New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

dependonme

Package Overview
Dependencies
Maintainers
1
Versions
18
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

dependonme

Informed about the actuality and security of used npm packages

latest
npmnpm
Version
0.2.2
Version published
Weekly downloads
0
-100%
Maintainers
1
Weekly downloads
 
Created
Source

DependOnMe - DEPRECATED

DEPRECATION NOTICE

This package is now deprecated and no longer maintained.

  • Server Status: The DependOnMe server has been shut down and is no longer operational
  • Maintenance: No further updates, bug fixes, or support will be provided
  • Recommendation: Please remove this package from your dependencies

Migration

If you were using DependOnMe, please consider these alternatives for dependency monitoring:

  • npm audit - Built-in npm security auditing
  • Snyk - Comprehensive dependency vulnerability scanning
  • Dependabot - Automated dependency updates (GitHub)

Uninstalling

To remove DependOnMe from your project:

npm uninstall dependonme

Don't forget to also remove the postinstall script from your package.json:

{
  "scripts": {
    "postinstall": "node ./node_modules/dependonme/index.js"
  }
}

And remove the dependonme configuration section from your package.json.

Contact

For any questions about this project or its deprecation, please reach out via GitHub:

GitHub: Contact via GitHub Issues

Previous Functionality (Historical Reference)

DependOnMe was a dependency tracking service that helped monitor client-side dependencies in Node.js applications. It would:

  • Track dependencies installed client-side
  • Provide notifications about updates and security vulnerabilities
  • Collect information from node runtime, package.json, and package-lock.json
  • Send data to a central server for analysis and notification distribution

This functionality is no longer available due to server shutdown.

Thank you to everyone who used DependOnMe during its active development phase.

Copyright © 2023 Simon Dietrich - ISC License

Keywords

security

FAQs

Package last updated on 11 Aug 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts