@nullarclabs/depscope

Dependency intelligence CLI — health checks for your npm project

One command to understand your project's dependency health. Combines what you'd normally need 4-5 tools for.

Install

npx @nullarclabs/depscope

Or install globally:

npm i -g @nullarclabs/depscope
depscope

What It Checks

| Check | What it does | |-------|-------------| | 📦 Outdated | Current vs latest versions, major/minor breakdown | | 🔒 Security | Known vulnerabilities via npm audit | | 📜 Licenses | Flags copyleft and unknown licenses | | 🗑️ Unused | Detects deps in package.json not imported in source | | 🔄 Duplicates | Multiple versions of same package in tree |

Options

--json            Output as JSON (for CI)
--no-color        Plain text output
--section <name>  Run only one check
--ignore <pkgs>   Ignore specific packages
--prod            Only check production dependencies
--dev             Only check dev dependencies

Health Grade

Depscope calculates a score (0-100) and assigns a letter grade:

| Grade | Score | |-------|-------| | A | 90-100 | | B | 80-89 | | C | 70-79 | | D | 50-69 | | F | 0-49 |

CI Usage

npx @nullarclabs/depscope --json > depscope-report.json

License

MIT © nullarclabs