Point it at your own project.
Paste a package.json, requirements.txt, Cargo.toml,
composer.json or Gemfile.
Every dependency is checked for advisories. The ones tracked here also get a security
scorecard, a licence and a last-push date.
Your manifest never leaves the browser. Package names go to OSV for advisories; nothing else is sent anywhere.
Your stack
Advisories are checked for every dependency. Scorecard and licence only for the ones tracked here. The readout can be downloaded as a CycloneDX SBOM, built in the browser like everything else on this page.
Watching
Kept between visits, and read again on every run. The figures come from /data/stack-index.json — the same published file the public pages use, so anything here can be checked from outside.
Keep a list
What this asks GitHub for, stated before you click rather than after.
Pasting a manifest works with no account and nothing installed. Signing in adds one thing: the list is remembered, so you do not paste it again. The first 10 packages are free.
- No scopes are requested. GitHub's authorisation screen will say it wants your public profile and nothing else. This cannot read your repositories, private or public, because it never asks for permission to.
- The access token is never stored. It is used once, to read your username, and dropped when the request ends.
- No wallet connects to this site. Not on this page, not on any page.
End of life
Dates are published by endoflife.date and cited, never inferred. A release with no announced end date is not listed as ending.
| Runtime | Release | Ends | Days left | Latest |
|---|---|---|---|---|
| oracle-jdk | 26 | 2026-09-18 | 16 | 26.0.2 |
| oracle-jdk | 17 LTS | 2026-09-30 | 28 | 17.0.20 |
| kubernetes | 1.34 | 2026-10-27 | 55 | 1.34.11 |
| python | 3.10 | 2026-10-31 | 59 | 3.10.21 |
| alpine | 3.21 | 2026-11-01 | 60 | 3.21.7 |
| rails | 8.0 | 2026-11-07 | 66 | 8.0.5.1 |
| dotnet | 8 LTS | 2026-11-10 | 69 | 8.0.30 |
| dotnet | 9 | 2026-11-10 | 69 | 9.0.19 |
| postgresql | 14 | 2026-11-12 | 71 | 14.24 |
| redis | 8.0 | 2026-12-01 | 90 | 8.0.6 |
| docker-engine | 25.0 | 2026-12-04 | 93 | 25.0.17 |
| php | 8.2 | 2026-12-31 | 120 | 8.2.33 |
| laravel | 12 | 2027-02-24 | 175 | 12.68.0 |
| kubernetes | 1.35 | 2027-02-28 | 179 | 1.35.8 |