Command-line gate that blocks risky dependency changes -- typosquats, tampered lockfile entries, newly acquired install scripts, and hallucinated package names -- before install, before commit, before CI.

Offline dependency-risk engine: diffs a manifest/lockfile change and scores it for typosquats, lockfile tampering, install-script acquisition, and hallucinated package names.

generates a hash that represents a module and its depenencies uniqueness

Trace imports, detect unused code, clean dependencies — all with a super-fast CLI

Snyk dependency graph library

Guardrail for safe npm dependency updates

OpenTelemetry Context Zone

OpenTelemetry AsyncLocalStorage-based Context Manager

Generate a dep tree given a lockfile

The Linux 64-bit binary for rev-dep

Calculates the state of a dependency

Use npm's Arborist to get a dependency tree for a package.

Detect the types of dependencies

OpenTelemetry Context Zone with peer dependency for zone.js

Fast installation using only pnpm-lock.yaml

Umbrella installer and combined report over the independently installable guardrail gates.

[](https://travis-ci.org/stefanpenner/mr-dep-walk) [](https://ci.appveyor.com/project/em

A Rush plugin that displays the dependency graph.

create and hydrate dependency IDs

Dedupes node modules as they are being required which works even when dependencies are linked via ln -s or npm link.