shiwani42/Dependency Aging Advisor
Weekly OSV-driven dependency advisory with codebase-aware risk prioritization. Supports npm, PyPI, RubyGems, Go, Rust, Maven, PHP, NuGet.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| output-dir | Directory for output artifacts (collection.json, analysis.json, advisory.md) | no | .github/dependency-aging |
| max-items-per-section | Maximum dependencies listed per advisory section | no | 10 |
| labels | Comma-separated labels to apply to the created issue | no | dependencies,security,advisory |
| create-issue | Create a GitHub issue with the advisory (true/false) | no | true |
| risk-weight-osv | Override OSV severity weight (default 0.55). All weights are auto-normalized. | no | "" |
| risk-weight-usage | Override usage depth weight (default 0.25) | no | "" |
| risk-weight-lag | Override version lag weight (default 0.15) | no | "" |
| risk-weight-health | Override maintenance health weight (default 0.05) | no | "" |
| import-graph | Generate dependency import graph (advisory.graph.html + advisory.dot) | no | false |
Outputs
no outputs