TrustOSS
Free open-source repo health checkerHealth scores, fake star audits, and vuln scans
Highlights
What you can do with it
- Compare candidate libraries before picking a dependency
- Check a project for known vulnerabilities before integrating it
- Let maintainers track their own repo health over time
How to use it
- 1 Search keywords or paste the owner/repo name
- 2 Read the health report and the five-dimension breakdown
- 3 Run a deep scan or compare candidate libraries
- 4 Share the report URL or embed the badge in a README
Who it is for
Pros
- Free to use with no account for most features
- Fake star audit adds a rare trust check
- Side-by-side comparison and CLI support
Limitations
- It is free now, but features and terms can change
- Scores are a guide, not a guarantee of code quality
- Deep scans depend on available built-in informations
What TrustOSS is
TrustOSS is a free web tool for evaluating the quality and health of open-source GitHub repositories. It scores a repo from 0 to 10 across five weighted dimensions: activity, maintenance, community engagement, documentation completeness, and maturity. It also runs a fake star audit by drawing the star growth curve and analyzing the accounts of recent stargazers, and it scans for known vulnerabilities and checks the bus factor. You can search, analyze, and compare two to four libraries side by side without an account, and a command-line tool is available. Only the maintainer dashboard requires a GitHub login.
What you can do with it
- Score a repository's health across five dimensions
- Audit fake stars through growth curves and stargazer accounts
- Scan for known vulnerabilities and check the bus factor
- Compare candidate libraries side by side
Who it is for
- Developers choosing open-source dependencies
- Enterprises vetting software supply chain security
- Maintainers tracking their own project health
What to watch out for
It is free now, but features and terms can change, so confirm current details before you rely on it. The score is a guide, not a guarantee of code quality, so read the code and docs yourself for critical dependencies. Deep scans depend on the available vulnerability and dependency data, so coverage can be incomplete for less common packages. Use it as one input in your decision, not the only one. When quality matters, export a small draft first to confirm the result before producing the final file. Generated suggestions are for reference only, so verify anything that affects professional judgment or important data. For team use, agree on naming and editing conventions in advance to avoid version conflicts or duplicated work.
FAQ
Is TrustOSS free?
Yes. You can search, analyze, compare, and get badges without an account; only the maintainer dashboard needs a GitHub login.
What does the score mean?
It rates a repo from 0 to 10 across five dimensions like activity, maintenance, community, documentation, and maturity.
Can it detect fake stars?
Yes. It draws the star growth curve and analyzes recent stargazer accounts to spot possible inflation.
Why it is free
What the official page says： 免费
Free limits, trial length and features are decided by the official site and can change at any time.
Product preview
Screenshot archived from the listing page, for preview only.
