#dependencies

Find unused, missing and transitive dependencies in a Python project.

:robot: A bot that helps you keep your projects up-to-date

Enforce architectural boundaries in your JavaScript and TypeScript projects

Safety checks Python dependencies for known security vulnerabilities and suggests the proper remediations for vulnerabilities detected.

Remove unused dependencies in a Rust project

About A git subcommand for analyzing package/dependency usage in git repositories over time

A minimal specification for purl aka. a package "mostly universal" URL, join the discussion at https://gitter.im/package-url/Lobby

Lint your Python architecture.

Detect license usage restrictions in your project!

:mag: ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet, the Google Summer of Code, Azure credits, nexB and other generous sponsors!

Free, open-source CLI for dependency intelligence, SBOMs, vulnerability auditing, and CI policy gates.

Socket patch CLI tool

A source dependency management tool for Protobuf modules.

Stop wrestling with code dependencies. Use Codependence! 🤼‍♀️

🥦 A modern cli tool that keeps your deps fresh

A Go library for parsing package manager manifest and lockfiles.

Track and query Cargo dependency graphs.

Consistent dependency versions in large JavaScript Monorepos.

Unleash the detectives

A Go library for fetching package metadata from multiple sources

A utility for managing cargo dependencies from the command line.

Local-first dependency updates for polyglot repositories—Python, Node.js, Rust, Go, Ruby, .NET, Terraform, GitHub Actions, pre-commit, and Mise.