#dependencies

🔍️ A Ruby library for testing your library against different versions of dependencies managed by bundler or ORE

Cut AI-agent token waste ~90% — query a local SQLite structural index of your JS/TS/CSS codebase with SQL in one round-trip instead of 3–5 file reads. Symbols, imports, calls, components, CSS tokens, coverage, markers. CLI, MCP (21 tools), HTTP, GitHub Action, ESM API. 71 recipes; AST+resolver; SARIF/audit/baselines for CI.

Performs topological sorting.

A Gradle plugin to use dependencies from 'module-info.java' files.

🚀 Fast detection of composer dependency issues (unused dependencies, shadow dependencies, misplaced dependencies)

Detect circular dependencies in your TypeScript projects.

Rake tasks for managing build dependencies.

Analyze dependency licenses and get actionable licensing guidance for Python projects.

Dependency assurance software for Go. A deterministic, local source of truth about your dependencies - what's in them, how they're licensed, how to call them, and which known vulnerabilities your code actually reaches. Developers query it from the CLI with human-readable output; AI coding agents get JSON.

ESLint plugin for sorting and structuring import and export declarations.

Vet a package before your AI coding agent uses it — authoritative facts (CVEs, license, maintenance) via an MCP server + CLI. Local, no account.

📦 CMake's missing package manager. A small CMake script for setup-free, cross-platform, reproducible dependency management.

Explain any lockfile change: bumps release-verified against 22 registries, vulns (OSV), ages, deprecations, typosquats, integrity tampering — 61 formats incl. pdm.lock, vcpkg, mise.lock, build.gradle, pom.xml, go.sum, GitHub Actions, GitLab CI, Dockerfiles, Kubernetes, Helm, SBOMs. CLI + CI gate + MCP server + playground. By an AI agent.