Is this package dead?
Check a GitHub repo, an npm package or a PyPI package: archived, renamed, moved to a successor, deprecated, or simply abandoned. If it is, we suggest maintained, licence-cleared alternatives from JustClaw-It.
keygraphhq/shannon: Alive
- No archive, rename, move or deprecation signal found.
| Repository | keygraphhq/shannon |
| Last push | 2026-10-15 (12 days ago) |
Live GitHub check skipped (your hourly share of live GitHub lookups is used); showing our last weekly check.
Based on our weekly dead/moved check of 2026-10-26.
Maintained, licence-cleared alternatives in JustClaw-It
-
817 structured cybersecurity skills for AI agents · Mapped to 6 frameworks: MITRE ATT&CK, NIST CSF 2.0, MITRE ATLAS, D3FEND, NIST AI RMF & MITRE F3 (Fight Fraud) · agentskills.io standard · Works with Claude Code, GitHub
-
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.score 5.2/10 · Apache-2.0 permissive · 71,780 stars · 217 components · search them
-
A Claude Code skill bundle for bug hunting and external red-team work - 82 skills, 15 slash commands, 681 disclosed-report patterns curated across 24 core vulnerability classes, plus enterprise identity + infrastructurescore 6.2/10 · MIT permissive · 5,290 stars · 37 components · search them
-
AI-powered bug bounty hunting toolkit that works with or without subscription.score 6.8/10 · MIT permissive · 5,414 stars · 137 components · search them
-
AI-powered cybersecurity code review skill for Claude Code. 8 specialist agents, OWASP 2025, CWE Top 25, MITRE ATT&CK, 11 languages, zero configuration.score 6.2/10 · MIT permissive · 237 stars · 10 components · search them
-
OWASP Juice Shop: Probably the most modern and sophisticated insecure web applicationscore 4.7/10 · MIT permissive · 14,243 stars · 374 components · search them
Questions
How do you decide a package is dead?
We check whether the GitHub repo is archived, deleted, renamed or transferred, read the start of its README for a deprecation or “we moved” notice, look at the npm deprecation flag or PyPI’s Inactive status and yanked releases, and measure the time since the last push.
Is no commits for a year a problem?
Not always: small, finished libraries can be stable for years. Treat it as a signal to look at open issues and security advisories, not as proof.
Let your agent pick maintained code. JustClaw-It is an MCP server with 1,449,000+ licence-cleared, quality-scored code components. Search is free; every result carries its licence and attribution.
Remote MCP endpoint: https://justclaw.it.com/mcp (API key auth). Works with Claude Code, Cursor,
Codex, Windsurf and other MCP clients. A one-line CLI installer (@justclaw-it/cli) is coming.