Packagist vs TotalShiftLeft Sandbox

Same instrument, two spec sheets — measured, not claimed.

Uptime · 30d
Uptime · 90d—%—%
Uptime · 30d—%—%
P50 · ms
P95 · ms
Authnonenone
CORSnono
HTTPSyesyes
Card requirednono
Commercial useunclearunclear
Data licenseUnverifiedUnverified
Free tierFree — limits not publishedFree — open sandbox, auth optional
Rate limitUnpublished100 req/window · 99 remaining · resets 60
In directory since2026-07-052026-07-05
operationalpartialdownno data

Packagist vs TotalShiftLeft Sandbox: common questions

Which is more reliable, Packagist or TotalShiftLeft Sandbox?

On our scheduled checks, TotalShiftLeft Sandbox leads on measured uptime — Packagist at —% versus TotalShiftLeft Sandbox at —% over 90 days. These are our own probe results, not provider claims; the uptime bars above show the day-by-day record for both.

Do Packagist and TotalShiftLeft Sandbox need an API key?

Neither needs a paid key — Packagist is callable with no signup, and TotalShiftLeft Sandbox is callable with no signup. Both are quick to prototype with; rate limits still apply.

Can I call Packagist and TotalShiftLeft Sandbox from the browser?

Neither sends browser-friendly CORS headers reliably, so call Packagist and TotalShiftLeft Sandbox from a server or proxy rather than client-side. The CORS and HTTPS rows above show exactly what we detected for each.

Are Packagist and TotalShiftLeft Sandbox free for commercial use?

Packagist has unclear commercial terms, and TotalShiftLeft Sandbox has unclear commercial terms. We track service terms and the data license as separate fields — see the Commercial use and Data license rows above, and confirm both before shipping either in a paid product.