Is this package dead?
Check a GitHub repo, an npm package or a PyPI package: archived, renamed, moved to a successor, deprecated, or simply abandoned. If it is, we suggest maintained, licence-cleared alternatives from JustClaw-It.
sherlock-project/sherlock: Alive
- No archive, rename, move or deprecation signal found.
| Repository | sherlock-project/sherlock |
| Last push | 2026-10-30 (0 days ago) |
Based on live GitHub data from 2026-10-30 08:41 UTC and our weekly dead/moved check of 2026-10-26.
Maintained, licence-cleared alternatives in JustClaw-It
-
🕵️♂️ Collect a dossier on a person by username from 6K websitesscore 6.3/10 · MIT permissive · 39,361 stars · 32 components · search them
-
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Managementscore 7.0/10 · Apache-2.0 permissive · 5,685 stars · 38 components · search them
-
SpiderFoot automates OSINT for threat intelligence and mapping your attack surface.score 5.9/10 · MIT permissive · 23,716 stars · 251 components · search them
-
A JavaScript utility for posting across multiple social networks at oncescore 7.3/10 · Apache-2.0 permissive · 579 stars · 19 components · search them
-
A high performance offensive security tool for reconnaissance and vulnerability scanningscore 6.2/10 · MIT permissive · 4,057 stars · 18 components · search them
Questions
How do you decide a package is dead?
We check whether the GitHub repo is archived, deleted, renamed or transferred, read the start of its README for a deprecation or “we moved” notice, look at the npm deprecation flag or PyPI’s Inactive status and yanked releases, and measure the time since the last push.
Is no commits for a year a problem?
Not always: small, finished libraries can be stable for years. Treat it as a signal to look at open issues and security advisories, not as proof.
Let your agent pick maintained code. JustClaw-It is an MCP server with 1,533,000+ licence-cleared, quality-scored code components. Search is free; every result carries its licence and attribution.
Remote MCP endpoint: https://justclaw.it.com/mcp (API key auth). Works with Claude Code, Cursor,
Codex, Windsurf and other MCP clients. A one-line CLI installer (@justclaw-it/cli) is coming.