Library to consume project Open Source Insights Project from Google
-
Updated
Aug 24, 2024 - Python
Library to consume project Open Source Insights Project from Google
git hooks to prevent committing vulnerable dependencies
Multi-dimensional GitHub repository trust scoring beyond stars — federates OpenSSF Scorecard, deps.dev, OSV. Apache-2.0.
Paste any GitHub repo → see every human and country behind its dependencies on a 3D globe. Any ecosystem, no token, runs in your browser.
Estimate the downstream impact ('blast radius') of a PyPI package version from deps.dev dependent counts and download volume.
CLI & Github Action to review and aggregate licenses of dependencies for a project
Stop opening 12 tabs to evaluate a library. GitHub repos + npm/PyPI packages + security advisories in one MCP tool call. Zero API keys required.
LLM/AI Safety Check — traffic-light supply-chain grader for self-hosted AI tools (Nebius x Emergence hackathon)
Gradle plugin that reports newer versions of your dependencies, Gradle plugins and the Gradle wrapper. It asks the Google deps.dev Open Source Insights API and, for your own artifacts, the Maven repositories you list.
deps.dev — Google's package metadata + dependency graph API
To associate your repository with the deps-dev topic, visit your repo's landing page and select "manage topics."