8 Services from package-health.x402tookit.com

Returns a health verdict (maintained, stale, or abandoned) for an npm, PyPI, Go, Maven, Cargo, or NuGet package, including deprecation status, license info, release cadence, and adoption signals.

Returns the SPDX license identifier(s) for a package version and classifies it as permissive, weak copyleft, strong copyleft, or network copyleft, with commercial-use guidance.

Returns last-week and last-month npm download counts, intra-month trend percentage, and a popularity band for a given npm package.

Checks whether a specific PyPI package version has been yanked, returning the maintainer's reason, upload date, and file count.

Returns the direct and transitive dependency counts for a package version and classifies its dependency footprint as light, moderate, or heavy.

Returns recent versions of a package with publish dates, deprecation flags, and release cadence metrics (median days between releases).

Checks whether a package version has SLSA or sigstore build attestations, signaling a verifiable build provenance.

Returns key health metadata for a PyPI package: latest version, Python requirement, license, release freshness, and whether the latest release was yanked.