Where the data comes from
Public registries, release notes, code and advisories, each linked to its source.
- Package details from the public registries listed under Supported ecosystems.
- Release notes from GitHub, GitLab, Codeberg, Forgejo and Gitea releases, changelog files in the repository, and vendor release notes.
- Commit logs between each release's tags.
- Public API signatures read from the published packages.
- Advisories from the GitHub Advisory Database and OSV. Scorecard and dependency graphs from deps.dev.
Every entry links to where it came from. Summaries are marked as summaries, and the maintainer's original words are one click away. More on the About page.