Automated weekly digest from pkgdrift — LLM-refined package intelligence across npm, PyPI, Cargo (Rust), and RubyGems. Pipeline runs every 6 hours.
This Week's Signal
15 packages tracked across cargo, npm, pypi · 2 showing drift · 6 active advisories in the GitHub feed
| Package | Ecosystem | Version | Drift | Vulns | Notes |
|---|---|---|---|---|---|
| actix-web | cargo | 4.13.0 | ⚠ Yes | — | Major-line .0 stalled 93d. |
| clap | cargo | 4.6.1 | No | — | |
| reqwest | cargo | 0.13.3 | No | — | |
| serde | cargo | 1.0.228 | ⚠ Yes | — | Last publish 236d ago. |
| tokio | cargo | 1.52.3 | No | — | |
| axios | npm | No | — | ||
| express | npm | No | — | ||
| lodash | npm | No | — | ||
| next | npm | No | — | ||
| react | npm | No | — | ||
| Django | pypi | 6.0.5 | No | — | |
| fastapi | pypi | 0.136.1 | No | — | |
| Flask | pypi | 3.1.3 | No | — | |
| numpy | pypi | 2.4.5 | No | — | |
| requests | pypi | 2.34.2 | No | — |
Advisory Highlights
GHSA-c3ch-22rq-xfwrGHSA-3mv2-vmwh-rwfxGHSA-m5j4-7r85-2cj2GHSA-9mvm-4gwg-v8mpGHSA-7h26-hg47-p9hxGHSA-97r8-rf7q-wmjw
Query via GET /v1/advisories.
How the Data Is Generated
Each record is fetched live from the package registry, cross-referenced against the GitHub Advisory Database, and refined by a local LLM that assigns a confidence score. Only records with confidence ≥ 0.6 reach the API.
Try It Free
Available at api.pkgdrift.com and on RapidAPI with a free tier (100 req/hr, no credit card).
curl -H "X-API-Key: YOUR_KEY" https://api.pkgdrift.com/v1/npm/express
Published automatically by the pkgdrift autonomous worker.
Top comments (0)