
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
blast-radius-analyzer
Advanced tools
改动影响范围分析器 - 追踪代码改动的下游影响范围
# npm
npm install -g blast-radius-analyzer
# 或者直接运行
npx blast-radius-analyzer
# 分析改动影响
blast-radius -p ./src -c ./src/api/user.ts
# 指定符号
blast-radius -p ./src -c ./src/api/task.ts --symbol getTaskStats
# CI/CD 模式 - 阈值告警
blast-radius -p ./src -c ./src/api/task.ts --threshold files:5,score:100
# JSON 输出
blast-radius -p ./src -c ./src/api/task.ts -o result.json
# 轻量模式 (不加载完整项目)
blast-radius -p ./src -c ./src/api/task.ts -t
| 参数 | 说明 |
|---|---|
-p, --project | 项目根目录 |
-c, --change | 改动的文件路径 |
--symbol | 改动的符号名 (函数/变量/类型等) |
-t, --symbol-only | 轻量模式,不加载完整项目 |
--threshold | CI/CD 阈值 (files:N,score:N) |
-o, --output | JSON 输出文件 |
--clear-cache | 清除缓存后重新分析 |
┌─────────────────────────────────────────────────────────────────┐
│ 📊 改动影响范围分析报告 │
└─────────────────────────────────────────────────────────────────┘
📝 改动内容
文件: task.ts
符号: getTaskStats
类型: 修改
🚨 风险等级: 🟢 低风险
📈 影响范围
├─ 受影响文件: 2 个
├─ 直接引用: 3 处
└─ 调用点: 1 处
📞 调用栈视图
📍 getTaskStats (改动点) [function] → task.ts:7
└─ fetchStats [function] → index.tsx:130
├─ handleRegenerate [arrow] → index.tsx:178
└─ handleStop [arrow] → index.tsx:187
📊 数据流分析 (DataFlow Pro)
基本块: 5 | 条件分支: 1 | 类型收窄: 1 | 置信度: medium
| 改动类型 | 追踪能力 |
|---|---|
| 导出函数 | ✅ 完整调用链 |
| 导出常量 | ✅ 传播路径 |
| 导出类型/接口 | ✅ 引用追踪 |
| 嵌套对象属性 | ✅ 传播路径 |
| 类/模块导出 | ✅ 实例化追踪 |
MIT
FAQs
Analyze code change impact and blast radius - 改动影响范围分析器
The npm package blast-radius-analyzer receives a total of 16 weekly downloads. As such, blast-radius-analyzer popularity was classified as not popular.
We found that blast-radius-analyzer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.