Is this package dead?
Check a GitHub repo, an npm package or a PyPI package: archived, renamed, moved to a successor, deprecated, or simply abandoned. If it is, we suggest maintained, licence-cleared alternatives from JustClaw-It.
usestrix/strix: Alive
- No archive, rename, move or deprecation signal found.
| Repository | usestrix/strix |
| Last push | 2026-11-05 (0 days ago) |
Based on live GitHub data from 2026-11-06 02:13 UTC and our weekly dead/moved check of 2026-11-01.
Maintained, licence-cleared alternatives in JustClaw-It
-
Open-source, self-hosted AI penetration testing framework: maps your attack surface into a graph, autonomously exploits it from a Kali sandbox with human approval gates, and opens PRs that fix what it finds. MCP both wayscore 4.8/10 · MIT permissive · 3,296 stars · 1,935 components · search them
-
Fully autonomous AI Agents system capable of performing complex penetration testing tasks
-
Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Managementscore 7.0/10 · Apache-2.0 permissive · 5,685 stars · 38 components · search them
-
The system of action for AI-native cybersecurity—where intent becomes governed execution, evidence becomes operational memory, and every operation improves the next.score 6.6/10 · Apache-2.0 permissive · 7,943 stars · 570 components · search them
-
Supervised, Hermes-native penetration testing profile with 35 routed playbooks, guarded target execution, persistent engagement state, evidence-backed findings, and release-gated reporting.score 5.0/10 · MIT permissive · 160 stars · 67 components · search them
-
AI-powered bug bounty hunting toolkit that works with or without subscription.score 6.8/10 · MIT permissive · 5,414 stars · 137 components · search them
Questions
How do you decide a package is dead?
We check whether the GitHub repo is archived, deleted, renamed or transferred, read the start of its README for a deprecation or “we moved” notice, look at the npm deprecation flag or PyPI’s Inactive status and yanked releases, and measure the time since the last push.
Is no commits for a year a problem?
Not always: small, finished libraries can be stable for years. Treat it as a signal to look at open issues and security advisories, not as proof.
Let your agent pick maintained code. JustClaw-It is an MCP server with 3,362,000+ licence-cleared, scored code components. Search is free; every result carries its licence and attribution.
Remote MCP endpoint: https://justclaw.it.com/mcp (API key auth). Works with Claude Code, Cursor,
Codex, Windsurf and other MCP clients. A one-line CLI installer (@justclaw-it/cli) is coming.