We analyze dozens of signals across three main areas: maintenance activity (commits, issues, bus factor) via the GitHub API, usage metrics (downloads, freshness) via the npm registry, and known vulnerabilities via OSV.dev. These are weighted to produce a single 0-100 score.
Yes, private repository scanning and the GitHub Action are fully supported on the Pro and Team plans. Free plans are limited to public repositories. We only request the minimum required GitHub OAuth permissions to access your code.
API keys are available to Pro and Team plan subscribers. You can generate one in your Account Settings after upgrading. Add it to your repository secrets as DEPGRAPH_API_KEY to enable CI/CD scanning.
Yes. You can cancel your subscription from your billing dashboard. You'll retain access to your plan's features until the end of your current billing cycle.
Our support team is here to help you get the most out of DepGraph.
Contact Support