@depr/scan

CLI tool to scan projects for package dependencies by parsing lock files. Outputs JSON for import into depr.dev.

Installation

npm install -g @depr/scan

Or use directly with npx:

npx @depr/scan scan

Usage

# Scan current directory
depr-scan scan

# Scan specific directory
depr-scan scan ./packages/frontend

# Use --path flag (alternative)
depr-scan scan --path /home/user/projects/myapp

# Write output to file
depr-scan scan --output dependencies.json

# Show help
depr-scan --help

# Show version
depr-scan --version

CLI Flags

| Flag | Shorthand | Description | |------|-----------|-------------| | --path <dir> | -p | Path to project directory | | --output <file> | -o | Write JSON output to file instead of stdout | | --version | -v | Show version number | | --help | -h | Show help |

Supported Lock Files

| Ecosystem | Lock Files | |-----------|------------| | npm | package-lock.json (v2, v3) | | Yarn | yarn.lock | | pnpm | pnpm-lock.yaml | | Python/pip | requirements.txt | | Python/Poetry | poetry.lock | | Python/Pipenv | Pipfile.lock | | Rust | Cargo.lock | | Go | go.mod | | Ruby | Gemfile.lock |

Example Output

{
  "schemaVersion": "1.0",
  "metadata": {
    "scannedAt": "2025-12-06T09:00:00.000Z",
    "cliVersion": "0.1.0",
    "scannedPath": "/home/user/myproject"
  },
  "ecosystems": [
    {
      "ecosystem": "npm",
      "lockfileType": "package-lock.json",
      "lockfilePath": "package-lock.json",
      "dependencies": [
        {
          "name": "express",
          "version": "4.18.2",
          "isDirect": true,
          "isDevDependency": false
        },
        {
          "name": "typescript",
          "version": "5.3.3",
          "isDirect": true,
          "isDevDependency": true
        }
      ]
    }
  ],
  "summary": {
    "totalEcosystems": 1,
    "totalDependencies": 234
  }
}

Monorepo Support

The scanner automatically detects lock files recursively, making it ideal for monorepos:

# Scan entire monorepo
depr-scan scan .

# Scan specific package
depr-scan scan --path ./packages/api

Common directories are excluded by default: node_modules, .git, dist, build, target, .venv, venv, __pycache__.

Development

# Install dependencies
npm install

# Build
npm run build

# Test
npm test

# Lint
npm run lint

License

Proprietary - see https://depr.dev/terms