Terms of Use

1. What pkgtree is

pkgtree is a free, informational tool for inspecting the contents of publicly published software packages and their metadata across package registries. It fetches published artifacts, extracts them without installing or executing anything, and presents the files and automated analysis as they are. By using pkgtree you agree to these terms.

2. Provided “as is”

pkgtree is provided on an “as is” and “as available” basis, without warranties of any kind, whether express or implied, including but not limited to warranties of accuracy, completeness, merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the service will be uninterrupted, timely, secure, or error-free, or that any information it presents is accurate or current.

3. Analysis is automated, limited, and not authoritative

Any signal pkgtree surfaces — including whether a package or version is “flagged,” any listed finding, indicator, or comparison — is produced by automated static analysis and third-party reports. It is not exhaustive and not a guarantee. In particular:

• A package shown as flagged may be mislabeled (a false positive), and a package with no flag may still be harmful (a false negative). The absence of a flag is not a statement that a package is safe.
• pkgtree does not execute code or perform runtime analysis, so behavior that only appears at install or run time may not be detected.
• Findings and flags reflect information available to pkgtree at a point in time and may be incomplete, outdated, or incorrect.

pkgtree is not an authoritative security source and must not be relied upon as the sole basis for any decision. Independently verify anything that matters before acting on it. You are solely responsible for how you use the information presented.

4. Third-party data

pkgtree presents data sourced from public package registries and other third parties. We do not control that data and are not responsible for its accuracy, availability, or the practices of those sources. References to any package, project, maintainer, or organization are for identification and informational purposes only and do not imply any endorsement or affiliation.

5. Limitation of liability

To the maximum extent permitted by law, pkgtree and its operator will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, profits, or goodwill, arising out of or related to your use of, or inability to use, the service or any information it presents — even if advised of the possibility of such damages.

6. Acceptable use

Do not use pkgtree to break the law, to overload or disrupt the service or its upstream sources, or to misrepresent its output as an authoritative or certified determination. We may rate-limit, restrict, or discontinue access at any time.

7. Corrections

If you believe a package has been mislabeled or a finding is inaccurate, contact us at [your-contact@example.com] and we will review it. This does not create any obligation or guaranteed timeframe.

8. Changes

We may update these terms from time to time. Continued use of pkgtree after changes take effect constitutes acceptance of the revised terms.