Pricing

$350.00 / 1,000 dependency and license risk scanner results

Try for free

Go to Apify Store

Dependency and License Risk Scanner

Try for free

Pricing

$350.00 / 1,000 dependency and license risk scanner results

Rating

0.0

(0)

Developer

Lav Chaudhary

Actor stats

Bookmarked

Total users

Monthly active users

6 hours ago

Last modified

Example input

{
  "ecosystem": "npm",
  "files": [
    {
      "name": "package.json",
      "content": "{\"dependencies\":{\"zod\":\"4.1.11\"}}"
    }
  ],
  "allowedLicenses": [
    "MIT"
  ]
}

Billing

One successful scan result writes one dataset item and emits exactly one primary pay-per-event event. Validation and execution failures are not charged.

Safety and limitations

Limited permissions; Standby disabled; no credentials, wallet access, shell execution, package installation, or arbitrary user code.
Sensitive request content is not logged; review outputs before sharing them.
This is a deterministic/static or bounded-fetch tool. It does not claim OCR, live CVE coverage, visual WCAG certification, independent fact verification, or runtime API verification unless explicitly stated above.

GitHub Repository Analyzer - Security & Maintenance Scorer

ntriqpro/github-repo-intelligence

Score any open-source GitHub repository before you depend on it: security posture, maintainership health, dependency risk and license compliance, combined into a single rating. Built for OSS due diligence in enterprise adoption reviews and VC technical diligence.

daehwan kim

GitHub Repo Trust Scanner — OSS Risk Report

wiggly_book/github-repo-report

Surface-level trust and maintenance report for public GitHub repositories: activity, license, SECURITY.md, releases, dependency files, contributor concentration, and risky README install patterns.

Mack

npm Dependency Tree & License Scraper

taroyamada/open-source-license-dependency-audit

Try Input: 1 bounded first run ≈ USD 0.01–0.03/package. From USD 0.01–0.03/package. Paste package name and Start.

naoki anzai

Open Source License Obligation Scanner

seeb/open-source-license-obligation-scanner

Extract license names, attribution duties, copyleft signals, commercial-use limits, notice requirements, and compliance actions from open-source project pages.

Techionik

Legacy Code License Scanner

codeclouds/legacy-code-license-scanner

Scans a git repository or pasted package.json/requirements.txt for declared and dependency licenses, and reports license-compatibility conflicts (e.g. GPL alongside proprietary code).

Dennis

npm + PyPI Package Release & Supply-Chain Monitor

produkdigitalali/npm-pypi-release-supply-chain-monitor

Monitor npm and PyPI packages for new releases, dependency changes, maintainer changes, license changes, deprecations, yanked releases, artifact hashes, provenance, and download shifts. Built for dependency tracking, software supply-chain monitoring, DevOps, security, and automated alerts.

ProdukDigitalAli

Dependency Supply-Chain Risk Audit

scrapeworks/dependency-risk-audit

Audit your package.json or requirements.txt for supply-chain risk: known vulnerabilities (OSV), deprecated/abandoned packages, and a project-level risk score.

Nicolas van Arkens

Package Vulnerability Scanner (OSV SCA, CVSS + Fixes)

scrapers_lat/package-vulnerability-scanner

Scan open-source packages for known vulnerabilities from OSV.dev (GHSA, CVE, PYSEC, RUSTSEC, GO). Query by name+ecosystem, exact version or git commit. Parsed CVSS score + severity, affected and fixed version ranges, CWEs and CVE aliases. Batch and version-specific.

Scrapers Lat

npm Package Health Score API — Dependency Risk Scorer

malonestar/npm-package-health-scorer

npm package health score API. Rate any npm dependency 0-100 with a letter grade from keyless public signals: downloads, release recency & cadence, maintainers, license, deprecation, deps. One row per package with top risks. Keyless. A clean MCP tool for AI coding agents.