Is this package dead?

Check a GitHub repo, an npm package or a PyPI package: archived, renamed, moved to a successor, deprecated, or simply abandoned. If it is, we suggest maintained, licence-cleared alternatives from JustClaw-It.

getsops/sops: Alive

No archive, rename, move or deprecation signal found.

Repository	getsops/sops
Last push	2026-10-27 (1 days ago)

Based on live GitHub data from 2026-10-29 07:34 UTC and our weekly dead/moved check of 2026-10-26.

Maintained, licence-cleared alternatives in JustClaw-It

segmentio/chamber

CLI for managing secrets

score 7.5/10 · MIT permissive · 2,615 stars · 28 components · search them
googlecloudplatform/berglas

A tool for managing secrets on Google Cloud

score 8.3/10 · Apache-2.0 permissive · 1,303 stars · 26 components · search them
betterleaks/betterleaks

Find leaked secrets everywhere.

score 5.0/10 · MIT permissive · 2,333 stars · 470 components · search them
openbao/openbao

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

score 4.6/10 · MPL-2.0 weak-copyleft · 8,696 stars · 1,505 components · search them
deepfence/secretscanner

:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:

score 7.3/10 · MIT permissive · 3,401 stars · 15 components · search them
jkroepke/helm-secrets

A helm plugin that help manage secrets with Git workflow and store them anywhere

score 6.8/10 · Apache-2.0 permissive · 2,035 stars · 18 components · search them

Questions

How do you decide a package is dead?

We check whether the GitHub repo is archived, deleted, renamed or transferred, read the start of its README for a deprecation or “we moved” notice, look at the npm deprecation flag or PyPI’s Inactive status and yanked releases, and measure the time since the last push.

Is no commits for a year a problem?

Not always: small, finished libraries can be stable for years. Treat it as a signal to look at open issues and security advisories, not as proof.

Let your agent pick maintained code. JustClaw-It is an MCP server with 1,518,000+ licence-cleared, quality-scored code components. Search is free; every result carries its licence and attribution.

Remote MCP endpoint: https://justclaw.it.com/mcp (API key auth). Works with Claude Code, Cursor, Codex, Windsurf and other MCP clients. A one-line CLI installer (@justclaw-it/cli) is coming.

Get a free API key Read the docs