depfix-ai

CLI for dependency audit, env file generation, and contributor onboarding. Fix your deps, generate .env.example, and get projects ready in one command.

Requires Node.js ≥ 18.

Install

Global (npm or pnpm):

npm install -g depfix-ai
# or
pnpm add -g depfix-ai

Run without installing (npx / pnpm dlx):

npx depfix-ai@latest         # Recommended: always runs latest (bypasses cache)
npx depfix-ai-latest         # Same as above (alias)
npx depfix-ai                # May use cached version
npx depfix-ai --help
pnpm dlx depfix-ai@latest

Quick start

Running npx depfix-ai or depfix-ai with no args launches the interactive menu. Or run commands directly:

depfix-ai audit              # Security audit + human summary
depfix-ai env generate       # Scan source → .env.example
depfix-ai onboard            # Install deps + env + tests
depfix-ai fix                # Preview fixes (dry-run); use --apply to apply

One-off (no install):

npx depfix-ai@latest         # Interactive menu (recommended – always latest)
npx depfix-ai audit
pnpm dlx depfix-ai@latest env generate

Commands

depfix-ai audit

Run a security audit and get a human-readable summary (npm and pnpm).

| Flag | Description | |------|-------------| | --json | Print raw npm audit JSON | | --severity <level> | low | moderate | high | critical (default: low) | | --fail | Exit 1 if vulnerabilities ≥ severity |

depfix-ai audit
depfix-ai audit --severity high --fail
depfix-ai audit --json

depfix-ai env generate

Scan source for process.env.* and import.meta.env.*; generate grouped .env.example (and optionally a blank .env).

| Flag | Description | |------|-------------| | --out <path> | Output file (default: .env.example) | | --create | Create .env with blank values if missing | | --force | Overwrite .env when used with --create | | --check | Verify .env.example has all vars; exit 1 if not |

depfix-ai env generate
depfix-ai env generate --create
depfix-ai env generate --check

depfix-ai fix

Preview dependency fixes (dry-run by default). Use --apply to write changes.

| Flag | Description | |------|-------------| | --apply | Apply changes | | --force | Pass --force to npm audit fix | | --stash | Auto-stash if git dirty | | --commit | Auto-commit with chore(deps): audit fix | | --dry-run | Preview only (default) |

depfix-ai fix
depfix-ai fix --apply

depfix-ai onboard

One-command setup: backup (git stash), install deps, env generate, run tests.

| Flag | Description | |------|-------------| | --skip-install | Skip npm install | | --skip-env | Skip env generate | | --skip-test | Skip test script |

depfix-ai onboard
depfix-ai onboard --skip-test

Development

git clone https://github.com/hesxo/depfix-ai.git
cd depfix-ai
npm ci
# or: pnpm install
npm run build
npm test

Scripts: build · test · lint · version:patch

License

MIT