None of the Big Package Registries Can Tell You If a Dependency Is Abandoned

I maintain a small actor that normalizes npm/PyPI/crates.io metadata into one row per dependency,...