EOL Dataset

About

Your SCA tool identifies CVEs, but it does not verify if the software is still actively maintained. That is a separate issue, and historically no solution has addressed it effectively. We monitor lifecycle status for over 12 million package versions, using official end-of-life announcements and machine learning to detect when maintainers have abandoned projects. Upload your package.json, pom.xml, requirements.txt, or any SBOM to clearly see which dependencies are still supported and which are not. This includes both direct and transitive dependencies across all major ecosystems, and it is completely free.