Nicheloom visits: 58,280 all-time · 7,637 in the last 7 days

The opportunity tracker for new startups.

Today: 1,008 launches · Niche of the day: specialized calculation tools · See what launched today →

OSS sustain guard

Sustainability signals for OSS dependencies

Get picks like this daily. Today's launch numbers, the top launches, AI and tech news, and a daily opportunity pick, straight to your inbox.

Want to reach these readers? Sponsor an issue.

Hi HN, I made OSS Sustain Guard.After every high-profile OSS incident, I wonder about the packages I rely on right now. I can skim issues/PRs and activity on GitHub, but that doesn’t scale when you have tens or hundreds of dependencies. I built this to surface sustainability signals (maintainer redundancy, activity trends, funding links, etc.) and create awareness. It’s meant to start a respectful conversation, not to judge projects. These are signals, not truth; everything is inferred from public data (internal mirrors/private work won’t show up).Quick start: pip install oss-sustain-guard export GITHUB_TOKEN=... os4g checkIt uses GitHub GraphQL with local caching (no telemetry; token not uploaded/stored), and supports multiple ecosystems (Python/JS/Rust/Go/Java/etc.).Repo: https://github.com/onukura/oss-sustain-guardI’d love feedback on metric choices/thresholds and wording that stays respectful. If you have examples where these signals break down, please share.

HN · launched Jan 5, 2026 · 21 upvotes (top 34%) · 0 views

Niche: developer utility tools · 561 launches, 8 in the last 7 days ▼ -73% · Explore this niche →

Category and tags
  • Horizontal
  • Analytics & BI
  • Developer
  • Not AI
  • Hobby / open-source project

Visit website ↗ Source listing ↗

More like this: all 561 launches in developer utility tools →

Could you build this?

Yes Scanning open-source dependency files and querying public GitHub/registry APIs to aggregate sustainability metrics like commit frequency and issue resolution times is a standard automation script.

Discussion

6 comments analyzed.

Competitors mentioned: OpenSSF Scorecard, SLSA/artifact provenance technologies, Google Assured OSS

Concerns raised: Metadata (stars, download counts) easy to fake and game, Small/lesser-known projects overlooked despite being supply-chain attack vectors, Users likely only check popular dependencies, not risky transitive ones, Manual checking process limits practical adoption

Feature requests: Harder-to-manipulate signals for sustainability assessment, Automated dependency tree analysis instead of manual checks

Competitors

Other products that read as similar to this one : 180 launches clear the similarity bar, closest 8 shown.

Attention rank: #78 of 181 (itself plus its competitors, highest first, normalized so YC and Product Hunt are compared fairly).

Launched 58 days after the earliest competitor.

Related data

The niche, labels, vibe code rating and competitor comparison on this page are analysis by Nicheloom. If you use them, please credit nicheloom.com. How you may use our data.