A growing package index spanning Linux distributions, FreeBSD, NetBSD and Homebrew. Version compare, dependency graphs and CVE data, all open.
2,015,868
packages indexed
31
distributions
145
repositories
Oct 14, 2026
metadata refresh
One package, every distribution, side by side. Spot who is on the newest release and who is lagging, without opening five tabs.
1.27.5newest1.27.5newest1.27.41 patch behind1.27.41 patch behind1.26.09 releases behindCVE-2025-1974high 7.5Buffer over-read in the ngx_http_mp4_module when handling crafted MP4 files, leading to worker process crash.
fixed in 1.27.4-1
CVE-2024-7347medium 5.7Memory disclosure in mp4 module under specific configuration when processing a specially crafted media file.
fixed in 1.27.1-1
A real API, file reverse-lookup, dependency graphs and daily data dumps. Public reads need no challenge and have no 10,000-result cap.
GET /v1/packages/debian/nginx{ "name": "nginx", "version": "1.27.4-1", "cves": 2}Type a path, find the package that ships it.
Walk the full requires/provides tree, not a flat list.
Full snapshots in Parquet and JSON. Take the whole index offline.
No challenge or page-view gate for package reads; only high-cost and write operations are abuse-protected.
One package, every distribution, side by side. Spot who is on the newest release and who is lagging, without opening five tabs.
1.27.5newest1.27.5newest1.27.41 patch behind1.27.41 patch behind1.26.09 releases behindEvery package page links its known vulnerabilities from OSV, distribution security metadata and NVD, with severity, score and the exact version that fixes each one. The one thing pkgs.org never shows you.
CVE-2025-1974high 7.5Buffer over-read in the ngx_http_mp4_module when handling crafted MP4 files, leading to worker process crash.
fixed in 1.27.4-1
CVE-2024-7347medium 5.7Memory disclosure in mp4 module under specific configuration when processing a specially crafted media file.
fixed in 1.27.1-1
A real API, file reverse-lookup, dependency graphs and daily data dumps. Public reads need no challenge and have no 10,000-result cap.
GET /v1/packages/debian/nginx{ "name": "nginx", "version": "1.27.4-1", "cves": 2}Type a path, find the package that ships it.
Walk the full requires/provides tree, not a flat list.
Full snapshots in Parquet and JSON. Take the whole index offline.
No challenge or page-view gate for package reads; only high-cost and write operations are abuse-protected.
Browse indexed distributions and newly supported repository targets by release.
Reference pages for the desktop you run and the commands you type every day.
Search over a million packages across supported Linux distributions, BSD systems and Homebrew. No account needed.
Search packages