npm & PyPI Dependency Risk Report

Product Safety Market Action Portfolio Report

taroyamada/product-safety-market-action-portfolio-report

Official CPSC and NHTSA public-record change signals with baseline-safe PAY_PER_EVENT delivery.

npm Package & Dependency Scraper

taroyamada/npm-package-dependency-intelligence

Analyze npm package metadata, versions, dependencies, maintainer contact hints, release cadence, and package risk signals using the official npm registry API.

Turn NPM package metadata, security advisories, and release data into actionable upgrade plans, version comparisons, security checks, and release-note summaries.

Monitor package vulnerability records from OSV.dev for npm, PyPI, Go, Maven, crates.io, RubyGems, and SBOM-derived package lists.

Package Registry Scraper (npm + PyPI)

dami_studio/package-registry-scraper

Scrapes package metadata from the npm and PyPI registries: name, version, author, license, repo, keywords, and npm monthly download counts. Search npm by keyword or look up exact package names on either registry. Top use: compare libraries before pic

NPM & PyPI CVE Monitor

conceivable_extension/npm-cve-monitor

Checks npm and PyPI packages against the OSV vulnerability database and npm registry. Detects CVEs, suspicious maintainer patterns, and supply chain risks. Paste your package.json or requirements.txt. £0.001 per package checked.

Audit public npm packages for maintenance, deprecation, download, license, dependency, and supply-chain risk signals.

PyPI Package Metadata Scraper

chrisp1211/pypi-scraper-max

PyPI Package Metadata Scraper. No key. $0 on failed or empty runs.

Extract npm package stats: downloads, version, license, descriptions

Scrape Python package data from PyPI: package info, versions, dependencies, download stats, classifiers, and release history. Free official PyPI JSON API.