Dependency Health Tracker

CLI package to assess the health of a project's npm dependencies. It checks for outdated and deprecated packages, surfaces license info, and can optionally run npm audit for known vulnerabilities.

Install

Inside a project or globally:

npm install dependency-health-tracker
# or
npm install -g dependency-health-tracker

Usage

dep-health --help
dep-health             # check prod dependencies in the current directory
dep-health -d          # include devDependencies
dep-health -a          # also run npm audit
dep-health -f json     # emit machine-readable JSON
dep-health -p ./other-project

What it reports

• Outdated vs latest published version (using npm registry metadata)
• Deprecation notices on the latest release
• License declared for the latest version
• Whether the current version range already satisfies the latest release
• Optional: vulnerability summary from npm audit

Programmatic API

const { runHealthCheck, formatReport } = require('dependency-health-tracker');

async function main() {
  const { dependencies, audit } = await runHealthCheck({
    cwd: process.cwd(),
    includeDev: true,
    runAudit: false,
  });
  console.log(formatReport(dependencies, audit, 'json'));
}

main();

Notes and roadmap

• The tool relies on npm registry access to look up metadata and on npm audit for vulnerability data.
• Future ideas: changelog fetcher, PR automation, EOL tracking, CI-friendly exit codes.