Promote Sign in Sign up
Visit website Sign in to save

Overview

TrustOSS is a free web tool for analyzing public GitHub repositories and open-source libraries. It provides a health score, checks for fake-star patterns, runs deep scans for vulnerabilities, bus factor, CI and adoption signals, and lets you compare candidates side by side before you depend on them. It also offers shareable reports, README badges, and a CLI for dependency vetting.

TrustOSS screenshot

Access & connections

Where you can use TrustOSS, and what it plugs into.

Platforms

CLI

Integrations

GitHub

Capabilities

What this tool accepts, produces, and is strongest at.

Highlights

  • Repository health scoring across activity, maintenance, community, documentation, and maturity
  • Fake-star audit with star-growth and stargazer profile analysis
  • Deep scan for vulnerabilities, bus factor, CI pass rate, PR merge rate, and real adoption
  • Side-by-side comparison of 2–4 open-source libraries
  • Embeddable README badge with live TrustOSS score
  • CLI support for analyze, deep-scan, and star-audit

FAQ 8

What is TrustOSS?
TrustOSS is a free web tool for analyzing public GitHub repositories and open-source libraries. It provides a health score, checks for fake-star patterns, runs deep scans for vulnerabilities, bus factor, CI and adoption signals, and lets you compare candidates side by side before you depend on them. It also offers shareable reports, README badges, and a CLI for dependency vetting.
How to use TrustOSS?
Search by keywords or paste an owner/repo name or GitHub URL. Then review the repository health score, run a fake-star audit or deep scan, compare 2–4 candidate libraries, and copy the README badge or shareable report URL. You can use the main features without an account; GitHub sign-in is only for the maintainer dashboard.
What is TrustOSS?
TrustOSS is a free tool that analyzes the health and risk profile of public GitHub repositories and open-source libraries.
How is the health score calculated?
The score combines five weighted dimensions: activity, maintenance, community, documentation, and maturity, using public GitHub data.
How does the fake-star audit work?
It examines star growth patterns and recent stargazer profiles, looking for signs such as sudden spikes and suspicious account characteristics.
What does the deep scan check?
It checks vulnerabilities, real dependent packages, bus factor, CI pass rate, PR merge rate, docs-only detection, and star-growth authenticity.
Do I need an account to use TrustOSS?
No. Searching, analyzing, comparing, deep scans, star audits, and badges are free and do not require an account.
Can I add the score to my README?
Yes. TrustOSS provides an embeddable SVG badge that shows a repository's live score.
TrustOSS
Visit website