Dependency health, at a glance. Know which dependencies are quietly dying.
Explore real dependency health grades and daily checks. Then scan your own.PkgTrace grades upstream repository maintenance health from A to F, explains the evidence, and suggests healthier alternatives. Known vulnerability findings are reported separately; a grade is not a security rating for an installed version.
Real packages. Real health scores.
Daily monitoringChecked daily · higher scores mean healthier maintenance
-
C
77.5/100Reactnpm
Low issue resolution
Checked 12 hours ago
-
D
64.1/100Expressnpm
Low issue resolution
Checked 12 hours ago
-
B
83.5/100Axiosnpm
Moderate responsiveness
Checked 12 hours ago
Real packages. Real health scores.
See what PkgTrace finds before you scan your own dependencies.
Checked daily · higher scores mean healthier maintenance
React
npm
Low issue resolution
-6.0 points since previous scan
Checked 12 hours ago
Express
npm
Low issue resolution
-7.4 points since previous scan
Checked 12 hours ago
Axios
npm
Moderate responsiveness
-12.0 points since previous scan
Checked 12 hours ago
Lodash
npm
Very slow responsiveness
+0.0 points since previous scan
Checked 12 hours ago
Moment
npm
Very slow responsiveness
+0.0 points since previous scan
Checked 12 hours ago
TypeScript
npm
Moderate issue resolution
+6.0 points since previous scan
Checked 12 hours ago
Laravel
Packagist
Very low issue resolution
+12.0 points since previous scan
Checked 12 hours ago
Symfony HTTP Foundation
Packagist
No issues to assess
+0.0 points since previous scan
Checked 12 hours ago
Guzzle
Packagist
Very low issue resolution
+0.0 points since previous scan
Checked 12 hours ago
Requests
PyPI
Very slow responsiveness
+0.0 points since previous scan
Checked 12 hours ago
Django
PyPI
No releases
+0.0 points since previous scan
Checked 12 hours ago
Rails
RubyGems
Very low issue resolution
+6.0 points since previous scan
Checked 12 hours ago
Recent monitoring activity
Actual scans, score changes, and newly observed security findings.
-
Rails
Score changed from 71.50 to 77.50
-
Laravel
Grade changed from F to C
-
TypeScript
Score changed from 83.50 to 89.50
-
Axios
Grade changed from A+ to B
-
Express
Grade changed from C to D
-
React
Grade changed from B to C
We check this public collection daily. You can scan your own dependencies for free.
Maintenance breakdown
Security findings
Incomplete or not checked — findings may be missing
-
Affected recorded version Exact version needed Review needed
Fixed releases by branch — verify applicability before upgrading:
Healthier alternatives
Higher maintenance-health scores. Check compatibility before switching.
Create a free account to organize your projects and run manual dependency scans.
How It Works
One grade. The evidence behind it.
Grades come from GitHub maintenance activity, with evidence for each signal. Vulnerability findings are shown separately and do not determine the maintenance grade.
-
1
Scan
Enter a repo URL, package name, or upload a dependency file
-
2
Analyze
We check 20+ real-time signals from GitHub
-
3
Act
Get a grade, the reasons for it and a healthier alternative
Issues get answered quickly, releases are regular and several people maintain it.
Healthy overall; one or two signals are worth a look.
Activity is slowing or the backlog is growing. Revisit it every quarter.
Responses are slow and fixes lag. Plan a replacement or a fork.
Effectively unmaintained or carrying serious risk. Replace it.
Why PkgTrace?
What a scan checks
Everything you need to assess and manage dependency risk.
A grade with its evidence
Every repository gets an A–F grade and a 0–100 health score, built from live GitHub activity and known vulnerabilities.
Smart Alternatives
When a dependency is risky, we suggest better-maintained alternatives you can migrate to.
Evidence-Based
Every score is backed by real GitHub data — commit history, issue response times, PR merge speed, and more.
Multi-Ecosystem
Support for npm, Composer, pip, Bundler, Go modules, Maven, Gradle, and more.
Built for Teams
Organize projects and run manual checks on Free. Scheduled monitoring requires Pro or API.
About PkgTrace
PkgTrace analyzes the maintenance health of open-source dependencies using live GitHub data — issue responsiveness, resolution rates, backlog health, release cadence, and contributor risk — and turns it into one A–F grade, with the evidence behind it.
It was built for developers and agencies who rely on open source and want an early warning before a critical dependency goes stale. Scan a repository, a package, or a whole dependency file — and discover better-maintained alternatives when risk is high.
Start with the dependencies you already have
Upload a manifest or add your repositories — your first portfolio grade takes about a minute.