Pricing

from $5.00 / 1,000 packages

Package Registry Monitor - npm, PyPI, crates.io

Input: packages as npm:react, pypi:requests or crates:serde. Output: latest version, release date, licence, maintainers, dependency count and an abandonment flag. Use when you need to check whether a dependency is current, maintained or stale.

Pricing

from $5.00 / 1,000 packages

Rating

0.0

(0)

Developer

Alexandre de La Fayette

Actor stats

Bookmarked

Total users

Monthly active users

2 days ago

Last modified

Package Registry Monitor

Track open-source packages across npm, PyPI and crates.io with one schema and one run.

Reads each registry's official public JSON API — documented, unauthenticated endpoints built for exactly this. No scraping, no API keys, no rate-limit games.

What you get

One row per package:

Field	Description
`name` / `registry`	Package name and which registry it came from
`latestVersion`	Current published version
`releasedAt`	When that version shipped
`firstReleasedAt`	When the package first appeared
`daysSinceRelease`	Days since the newest release
`isStale`	True if it has not shipped inside your threshold
`license`	Declared licence
`repository` / `homepage`	Normalised source and project links
`maintainers` / `maintainerCount`	Who publishes it — bus-factor signal
`dependencies`	Direct dependency count
`versionCount`	Total released versions
`deprecated`	Registry-flagged deprecation
`keywords`	Declared keywords
`versionHistory`	Last 10 releases with dates (optional)
`downloads`	Total and recent downloads (crates.io)

Input

{
  "packages": ["npm:react", "pypi:requests", "crates:serde"],
  "includeVersionHistory": true,
  "staleAfterDays": 365
}

Option	Default	What it does
`packages`	required	`registry:name`. Aliases accepted: `node`→npm, `pip`/`python`→pypi, `rust`→crates
`includeVersionHistory`	`true`	Attach the last 10 releases with dates
`staleAfterDays`	365	Days before a package is flagged stale

Scoped npm packages work as-is: npm:@types/node.

Who this is for

Security and platform teams auditing dependencies for abandonment. isStale, maintainerCount and deprecated together are a decent bus-factor signal.
Engineering managers tracking whether critical dependencies are still maintained.
Investors and analysts measuring release cadence across an ecosystem.
Developer-tool companies monitoring competitor packages.
Anyone who wants npm, PyPI and crates.io in one schema instead of three APIs.

Honest limits

dependencies counts direct dependencies only, not the full transitive tree.
crates.io does not expose maintainers through this endpoint, so maintainers is empty there.
PyPI licence data is inconsistent across packages — it falls back to classifiers, but some projects declare neither.
Download counts are only available from crates.io. npm and PyPI serve those from separate endpoints not included here.

Pricing

Pay per event. Charged per package successfully resolved. A failed lookup costs nothing.

Changelog

1.0 — First release. npm, PyPI and crates.io with staleness detection.

Malicious Package Supply Chain Tracker Scraper

jungle_synthesizer/malicious-package-supply-chain-tracker-scraper

Cross-ecosystem feed of confirmed malicious/typosquatted packages across npm, PyPI, crates.io, Go, Maven, NuGet, Packagist and RubyGems, sourced from the OSSF malicious-packages dataset (also feeds OSV.dev). Category taxonomy plus typosquat-target linkage for CI gating. Passive read only.

BowTiedRaccoon

Username Monitor: Availability Checker + Recurring Alerts

shipsatnight/username-monitor

Bulk username availability checking across GitHub, GitLab, Bluesky, Farcaster, npm, PyPI, crates.io, Docker Hub, Spotify, SoundCloud, Vimeo, YouTube, and X. Optional monitor mode alerts via webhook/Slack when a username's status changes.

Donovan

OSV & GitHub Security Scraper

taroyamada/oss-vulnerability-monitor

Scrape GitHub Security Advisories and OSV databases to extract CVSS v3.1 base scores, fixed version tags, and patching details for your tech stack.

naoki anzai

Tech Events & CFP Calendar Scraper

taroyamada/tech-events-intelligence

Extract upcoming developer conferences, local meetups, and open Call for Papers (CFP) deadlines to build a comprehensive speaking schedule for your DevRel team.

naoki anzai

Docs & Changelog Drift Scraper

taroyamada/docs-changelog-drift-monitor

Track developer portals and software release notes to feed accurate, structured update data into your RAG pipelines and LLM models.

naoki anzai

GitHub Release & Tag Scraper

taroyamada/github-release-monitor

Automate your dependency tracking by monitoring GitHub repositories for new releases, extracting version bumps and changelog summaries.

naoki anzai

Hacker News Scraper

automation-lab/hackernews-scraper

Scrape Hacker News stories from any section: front page, newest, Ask HN, Show HN, jobs, and best. Extracts titles, URLs, points, authors, comment counts, and post ages. Great for tech trend detection, content curation, and newsletter creation. Export to JSON, CSV, or Excel.

Stas Persiianenko

5.0

(1)

GitHub Scraper

automation-lab/github-scraper

Extract data from GitHub — repository details, developer profiles, trending repos, and search results. Stars, forks, languages, topics, and more. No API key needed.

Stas Persiianenko

5.0

(1)

GitHub Archive Events Scraper — Historical GH Events by Date

logiover/github-archive-events-scraper

Download the full historical firehose of public GitHub events from GH Archive by date and hour. Extract pushes, stars, forks, pull requests, issues, releases and comments since 2011. Filter by repo, actor, org and event type. No API key, no login.

Logiover

Package Registry Intelligence — npm, PyPI, crates & more

straightforward_hydra/package-registry-intelligence

One tool over 6 package registries (npm, PyPI, crates.io, RubyGems, NuGet, Packagist): version, license, repo, maintainer, downloads & dependencies. Keyless. For supply-chain & dev intel.