ecosyste.ms review
A broad, open-source metadata toolkit—not a package health-scoring or alerting service.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
For researchers, developers, policymakers, and commercial teams working with open-source software, ecosyste.ms is a collection of datasets and services for querying package and repository metadata. It offers web, API, and self-hosted access, and its services are available for free under open-source licenses. The scope is data discovery and analysis rather than a focused package-health dashboard, so it fits teams that need underlying metadata more than a single health verdict.
Its breadth is a central strength: package metadata spans 52 ecosystems and 109 sources, with repository information, dependency manifests and resolution, security-advisory metadata, and package-archive inspection. Additional tools parse and convert SBOM formats, extract license metadata, compare package or repository contents, and summarize lists of open-source projects. API access includes unauthenticated use subject to rate limits. This makes ecosyste.ms useful when a research workflow or internal service needs to combine multiple kinds of open-source project data; teams seeking a concise risk score or user-facing dependency alerts should look elsewhere, since those functions are not part of the offering described.
The published offering is free for general use, while commercial options add increased API rate limits and less restrictive licensing; pricing is handled through sales contact. Buyers should weigh that distinction if they need higher-volume API access or commercial licensing terms. Cloud and self-hosted deployment give teams a choice of how to access the services, and documentation and email are listed support channels. Choose ecosyste.ms for flexible package and repository data, dependency resolution, license extraction, and SBOM work. It is a weaker fit for organizations whose main requirement is ongoing dependency alerting or automated package-health scoring rather than access to metadata and tools.
ecosyste.ms pros and cons
- Where it wins
- Searches metadata across 52 ecosystems and 109 sources
- Resolves dependencies and provides security-advisory metadata
- Parses SBOMs and extracts license metadata
- Where it doesn't
- Does not provide package health scoring
- Does not provide dependency alerts
- Paid commercial options have no published pricing here
ecosyste.ms fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update