AI training-cutoff skew and package freshness

PkgWatch - Dependency health intelligence for npm and Python. Predict package abandonment with health scores (0-100). REST API, CLI, and GitHub Action.

Offline-first CLI and GitHub Action for dependency health checks across npm, Python, Rust, and Go: vulnerabilities, risky scripts, typosquatting, stale packages, licenses, and baseline-aware CI reports.

Production-ready dependency health, readiness, stale-status, and observability for Go services.

CLI tool for analyzing OSS dependency health and detecting potentially risky or abandoned packages.