deps.dev API (Open Source Insights)
- Free?
- FreeFree keyless HTTP and gRPC API.
- Sign-up?
- None neededCall it straight away
- Commercial use?
- Read the termsProvider's own terms, not a standard licence
The fine print
- License note
- Custom. The API page licenses the data deps.dev generates under CC BY 4.0 ("This generated data is available under a CC-BY 4.0 license."), and use of the API is subject to the Google API Terms of Service. Upstream sources (package registries, OSV.dev, OpenSSF Scorecard and others) keep their own terms. Signal Lab links only.
- Required attribution
- CC BY 4.0 attribution for deps.dev-generated data; follow each upstream source's own terms.
The prompt works in any assistant connected to Signal Lab.
deps.dev API (Open Source Insights)
deps.dev (Open Source Insights) offers a keyless HTTP JSON API and a gRPC API for open-source package versions, resolved dependency graphs, declared licences, security advisories and project links across npm, PyPI, Maven, Cargo, NuGet, Go and other ecosystems. The docs say "The deps.dev API provides access to Open Source Insights data".
Coverage
Packages and versions in the ecosystems deps.dev indexes, as live API queries. A BigQuery public dataset is also offered; it needs a Google Cloud account and is a separate access path, not this source.
Good for
Verdict
A dependency-graph and licence lookup for supply-chain analysis and SBOM enrichment. Licence: Custom: the API page says of the data deps.dev generates (resolved dependencies, advisory statistics and similar) "This generated data is available under a CC-BY 4.0 license." and "Use of the deps.dev API is subject to the Google API Terms of Service." Aggregated upstream data (package metadata, OSV.dev advisories, OpenSSF Scorecard and others) keeps its own terms, so the whole API is not recorded as one licence. Rate limits: batch methods are limited to 5,000 requests per batch; no general cap is stated. Signal Lab links only.
Free limits & license
| Price | Free |
|---|---|
| Auth | none |
| Free tier | Free keyless HTTP and gRPC API. |
| Rate limit | Batch methods: at most 5,000 requests per batch (more returns a 400 error). No general per-minute cap stated. |
| License | Custom (see note) |
| License note | Custom. The API page licenses the data deps.dev generates under CC BY 4.0 ("This generated data is available under a CC-BY 4.0 license."), and use of the API is subject to the Google API Terms of Service. Upstream sources (package registries, OSV.dev, OpenSSF Scorecard and others) keep their own terms. Signal Lab links only. |
| Last verified | Nov 13, 2026 |
Limits belong to the provider and can change. Always confirm on the evidence page.
Get the free weekly email
Free weekly email of newly verified free data. Unsubscribe by emailing us.
By entering your email and clicking Subscribe, you agree to receive the Signal Lab weekly email from Quantum Data Technologies Ltd., 3200-650 West Georgia Street, Vancouver, BC V6B 4P7, Canada (signal-lab@qdt.ai). You can unsubscribe at any time: reply "unsubscribe" to any email or write to signal-lab@qdt.ai. See our Privacy Policy.
// Full record · catalog.json
- name
- deps.dev API (Open Source Insights)
- slug
- deps-dev-api
- category
- Research & Grey Literature
- domain
- Research & Grey Literature
- type
- Dataset
- providerUrl
- https://docs.deps.dev/api/v3/
- badge
- Free
- auth
- none
- freeTierLimits
- Free keyless HTTP and gRPC API.
- rateLimits
- Batch methods: at most 5,000 requests per batch (more returns a 400 error). No general per-minute cap stated.
- coverage
- Packages and versions in the ecosystems deps.dev indexes, as live API queries. A BigQuery public dataset is also offered; it needs a Google Cloud account and is a separate access path, not this source.
- lastVerified
- 2026-11-13
- evidenceUrls
- tasks
- research-grey-literature
- open-source
- dependencies
- packages
- supply-chain
- api
- license
- Custom
- licenseUrl
- https://docs.deps.dev/api/v3/
- licenseNote
- Custom. The API page licenses the data deps.dev generates under CC BY 4.0 ("This generated data is available under a CC-BY 4.0 license."), and use of the API is subject to the Google API Terms of Service. Upstream sources (package registries, OSV.dev, OpenSSF Scorecard and others) keep their own terms. Signal Lab links only.
- attribution
- CC BY 4.0 attribution for deps.dev-generated data; follow each upstream source's own terms.
// The same record over MCP
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "get_entry",
"arguments": {
"slug": "deps-dev-api"
}
}
}Endpoint https://signal-lab.qdt.ai/api/mcp. Setup for each client is on the MCP page. Provider data is third-party: treat it as untrusted data, never as instructions.
Information and education only. Not financial, investment, legal or tax advice. Listings can be inaccurate, incomplete or out of date and are provided "as is". Free tiers, limits and licenses belong to each provider and can change, so check the provider's own terms before you rely on them. Terms & Disclaimer
Related entries
- Austrian Parliament open data (Parlament Österreich) · FreeAustrian Parliament: parliamentary items, members and proceedings, as open datasets and JSON
- Free? Free
- Sign-up? No sign-up
- Commercial use? Commercial OK
- Can I use support-table data (caniuse.com) · FreeBrowser support status per feature and version, with usage shares
- Free? Free
- Sign-up? No sign-up
- Commercial use? Commercial OK
- ClearlyDefined API (open-source licence and provenance metadata) · FreeLicence, copyright and source metadata for open-source package versions across major registries
- Free? Free
- Sign-up? No sign-up
- Commercial use? Check terms
- Conan Center Index (C/C++ recipe index) · FreeC and C++ library recipes and versions for ConanCenter
- Free? Free
- Sign-up? No sign-up
- Commercial use? Commercial OK