Assess Repository
Maintenance Risk
Enter any GitHub repo and get a real maintenance risk score based on live data. Find better-maintained alternatives for risky dependencies.
How It Works
Three simple steps to assess your dependency risk
Scan
Enter a repo URL, package name, or upload a dependency file
Analyze
We check 20+ real-time signals from GitHub
Act
Get risk scores, alternatives & action items
🛡️ Supply Chain Security Alerts
Known vulnerabilities and community-reported issues in dependencies
Better Alternatives
90+ curated library mappings to help you migrate away from risky dependencies.
| Package | Risk Score | Status |
|---|---|---|
| (current) | / | |
| → | / |
Top Contributors
Languages
Scan from any ecosystem Any Ecosystem
Upload dependency files from any ecosystem — we'll scan every dependency for maintenance risk
JavaScript
npm
PHP
Packagist
Python
PyPI
Ruby
RubyGems
Go
Go Modules
Java
Maven
Gradle
Gradle
More coming soon...
Upload package.json, composer.json, requirements.txt and more — we'll scan every dependency for maintenance risk
Why RepoRisk?
Real data, real insights, real alternatives for your dependencies.
Real Data, Not Guesswork
We analyze 20+ live signals: issue response time, PR merge speed, commit frequency, contributor health, and more.
Find Better Alternatives
90+ curated library mappings. When a dependency is risky, we show you what to migrate to.
Privacy First
Upload a dependency file instead of connecting repos. Your code never leaves your machine.
Built for Teams
Agency dashboard to monitor all your projects. Track risk across your entire portfolio.
Repos Scanned
Alternatives Found
Agencies Trust Us
Powerful Features
Everything you need to assess and manage dependency risk.
Real Risk Scores
Every repository gets a maintenance risk score based on 20+ live GitHub signals.
Smart Alternatives
When a dependency is risky, we suggest better-maintained alternatives you can migrate to.
Instant Results
Get a full risk assessment in seconds. No signup required for basic scans.
Evidence-Based
Every score is backed by real GitHub data — commit history, issue response times, PR merge speed, and more.
Multi-Ecosystem
Support for npm, Composer, pip, Bundler, Go modules, Maven, Gradle, and more.
API Access
Integrate risk scoring into your CI/CD pipeline.
Simple Pricing
Start free, upgrade when you need more.
Free
- scans per day
- 1 alternative per scan
- Basic risk breakdown
Pro
- Unlimited scans
- Full comparison table
- Monitoring & alerts
- NPM Stats
API
- Everything in Pro
- API access
- CI/CD integration
- Webhook notifications
About RepoRisk
app.about_p1
app.about_p2