sponsor-finder

To find sponsorable open-source dependencies, query the deps.dev API to resolve direct and transitive packages, then check npm funding metadata and FUNDING.yml files to identify eligible maintainers across multiple ecosystems.

Dependency sponsorship discovery works with PyPI and Cargo, alongside npm, Go, RubyGems, Maven, and NuGet, analyzing both direct and transitive dependencies to verify funding links across these package ecosystems.

The best way to check open-source project health before sponsoring is to review OSSF Scorecard data, which evaluates security practices and maintenance metrics alongside verifying active funding links for the target dependencies.

Deps.dev API integration helps locate GitHub Sponsors opportunities by resolving transitive dependencies across ecosystems, mapping package names to repositories, and cross-referencing funding metadata to discover eligible maintainers.

You can automatically verify funding links for transitive dependencies by querying dependency metadata across npm, PyPI, Cargo, Go, RubyGems, Maven, and NuGet, parsing FUNDING.yml files and npm funding fields for valid sponsorship URLs.

Running dependency sponsorship analysis before deployment identifies key open-source maintainers requiring financial support, allowing you to allocate resources effectively and foster a healthier open-source ecosystem early in the lifecycle.