Is this dependency alive, and what licence is it?
Before you build on a library — or when auditing what you already depend on — three questions: is it maintained, what licence, how popular. This answers them for a whole list at once.
- Runs from your browser, not our server
- No sign-up
- No watermark
Loading the tool…
How it works
- Pick npm, PyPI or GitHub and paste names, one per line (up to 40).
- Read the table: version, date, age since release (⚠ over two years), licence, details.
- Download the CSV for the audit file.
Why nothing is uploaded
Every operation on this page is done by code running inside your browser tab, using the same engine that renders web pages. The file is read from disk into your tab’s memory, transformed there, and written back out as a download. It is never sent anywhere — not to us, not to a third party.
Verify it yourself
- Open your browser’s developer tools (F12) and select the Network tab.
- Load your file and run the tool.
- The only requests you will see fetch the tool’s own code — and, for a few heavy tools, their open-source engine from a public CDN — plus one small page-view ping to loreatec.jp (page address and title, nothing more). None of them carry your file.
Frequently asked questions
What does “age” mean and why the warning?
Time since the latest release. Two years without a release is not proof of abandonment — some libraries are simply finished — but it is the point at which you should check the issue tracker before depending on it, especially for anything security-relevant.
Where do licences come from?
From the registry metadata the maintainer published (package.json licence field, PyPI classifiers, GitHub’s detected licence). Metadata can be wrong or missing; the licence file in the repository is the authority.
Why can GitHub lookups fail after a while?
GitHub’s public API allows 60 unauthenticated requests per hour per IP address. Each repository costs two (repo + latest release). Long lists hit the limit; wait an hour or check fewer at a time.
What is sent, and to whom?
The names, to the registry you selected, from your browser. No token, no account, nothing through this site.