Skip to content

Data sources

Codomix builds its pages from the public sources below. Each entry shows its licence.

  • npm registry

    Package metadata, READMEs, release history and download counts.

    Licence: Public registry data, read at a polite rate with an identifying User-Agent.

  • GitHub

    Public repository facts, READMEs, and public usernames and avatars. No emails and no private repositories.

    Licence: GitHub terms of service and API terms.

  • OSV

    Security advisories. We only use sources whose licence allows it and leave out non-commercial ones.

    Licence: Per-source licences, mostly CC0 1.0 and CC-BY 4.0.

  • OpenSSF Scorecard

    Security practice checks for open-source repositories.

    Licence: CDLA Permissive 2.0

  • deps.dev

    Dependency and dependent counts.

    Licence: CC-BY 4.0. Data from deps.dev by Google, used under that licence.

Our crawler identifies itself as codomix-bot and links back to this page.