Open Source Insights (deps.dev)
Explore package dependencies, licenses, vulnerabilities, and health signals.
At a glance
- Editor scoreNot yet scored
- PricingFree plan
- Best forDevelopers researching package dependency risks
- Free planYes
- Paid fromNone
- Package health scoringYes
- Facts checked26 Sep 2026
Where it wins
- Maps dependency paths and compares changes between package versions
- Shows known vulnerabilities and licensing across dependency graphs
- Offers HTTP and gRPC APIs plus a BigQuery dataset
Where it doesn't
- Covers seven ecosystems, so packages outside them are not in scope
- Does not provide verified alerts, SBOM support, or remediation
- Cloud-only access may not suit teams requiring self-hosted deployment
Our verdict on Open Source Insights (deps.dev)
Open Source Insights (deps.dev) is Google's service for exploring open-source packages and their dependency structures. It is aimed at developers investigating package composition and potential dependency risks, whether through its website or programmatic access. The service covers Cargo, Go, Maven, npm, NuGet, PyPI, and RubyGems, with dependency graphs decorated by version, license, vulnerability, and other code-health information. Its focus is package research rather than a full dependency remediation workflow.
The strongest fit is investigation across dependency trees: users can visualize dependencies, isolate paths to a particular dependency, compare changes between package versions, and review package version histories. Vulnerability information surfaces known issues affecting packages and dependencies, while licensing information can be viewed across graphs. This makes deps.dev useful for tracing why a package is present and understanding changes before adopting a version. It is less suited to teams seeking verified alerting, SBOM support, or remediation capabilities; those needs point toward a broader package security workflow.
According to the vendor's published description, the service is available without charge, with website access and HTTP and gRPC APIs; a BigQuery dataset supports large-scale queries. That range allows individual package lookups as well as bulk analysis, and its seven supported ecosystems span several major package communities. The category specifications also identify GitHub, GitLab, and Bitbucket repository integrations, though the central experience remains package and graph exploration. Choose deps.dev when free, cross-ecosystem package investigation and data access are priorities. Teams needing an operational system for alerts or fixing dependency findings should look elsewhere.
Open Source Insights (deps.dev) pricing
Open Source Insights (deps.dev) fact sheet
| Free plan | Yes |
|---|---|
| Paid from | None |
| Package health scoring | Yes |
| Dependency alerts | Not verified |
| License analysis | Yes |
| Package ecosystems | Cargo, Go, Maven, npm, NuGet, PyPI, RubyGems |
| Repository platforms | GitHub, GitLab, Bitbucket |
| SBOM support | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Support | |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | deps.dev |
| Facts checked | 26 Sep 2026 |
Alternatives to Open Source Insights (deps.dev)
- Sonatype LifecyclePolicy-driven SCA with broad ecosystem coverage, SBOMs, reachability, and continuous monitoring.3.0
- Endor LabsMaps vulnerable dependency reachability and connects findings to remediation workflows.4.0
- SocketBroad dependency risk coverage, with cloud-only deployment and paid plans from $25 per developer monthly.5.0
See all Open Source Insights (deps.dev) alternatives →
Used Open Source Insights (deps.dev)? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Open Source Insights (deps.dev) for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Open Source Insights (deps.dev) is listed in our Open Source Package Health Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/open-source-insights-deps-dev/"><img src="https://www.itechguides.com/best/badge/open-source-insights-deps-dev.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes a score or a verdict. How we rank.