Is that package alive, or quietly dying?

Paste a package name, a package.json, or a requirements.txt. We read live signals from the public registries and cross-check the OSV vulnerability database — no CVE required, no signup, and nothing leaves your browser.