Developer Tools·Standings

Open Source Package Health Tools

Open source package health tools help you assess software dependencies; the choice depends on the checks you need and where the tool can run.

Compare package health scoring, dependency alerts, license analysis, supported package ecosystems, repository platforms, and SBOM support. The signal score is out of 10; separate marks show whether a tool has a public API, open-source code, or a free tier.

  • 14 platforms
  • 12 with a free tier
  • Checked 7 Oct 2026
  1. 1
    EL
    Endor Labsendorlabs.com

    Endor Labs is an application-security platform that analyzes first-party code, open-source dependencies, secrets, containers, and AI-generated software.

    6.7 APIOpenFree Free tier
  2. 2
    AP
    ActiveState Platformdocs.activestate.com

    Custom runtime service for defining components, keeping project history, and getting deployment instructions.

    6.7 APIOpenFree Free tier
  3. 3
    PC
    Photo Curatorgithub.com

    Photo Curator culls blurry photos, groups burst duplicates, and ranks keepers from large photo libraries.

    6.3 APIOpenFree Free tier
  4. 4
    O
    OHRiskgithub.com

    Free local CLI that checks open-source licenses under SaaS or distributed-app use and exports reports.

    6.1 APIOpenFree Free tier
  5. 5
    G
    GrimoireLabgrimoirelab.github.io

    Open-source toolkit that collects, enriches, and filters analytics from software development tools.

    6.0 APIOpenFree Free tier
  6. 6
    EM
    ecosyste.msecosyste.ms

    Free web tools and APIs for package data, dependency trees, SBOM files, and license metadata.

    5.8 APIOpenFree Free tier · from $200/mo
  7. 7
    AP
    5.6 APIOpenFree Free tier
  8. 8
    LI
    LFX Insightsinsights.linuxfoundation.org

    Free service showing open-source project activity, contributors, security, stability, and health scores.

    5.6 APIOpenFree Free tier
  9. 9
    D
    DepGuardgithub.com

    Free npm checker for maintenance, licenses, package size, deprecation, and unused dependencies.

    5.2 APIOpenFree Free tier
  10. 10
    OS
    OpenSSF Scorecardscorecard.dev

    Free tool scoring GitHub projects for package health and analyzing their licenses.

    5.1 APIOpenFree Free tier
  11. 11
    OS
    4.8 APIOpenFree Free tier
  12. 12
    MO
    Mend Open Sourcemend.io

    Paid platform managing open-source risks, containers, code, and automated dependency updates.

    4.7 APIOpenFree —
  13. 13
    RH
    repo-health-scoregithub.com

    Free tool that assigns health scores to software repositories.

    4.6 APIOpenFree Free tier
  14. 14
    SL
    Sonatype Lifecyclesonatype.com

    Paid dependency manager with SBOM creation and reachability analysis across many package ecosystems.

    4.0 APIOpenFree —

Places #1, #2, #3, #4, #5 on this board are open to sponsors. Take #1 · Other ways to advertise

How to choose

Which package checks do I need?

Start with the risks you need to review: package health scoring, dependency alerts, license analysis, or software bill of materials (SBOM) support.

Compare the listed checks against your requirements before choosing; package ecosystems and repository platforms can also affect fit.

Which platforms does it need to run on?

Choose a tool that supports the environment you plan to use. Available platform options include web, Linux, macOS, Windows, an API, and self-hosting.

An API is a way for software to exchange information with another service. Self-hosted means running the tool on infrastructure you manage.

Can I use it for free?

Check the free-plan and free-trial details, then compare them with the paid-from price. Some pricing is listed as available on request, so the board may not show a fixed starting price.

A free tier is a plan; a free trial is a time-limited way to try a paid product. They are different pricing options.

Does open-source code matter for this tool?

The open-source mark refers to the tool's code, not to whether it checks open-source packages. If you need to read or change the tool's code, check its open-source mark and licence.

Questions

What does a package health tool do?

It helps assess software packages and dependencies. Compare package health scoring, dependency alerts, license analysis, package ecosystems, repository platforms, and SBOM support.

What does the signal score mean?

It is a score out of 10 based on maker-published signals about use, API access, documentation depth, open-source code, and a free tier.

How can I tell if a package health tool is open source?

Check the open-source mark. It describes the tool's code, not the open-source packages the tool may assess.

What platforms should I check before choosing?

Check whether the tool supports your needs: web, Linux, macOS, Windows, API access, or self-hosting are platform options on the board.

What is the difference between a free plan and a free trial?

A free plan is an ongoing plan with no charge stated; a free trial is a limited-time opportunity to try a paid product.

Some top positions on this board can be paid placements, standing where they were sold. The facts on each platform are not for sale. How we rank · Disclosure