onukura/OSS Sustain Guard - Package Sustainability Checker
Check package sustainability metrics (estimated contributor redundancy, maintainer retention, funding signals, etc.) across multiple ecosystems
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| packages | Packages to analyze (space-separated). Format: "requests" (Python) or "npm:react" (JavaScript) or "rust:tokio" (Rust) | no | "" |
| ecosystem | Default ecosystem for unqualified packages (python, javascript, go, rust, php, java, kotlin, scala, csharp, dotnet, dart, elixir, haskell, perl, r, ruby, swift). Use "auto" to detect. | no | auto |
| include-lock | Auto-detect packages from lock files (package-lock.json, Cargo.lock, pyproject.toml, etc.) | no | false |
| output-style | Output format style: compact, normal, or detail | no | normal |
| verbose | Enable verbose logging (cache operations, metric reconstruction) | no | false |
| profile | Scoring profile: balanced (default), security_first, contributor_experience, long_term_stability | no | balanced |
| show-dependencies | Analyze and display dependency package scores (requires lockfiles) | no | false |
| root-dir | Root directory for auto-detection of manifest files (default: current directory) | no | . |
| manifest | Path to specific manifest file (e.g., package.json, requirements.txt). Overrides auto-detection | no | "" |
| recursive | Recursively scan subdirectories for manifest and lock files | no | false |
| insecure | Disable SSL certificate verification for HTTPS requests | no | false |
| github-token | GitHub token for API calls (uses GITHUB_TOKEN by default) | no | — |
Outputs
| name | description |
|---|---|
| summary | Summary of analysis results |