Artifact Hub Helm Chart Scraper

Exports Helm chart package metadata from Artifact Hub's search API — versions, star counts, security scan tallies (CVE counts by severity), signing status, and repository/publisher trust signals. Built for platform engineers, DevOps teams, and security reviewers who need a bulk, structured view of the Helm chart catalog rather than looking up charts one at a time in the UI.

Why this scraper

• Reads Artifact Hub's official JSON search API directly, exporting 21+ fields per chart — versions, stars, security scan counts, signing status, and publisher verification — covering full catalog discovery, not just alerting on charts you already run.
• No JS rendering, tokens, or login required: the target is a public unauthenticated API, so results are complete structured JSON rather than partial page scrapes.
• No personal data collected — output is limited to chart, repository, and publisher metadata.

Output fields

Field	Type	Description
package_id	string	Artifact Hub internal package UUID
name	string	Chart name
normalized_name	string	URL-safe normalized chart name
category	integer	Artifact Hub category code
stars	integer	Number of stars the chart has received
official	boolean	Whether the chart is marked official
cncf	boolean	Whether the chart belongs to a CNCF project
description	string	Short chart description
version	string	Latest chart version
app_version	string	Version of the underlying application packaged by the chart
license	string	SPDX license identifier of the chart
deprecated	boolean	Whether the chart is marked deprecated
has_values_schema	boolean	Whether the chart ships a values.schema.json
signed	boolean	Whether the chart release is cryptographically signed
security_critical	integer	Count of critical-severity CVEs in the latest security scan
security_high	integer	Count of high-severity CVEs in the latest security scan
security_medium	integer	Count of medium-severity CVEs in the latest security scan
security_low	integer	Count of low-severity CVEs in the latest security scan
security_unknown	integer	Count of unrated-severity CVEs in the latest security scan
production_organizations_count	integer	Number of organizations reporting production use of the chart
last_updated_ts	integer	Unix timestamp of the package's last update
repository_name	string	Artifact Hub repository slug hosting the chart
repository_display_name	string	Human-readable repository name
repository_url	string	Git/Helm repository URL the chart is published from
repository_organization_name	string	Publishing organization's slug
repository_verified_publisher	boolean	Whether the publisher is verified on Artifact Hub
package_url	string	Direct Artifact Hub page URL for the chart

Input

{
  "startUrls": [
    { "url": "https://artifacthub.io/api/v1/packages/search?kind=0&limit=50" }
  ],
  "maxItems": 50
}

Output

{
  "package_id": "7918f2cb-0742-4993-b58a-673129604cf6",
  "name": "kube-prometheus-stack",
  "normalized_name": "kube-prometheus-stack",
  "category": 4,
  "stars": 1233,
  "official": true,
  "cncf": null,
  "description": "kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator.",
  "version": "90.2.0",
  "app_version": "v0.93.1",
  "license": "Apache-2.0",
  "deprecated": false,
  "has_values_schema": false,
  "signed": true,
  "security_critical": 0,
  "security_high": 218,
  "security_medium": 74,
  "security_low": 1,
  "security_unknown": 13,
  "production_organizations_count": 30,
  "last_updated_ts": 1789257361,
  "repository_name": "prometheus-community",
  "repository_display_name": "prometheus-community",
  "repository_url": "https://prometheus-community.github.io/helm-charts",
  "repository_organization_name": "prometheus",
  "repository_verified_publisher": true,
  "package_url": "https://artifacthub.io/packages/helm/prometheus-community/kube-prometheus-stack"
}

Pricing

Pay per result: $0.0003 per chart exported. A typical run of 150 charts costs under $0.05.

Use cases

• Building an internal Helm chart inventory dashboard that flags charts with unsigned releases or high/critical CVE counts before they're approved for cluster use.
• Auditing which charts in your organization's dependency list come from verified publishers vs. unverified repositories.
• Tracking chart version and app_version drift across a set of repositories to plan upgrade cycles for platform teams.