Deadpendency assesses your repository dependencies for project health. A healthy dependency is being actively committed to, by multiple maintainers with regular package releases. Deadpendency checks your dependencies remain healthy over time and will fail the check if a dependency has become unhealthy. See an example report.

Continuous security analysis

LGTM is a code analysis platform for identifying vulnerabilities and preventing them from reaching production.

LGTM automatically runs 1600+ standard analyses contributed by researchers from the Semmle Security Research Team and our customer community, including Microsoft, Google, Uber and Mozilla.

Quickly refine and run custom QL queries to find variants of known issues and prevent them from being re-introduced into your codebase.