Package Provenance Attestation

Monitor selected parts of public web pages: fetch HTML over HTTP, extract text or inner HTML by CSS selector, and report only selector-level changes after a quiet baseline.

Find the renewal that did not reach every server. For each hostname the Actor resolves every A and AAAA address, opens a TLS handshake to each address with the hostname as SNI, and compares the certificate that each address serves with the newest certific

Watches scheduled GitHub Actions workflows and reports the ones that stopped to fire, that fail again and again, or that GitHub disabled for inactivity. One dataset record for each workflow plus one summary record. HTTP only, no browser, no proxy.

Checks GitHub Pages sites on custom domains: DNS records for the apex and www, HTTPS status of each required path, the HTTP-to-HTTPS redirect, the certificate host name, dangling-domain risk, and the Pages API state when a token is given. Gives PASS, WARN

Audit the PDF files that you publish against the tagged-document rules of PDF/UA-1, PDF/UA-2 or WCAG 2.2. The Actor downloads each file once, reads its structure tree, and reports every untagged item, every figure without alternative text, every table wit

Fetch the webhook source IP ranges that SaaS providers such as GitHub, Stripe, Datadog, PagerDuty and Bitbucket publish, and compare them with the CIDR blocks that your firewall, WAF or ingress allows. The Actor reports the published ranges that your allo

PyPI Package Health Auditor

contributive_naiad_wgt/pypi-package-health-auditor

Audit Python package maintenance, licensing, release files, compatibility, yanked releases, and metadata without an API key.

Pulls the manifest of every pinned image reference over HTTPS and reports whether the pull works now, why it would fail, which platforms the manifest holds, the TLS name-match verdict, and how much anonymous rate budget the registry has left. HTTP only, n

Check each scrape source with a plain HTTP fetch and a body marker. Keep consecutive-failure, quarantine, and recovery counters between runs, and report the sources that changed state.

Resolve each declared range or channel tag the way a package manager does, and report when the resolved version is withdrawn, holds no live file, or moved to another version since the last run. One row for each target, with the resolved version, the rule