A comprehensive dependency health monitoring tool to keep your projects secure and up-to-date.
Dependable is currently in active development. Star and watch this repository to stay updated on our progress.
Dependable scans your project dependencies and provides detailed health reports to help you maintain secure, up-to-date, and compatible dependencies. Stop worrying about outdated packages, security vulnerabilities, or license compatibility issues - Dependable has you covered.
- Security Vulnerability Detection: Identify and prioritize security vulnerabilities in your dependencies
- Maintenance Status Tracking: Know which dependencies are actively maintained vs abandoned
- License Compatibility Analysis: Ensure all dependencies have compatible licenses for your project
- Bundle Size Impact: Understand how dependencies affect your application's size
- Automated Update Recommendations: Get smart update suggestions with compatibility risk assessments
- Dependency Visualization: See your dependency graph with health indicators
- CI/CD Integration: Automate dependency health checks in your pipeline
- Core scanning engine
- Security vulnerability detection
- License compatibility analysis
- Maintenance status tracking
- Bundle size impact analysis
- Update recommendation system
- CLI interface
- Web dashboard
- CI/CD integrations
- Plugin system for custom rules
To get started with Dependable, follow these steps:
-
Download the Latest Release:
- Go to the Releases page of this repository (replace
your-username/dependablewith the actual repository path). - Download the
Source code (zip)orSource code (tar.gz)for the latest release (e.g.,v1.0.0). - Extract the contents of the downloaded archive to your desired project directory.
- Go to the Releases page of this repository (replace
-
Install Dependencies: Navigate to the extracted project directory in your terminal and install the necessary Node.js dependencies:
npm install
-
Run Dependable: Execute the tool using Node.js:
node index.js
Dependable will then analyze your project's
package.jsonfor dependencies, check for security vulnerabilities, and identify outdated packages, presenting a comprehensive health report in your console. -
**Output Formats (New!): Dependable now supports different output formats. Use the
--formatflag to specify your desired output:- Console (Default):
node index.js - Markdown:
node index.js --format markdown - JSON:
node index.js --format json
When using
markdownorjsonformats, the output will be printed tostdout, allowing you to easily pipe it to a file or another command. - Console (Default):
- Node.js (v14 or higher)
- npm or yarn
# Clone the repository
git clone https://github.com/yourusername/dependable.git
# Install dependencies
cd dependable
npm install
# Run tests
npm testThis project is licensed under the MIT License - see the LICENSE file for details.
Contributions are welcome. Please feel free to submit a Pull Request.
Questions? Suggestions? Feel free to open an issue or reach out to the maintainers.