Aikido Package Health review
Free package scoring that combines maintenance, dependency and provenance signals.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Aikido Package Health is a free, cloud-based web service for assessing open-source packages before adopting them. It assigns each package an overall health score based on maintainer stability, dependency-tree stability, project maturity and release history, lifecycle-script safety, and build provenance or attestations. Package pages also present metadata, direct dependencies, and vulnerability information. The service is suited to individual developers and teams that want a package-level view of longer-term maintenance signals alongside vulnerability status.
The main strength is the breadth of the health score itself. Instead of limiting the assessment to vulnerabilities, Aikido combines several indicators that relate to project continuity and supply-chain confidence. Separate component scores let readers distinguish maintainer conditions from dependency-tree conditions, maturity, lifecycle scripts, and build attestations. Because the service is free, the published positioning makes it practical for an initial review of candidate dependencies without a paid plan decision. Its package pages keep the assessment centered on the dependency being considered, with direct dependency and metadata context available alongside the score.
Aikido says Package Health supports npm, Packagist, Maven, and PyPI, giving it coverage across four widely used package ecosystems. Its scope remains package-level rather than an integrated dependency-management workflow: integration features and dependency-alert capability are not part of the described product. That makes it a fit for developers and software teams performing dependency due diligence, especially when maintenance and provenance matter as much as vulnerability status. Organizations seeking connected repository workflows, automated alert handling, or broader application security operations should choose a separate tool that provides those capabilities.
Aikido Package Health pros and cons
- Where it wins
- Scores maintainer and dependency-tree stability separately
- Covers maturity, lifecycle-script safety, and build provenance
- Free web access across npm, Packagist, Maven, and PyPI
- Where it doesn't
- Focuses on package pages rather than integration workflows
- Does not include dependency-alert capability
- Offers no AI features
Aikido Package Health fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update