New
February 24, 2026
🚀 Introducing OSS Package Health
OSS Package Health helps you evaluate packages based on operational health signals, so you can quickly see which dependencies are actively maintained, widely adopted, and aligned with security best practices.
What’s New?
We’ve enriched OSS package insights with additional health indicators, including:
- OpenSSF Scorecard to assess security posture and best practices
- Release recency analysis with clear labels such as Outdated, Stale, and Mature
- Popularity signals like GitHub stars and weekly download counts
These attributes build on existing package insights, giving you a more complete view of OSS health and risk.
New Risk Category: OSS Package Health
A new SCA risk category makes it easier to triage and prioritize packages that may introduce operational or sustainability risk.
Common Use Cases
- Block unvetted packages published within the last 72 hours (cooldown period)
- Identify outdated packages (e.g., no release in 3+ years) and find newer or healthier alternatives
- Alert on packages with low OpenSSF scores
Thanks for your feedback