17.4
Endor Labs is an application security platform for code, dependencies, secrets, container images, and AI coding agents.
Free planWebAPIExtension
Best Open Source Package Health Tools in 2026
Open source package health tools help you review dependencies, spot security issues and understand the condition of software packages. This category includes services and utilities available through web, Linux, Windows, macOS, APIs or browser extensions. Compare package health scoring, dependency alerts, licence analysis, supported package ecosystems, repository platforms and SBOM support.
27.2
ActiveState Platform hosts custom runtimes assembled from source.
Free planWebAPILinux
36.5
Photo Curator is a free, open-source tool for reviewing large photo libraries and identifying likely keepers.
Free planWebLinuxmacOS
- 4
OHRisk
OHRisk is a free local command-line tool for assessing open-source license risk in software dependencies before changes reach a pull request.
Free planLinuxmacOSWindows6.1Free plan - 54.8
- 6
OpenSSF Scorecard
LinuxmacOSWindows4.7 - 74.6
- 8
ecosyste.ms
Web4.6 - 9
LFX Insights
Web4.6 - 104.6
- 114.6
- 12
GrimoireLab
Linux4.4 - 134.3
- 144.3
Choosing well
Check where you can use it
The listed platforms include web, Linux, Windows, macOS, APIs and extensions. Pick a tool that fits the way you review packages and repositories.
Match the package checks
Compare package health scoring with dependency alerts to see which checks fit your workflow. Licence analysis can help when licence details matter to a project.
Check the package ecosystems covered before you connect a project, since support can differ between tools.
Look at integrations and SBOMs
Repository platform support affects where a tool can read project information. SBOM support matters when you need a software bill of materials as part of package review.
Review these capabilities alongside the platform list rather than choosing on price alone.
Review free and paid terms
A free plan is available from tools such as Aikido Package Health, DepGuard, GrimoireLab and OpenSSF Scorecard. Freemium services can also list pricing on request.
ActiveState Platform lists a 14-day trial. Mend Open Source is listed as paid, so check its current terms before adopting it.
Questions people ask
Can I start with a free plan?
Yes. Several listed tools offer a free plan, including Aikido Package Health, DepGuard, ecosyste.ms, OHRisk and OpenSSF Scorecard.
Is there a free trial?
ActiveState Platform lists a 14-day trial. The supplied facts do not state trial terms for the other tools.
Which checks should I compare?
Compare package health scoring, dependency alerts, licence analysis, package ecosystems, repository platforms and SBOM support.
Are these tools available on the web?
Web is a listed platform for the category. Mend Open Source is specifically listed with web support; check each tool’s platform details for other access methods.