GitHub Repo Dependency Intelligence

What you get: a repository_summary row per GitHub repository (stars, forks, open issues, language, license, risk signals), a manifest_file row per manifest read, and one dependency row per listed package, capped by maxDependenciesPerRepo.

Sample output from a real run (2026-10-18, the JSON below: facebook/react, package.json, 3 rows):

rowType	repo	details
repository_summary	facebook/react	JavaScript · MIT · 251,237 stars · 51,518 forks · 1,461 open issues · risk signal high-open-issues
manifest_file	facebook/react	package.json (8,566 bytes) · 1 dependency row emitted
dependency	facebook/react	@babel/cli ^7.10.5 (npm, development)

React's root package.json lists only devDependencies, so the JSON below sets includeDevDependencies: true; with false the same run returns 0 dependency rows.

Open Input (leave defaults → Start) Paid first-run JSON ≈ USD 0.01–0.03/repo (1 repository + 1 dependency). Keep reports, exports, and movement options bounded for the first run. Open Console Input (deep link above) and run this JSON.

{
  "repositories": [
    "facebook/react"
  ],
  "manifestPaths": [
    "package.json"
  ],
  "includeDevDependencies": true,
  "includeRepositorySummary": true,
  "maxDependenciesPerRepo": 1,
  "timeoutMs": 15000,
  "delivery": "dataset",
  "dryRun": false
}

Paste repository and Start.

Analyze public GitHub repositories, package manifests, dependencies, and repository health signals using the GitHub REST API.

Store Quickstart

Run the single-input JSON above first; keep optional reports and exports disabled or bounded.

Use with Apify MCP

Exact actor: taroyamada/github-repo-dependency-intelligence

Sample input JSON:

{
  "repositories": [
    "facebook/react"
  ],
  "manifestPaths": [],
  "includeDevDependencies": true,
  "includeRepositorySummary": true,
  "maxDependenciesPerRepo": 250,
  "timeoutMs": 20000,
  "delivery": "dataset"
}

Use cases

Use this actor for OSS dependency & supply-chain audit — enumerate GitHub repo dependencies, releases, and manifests. Auth-free, official-API-first, with a stable output schema and documented source compliance.

What It Does

• Fetch repository metadata from GitHub
• Inspect common manifest files such as package.json, requirements.txt, pyproject.toml, and go.mod
• Emit dependency rows with package manager, dependency group, name, and version
• Emit manifest file rows and repository summary rows
• Support optional GitHub token for higher API limits

Input

{
  "repositories": ["facebook/react", "nodejs/node"],
  "manifestPaths": [],
  "includeDevDependencies": true,
  "includeRepositorySummary": true,
  "maxDependenciesPerRepo": 250,
  "delivery": "dataset",
  "dryRun": false
}

manifestPaths can be left empty to use common defaults.

Input Examples

Example: Single repository, runtime dependencies only

{
  "repositories": [
    "expressjs/express"
  ],
  "manifestPaths": [
    "package.json"
  ],
  "includeDevDependencies": false,
  "maxDependenciesPerRepo": 5
}

Example: Small portfolio

{
  "repositories": [
    "facebook/react",
    "vercel/next.js"
  ],
  "maxDependenciesPerRepo": 3
}

Example: Repository summary with one dependency row each

{
  "repositories": [
    "facebook/react",
    "vercel/next.js",
    "expressjs/express"
  ],
  "maxDependenciesPerRepo": 1
}

Output Rows

• repository_summary
• manifest_file
• dependency

Webhook delivery sends the full payload and does not also push dataset rows.

Local Run

npm install
npm test
node src/index.js

Notes

This actor uses public GitHub APIs. Without a token, GitHub rate limits are lower. Add githubToken for larger batches.