Terms of use

By using RepoRadar you agree to the terms on this page.

As is, without warranty

RepoRadar is provided as is, without warranty of any kind, express or implied. We do not guarantee that it is accurate, complete, current or fit for any purpose. We may change or stop any part of it.

What a report is

• A report is an opinion derived from public data, using the published rules in the methodology.
• A report is not a security audit. It does not check code for vulnerabilities or malicious changes, and it cannot tell you a project is safe.
• A report is not legal advice. It does not say whether you may use a repo's code, and you should read the license yourself.
• Data comes from GitHub and third parties, and may be wrong, late or incomplete. Sections that could not be computed are marked as unavailable.
• Anyone can buy stars for any repo. Star findings describe a history, not the project's quality or the people behind it.

Your decisions

You decide whether to depend on a project. Check its code, its security posture and its license for your own use before you rely on it. RepoRadar is one input among several.

Fair use of the API and the site

• Requests that need a new report are rate-limited to about 6 per minute per IP address. Reports that already exist are served from cache.
• If you go over a limit you will get a "too many checks" response. Back off and try again later rather than retrying in a loop.
• Poll report.json?wait=1 no faster than every 2 seconds while a report is being computed.
• Do not use RepoRadar to crawl or copy the site at scale. Use the documented API instead.
• Credit deps.dev and OSV for package and advisory data wherever you show it. See the API page.

Badges

You are welcome to add a RepoRadar badge to your README. It shows the verdict level and links to the report. Badges are cached for about an hour, so a change in verdict may take that long to appear.

Acceptable use

Do not use RepoRadar to break the law, to attack GitHub, deps.dev, OSV or any other service, or to misrepresent a report as coming from GitHub or from a project's maintainers.

Changes

We may update these terms. The date of the latest change is shown below.

Last updated 12 October 2026.