RepoRadarSoundings for open-source dependencies
Should you depend on this repo?
RepoRadar reads a public GitHub repo's activity, its packages and its advisories, then gives a plain verdict with the reasons.
Try owner/repo, a GitHub URL, npm:express or pypi:requests. Choosing between two? Compare them side by side.
Shortcut: on any GitHub repo page, swap github.com for reporadar.ai in the address bar to get its report.
github.com/expressjs/expressreporadar.ai/expressjs/express
Example verdicts
Recent readings
- donutbrowser/
donutbrowser Caution
One person wrote most of the recent commits.
- vaultmcp/
vault Healthy
No known risks in the checks that ran.
- AhmadHassan-BTed/
B At risk
One person wrote most commits, and no one has committed by hand in 90 days.
What every report checks
- MaintenanceHuman commits, releases, how fast pull requests merge and whether issues get a reply.
- PeopleHow many people the work rests on, and whether that changed.
- StarsWeekly star history, unexplained bursts and stars GitHub has since removed.
- RiskLicense changes, published packages, known advisories and named successors.