libyear

A simple measure of dependency freshness

Calculate Go module's libyear! (and more)

A simple measure of dependency freshness

A simple measure of dependency freshness.

Maven implementation of the libyear dependency freshness measure

Find abandoned, deprecated and single-maintainer npm dependencies before they become supply-chain incidents. Zero-dep CLI + GitHub Action. Includes the State of npm Abandonment 2026 study.

Cross-ecosystem dependency maintenance auditor: flags unmaintained, archived, stale, and below-the-fix deps across the full transitive graph. Ruby gems natively; npm/pypi/cargo/go/maven/nuget via CycloneDX SBOM. Signals: activity, OpenSSF Scorecard, OSV advisories, libyear, poison-pill, runtime-ceiling. Outputs SARIF/JSON/CycloneDX with CI gates.

Track NPM dependency freshness, and calculate how pull requests will impact this

A tool for displaying historical metrics about a project's dependencies. Run the Freshli CLI on your project to see how its dependency freshness changes over time.

Track your javascript dependencies drift with libyear

Provide an SBOM and generate libyear

Dependency drift (libyears) and viability, plotted as a quadrant. Reads lock files and SBOMs, because a manifest range gives its floor and overstates how far behind you are.