Package Registries

Health checks for Rust crates, Ruby gems, PHP packages, NuGet, Go modules, Homebrew formulae and Docker images, plus SPDX license classification.

payments ON MAINNET (real money) · 8 live endpoints

EndpointPriceWhat it answers
GET /brew-formula$0.02Homebrew formula status: version, license, deprecation or disablement, install counts over 30, 90 and 365 days.
GET /crate-health$0.03Health of a Rust crate on crates.io: latest release age, downloads, license, yanked versions, owners and repository.
GET /docker-image-health$0.03Health of a Docker Hub image: official or not, pulls, stars, last push age, recent tags and supported architectures.
GET /gem-health$0.03Health of a Ruby gem on RubyGems: latest release age, downloads, license, version counts, owners and links.
GET /go-module-health$0.02Health of a Go module via the official proxy: latest tagged version, release age, repository origin and pseudo-version warning.
GET /license-check$0.02Classify an SPDX license expression such as MIT OR Apache-2.0: permissive, copyleft or restricted, with the effective result.
GET /nuget-health$0.05Health of a .NET NuGet package: latest release age, downloads, verified owner, deprecation and known-vulnerability flags.
GET /packagist-health$0.02Health of a PHP Composer package on Packagist: latest stable release age, downloads, license, abandonment and GitHub signals.

GET /catalog returns this list as JSON. Activity hub · uptime.


Package facts come from the public registries named in each answer (crates.io, RubyGems, Packagist, NuGet, the Go module proxy, Homebrew, Docker Hub) and local computation, provided as is. Popularity and recency are signals, not security audits: a healthy-looking package can still contain vulnerabilities or malicious code, and a quiet one can be perfectly good. License classification is informational and not legal advice. Every paid response carries a disclaimer field.