Package health index
Is that package healthy, maintained, and safe?
Free, deterministic health snapshots for 58 popular open-source packages across npm and PyPI, each with a 0-100 score and a full, auditable evidence trail. Data from the public registries and OSV.dev.
npm
39 packages · worst-first0colorsv1.4.0Critical0flatmap-streamv0.0.1-securityCritical3event-streamv4.0.1Critical9node-fetchv3.3.2Critical10fakerv6.6.6Critical10jsonwebtokenv9.0.3Critical10minimistv1.2.8Critical10lodashv4.18.1Critical13coav2.0.2Critical17passportv0.7.0Critical18rcv1.2.8Critical19node-sassv9.0.0Critical20bowerv1.8.14High24requestv2.88.2High25jqueryv4.0.0High25tslintv6.1.3High25jadev1.11.0High25har-validatorv5.1.5High25bluebirdv3.7.2High35classnamesv2.5.1High35is-promisev4.0.0High35left-padv1.3.0High35ua-parser-jsv2.0.10High35gulp-utilv3.0.8High35protractorv7.0.0High35qv1.5.1High35optimistv0.6.1High40axiosv1.20.0Medium40node-ipcv14.0.0Medium40phantomjs-prebuiltv2.1.16Medium40istanbulv0.4.5Medium40enzymev3.11.0Medium40coffee-scriptv1.12.7Medium40babel-corev6.26.3Medium40fibersv5.0.3Medium50vitev8.3.5Medium55momentv2.31.0Medium55nextv16.4.3Medium64socket.iov4.8.4Low
PyPI
19 packages · worst-first0pycryptov2.6.1Critical10jinja2v3.1.6Critical10pyyamlv6.0.3Critical24sudsv1.2.0High40nosev1.3.7Medium40southv1.0.2Medium40theanov1.0.5Medium40MySQL-pythonv1.2.5Medium40python-memcachedv1.62Medium40flask-scriptv2.0.6Medium55werkzeugv3.1.9Medium55djangov6.1.2Medium55pillowv13.0.0Medium55aiohttpv3.14.5Medium55urllib3v2.8.0Medium55cryptographyv50.0.2Medium55pipv26.2.2Medium55scrapyv2.19.0Medium55starlettev1.10.0Medium
Snapshot generated 2026-10-26 · npm + pypi · scores recomputed on each refresh.