stackaudit

Audit your npm project's health in one command — outdated packages, CVEs, bundle sizes, and smarter alternatives.

npx stackaudit

Features

• Outdated packages — shows current / wanted / latest with MAJOR / MINOR / PATCH severity
• Security vulnerabilities — wraps npm audit and surfaces critical/high counts at a glance
• Bundle size estimates — flags heavy dependencies (moment, lodash, axios, etc.) with minified+gzip KB
• Alternative suggestions — recommends leaner replacements for bloated or deprecated packages

Install

npm install -g stackaudit

Or run without installing:

npx stackaudit [path/to/project]

Usage

# Audit current directory
stackaudit

# Audit a specific project
stackaudit ~/projects/my-app

Example output

🔍 stackaudit — my-app v2.1.0

━━ Outdated Packages ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  Package                      Current     Wanted      Latest      Severity
  react                        17.0.2      17.0.2      18.2.0      MAJOR
  axios                        0.27.2      0.27.2      1.6.0       MAJOR
  eslint                       8.50.0      8.57.0      9.0.0       MINOR

━━ Security Vulnerabilities (npm audit) ━━━━━━━━━━━━━
  HIGH    : 2
  MODERATE: 1

  Run npm audit fix to auto-fix safe upgrades.

━━ Bundle Size Estimates (minified+gzip) ━━━━━━━━━━━━
  moment                     72 KB      █████
  axios                      13 KB      █

━━ Alternatives for Bloated / Deprecated Packages ━━
  ▸ moment
    → date-fns or dayjs (10-40x smaller)
  ▸ axios
    → native fetch (Node 18+) or ky

━━ Summary ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  Total dependencies : 42
  Outdated           : 3
  Vulnerabilities    : 3
  Bloated/replaceable: 2

Zero dependencies

stackaudit uses only Node.js built-ins and the npm CLI already on your system. No install bloat.

License

MIT © chengyixu