Dependency and License Risk Scanner

GitHub Repository Analyzer - Security & Maintenance Scorer

ntriqpro/github-repo-intelligence

Score any open-source GitHub repository before you depend on it: security posture, maintainership health, dependency risk and license compliance, combined into a single rating. Built for OSS due diligence in enterprise adoption reviews and VC technical diligence.

Surface-level trust and maintenance report for public GitHub repositories: activity, license, SECURITY.md, releases, dependency files, contributor concentration, and risky README install patterns.

npm Dependency Tree & License Scraper

taroyamada/open-source-license-dependency-audit

Try Input: 1 bounded first run ≈ USD 0.01–0.03/package. From USD 0.01–0.03/package. Paste package name and Start.

Open Source License Obligation Scanner

seeb/open-source-license-obligation-scanner

Extract license names, attribution duties, copyleft signals, commercial-use limits, notice requirements, and compliance actions from open-source project pages.

Legacy Code License Scanner

codeclouds/legacy-code-license-scanner

Scans a git repository or pasted package.json/requirements.txt for declared and dependency licenses, and reports license-compatibility conflicts (e.g. GPL alongside proprietary code).

npm + PyPI Package Release & Supply-Chain Monitor

produkdigitalali/npm-pypi-release-supply-chain-monitor

Monitor npm and PyPI packages for new releases, dependency changes, maintainer changes, license changes, deprecations, yanked releases, artifact hashes, provenance, and download shifts. Built for dependency tracking, software supply-chain monitoring, DevOps, security, and automated alerts.

Audit your package.json or requirements.txt for supply-chain risk: known vulnerabilities (OSV), deprecated/abandoned packages, and a project-level risk score.

Package Vulnerability Scanner (OSV SCA, CVSS + Fixes)

scrapers_lat/package-vulnerability-scanner

Scan open-source packages for known vulnerabilities from OSV.dev (GHSA, CVE, PYSEC, RUSTSEC, GO). Query by name+ecosystem, exact version or git commit. Parsed CVSS score + severity, affected and fixed version ranges, CWEs and CVE aliases. Batch and version-specific.

npm Package Health Score API — Dependency Risk Scorer

malonestar/npm-package-health-scorer

npm package health score API. Rate any npm dependency 0-100 with a letter grade from keyless public signals: downloads, release recency & cadence, maintainers, license, deprecation, deps. One row per package with top risks. Keyless. A clean MCP tool for AI coding agents.

NPM Package Security & Maintenance Auditor

glowing_glove/npm-package-security-maintenance-auditor

Audit npm packages for latest version, release freshness, license, repository links, deprecation status, and maintenance risk.