ecosystems

Query advisories.ecosyste.ms for security vulnerability metadata aggregated from GitHub Security Advisories, OSV, RustSec, ErlEf and others. Use when checking a package or repo for known CVEs, listing recent advisories for an ecosystem, or fetching CVSS/EPSS scores and patched version ranges.

Query commits.ecosyste.ms for commit history and contributor statistics for any public repository. Use when checking how active a project is, who the top committers are, bus factor (DDS), bot commit ratio, or listing commits in a date range without cloning.

Query docker.ecosyste.ms for Docker Hub image metadata and the system/language packages installed inside images (via Syft SBOMs). Use when checking what's inside a Docker image, finding which images ship a given OS or language package, or browsing Linux distro variants.

Query issues.ecosyste.ms for issue and pull request metadata and statistics across GitHub, GitLab and other forges. Use when checking how responsive a project is, average time to close, PR merge rate, contributor counts, or listing open issues without hitting the forge API directly.

Query packages.ecosyste.ms for package, version and dependency metadata across 75+ registries (npm, PyPI, RubyGems, crates.io, Maven, Go, NuGet and more). Use when looking up a package by name or purl, listing versions, finding dependent packages, checking maintainers, or comparing adoption across ecosystems.