npm Package Version Delta Monitor

Turn the npm registry into structured B2B data. Discover packages by keyword or scope, monitor releases of any package list, or build developer lead lists from maintainer emails. Official public npm API, no proxy, no auth. Delta mode for recurring monitoring.

Malicious Package Supply Chain Tracker Scraper

jungle_synthesizer/malicious-package-supply-chain-tracker-scraper

Cross-ecosystem feed of confirmed malicious/typosquatted packages across npm, PyPI, crates.io, Go, Maven, NuGet, Packagist and RubyGems, sourced from the OSSF malicious-packages dataset (also feeds OSV.dev). Category taxonomy plus typosquat-target linkage for CI gating. Passive read only.

OSV & GitHub Security Scraper

taroyamada/oss-vulnerability-monitor

Scrape GitHub Security Advisories and OSV databases to extract CVSS v3.1 base scores, fixed version tags, and patching details for your tech stack.

NPM Package Scraper – Download Stats, Deps, Versions

logiover/npm-package-intelligence-scraper

Scrape NPM package download stats, dependencies and versions. NPM API alternative and registry data export to CSV/JSON. No token, no login.

Turn the Python Package Index into structured B2B data. Deep-dive and monitor releases of any package list, map a project's dependency tree (supply chain), or build developer lead lists from maintainer emails. Official public PyPI API, no proxy, no auth, no key. Delta mode for monitoring.

Monitor new Google Play reviews and produce release incident briefs, complaint clusters, and churn signals.

Track and compare NPM package downloads, trends, and metadata. Analyze daily, weekly, monthly, or yearly counts for multiple packages. Compare libraries side-by-side, retrieve version, license, and homepage. Ideal for choosing between libraries or monitoring growth. No API key required.

Scrape npmjs.org packages with 30+ fields: maintainer emails, weekly/monthly downloads, dependents, scores, repo & homepage. Search, lookup, or by-author modes.

PyPI Vulnerability Scraper

taroyamada/pypi-package-intelligence

Extract Python package metadata from PyPI and enrich it with OSV database alerts. Monitor dependencies for new version releases and critical CVE identifiers.

Docker Image Update Scraper

taroyamada/dockerhub-image-intelligence

Track public container repositories on a strict schedule to instantly detect tag drift, newly published versions, and storage size changes.

Durable monitor for GitHub Security Advisories (GHSA/CVE) on your package watch-list — npm, PyPI, Maven, RubyGems, Go, NuGet, Composer and more. Diffs each check against what you've already seen and charges only for genuinely new or updated advisories; a clean check costs nothing extra.