Your files stay on your device

Dependency End-of-Life checker

Paste product and version lines, purl strings or an SBOM and see which runtimes and frameworks are past or near end of life, with dated sources.

Paste a list or an SBOM, then press Check.

Every date comes from endoflife.date's public release cycles, and the report shows which product page each one came from. A cycle with no published end-of-life date is reported as unknown, never as supported, and a product the source does not track gets no claim at all. Near means within 90 days of the end-of-life date.

What to check

Products and versionsOne per line, up to 400 lines. A purl works too.

The SBOM can be CycloneDX or SPDX JSON. Only packages that are themselves a tracked product get checked; the mapping is shown, not guessed.

What leaves your browser

Only product names, such as nodejs or django, go to endoflife.date for its public release-cycle data. The versions you run, the rest of the list, and any SBOM never leave this tab. This page leaves your browser only when you press the button; never on load, never in the background. Nothing is sent anywhere else. Google Analytics still measures the visit to this page, and it never receives what you run through this tool.

Up to 400 lines and 40 tracked products per run; each paste caps at 100,000 characters. Bare Java is refused until a distribution is named, because Temurin, Corretto and friends each have their own cycle.

All regex & cron tools

Was this tool useful?

Dependency End-of-Life checker

More regex & cron tools