Beacon

Beacon is an AI dependency monitoring tool that predicts open source package abandonment 60–90 days before it happens, so engineering teams can plan migrations instead of firefighting after a package goes stale. It connects through a read-only GitHub App (with monorepo support), scans your manifests, and scores every dependency with an XGBoost survival model that draws on eight signal sources. A risk dashboard ranks all dependencies by survival probability on a 0–100 scale, with a signal breakdown covering commit velocity, maintainer activity, funding, issues, community health, and security. When a package looks at risk, Beacon suggests replacement packages with effort estimates and can alert via Slack, email, or JIRA at thresholds you configure. It also tracks security context, including CVE age and OSSF Scorecard integration. As an AI dependency monitoring tool it is aimed at engineering teams on GitHub who want to shift from reactive dependency incidents to proactive, scheduled upgrades. Beacon is free for one repository with no credit card; a paid tier for more repos and features is referenced but not priced on the page.

Predicting open source dependency abandonment so engineering teams can plan migrations proactively