New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

depscan

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

depscan

Depscan ============

latest
Source
npmnpm
Version
0.4.1
Version published
Maintainers
1
Created
Source

Depscan

This finds unused dependencies in your node project.

Installation

npm install -g depscan

Usage

  • go to target dir and run depscan or do depscan ../source.js
  • You can also scan multiple entry points by doing depscan ../source1.js ../source2.js

Output

Output looks like this:

These dependencies are not used:

imap
mailparser
mail-listener2
mailstrip

These dependencies are missing in package.json:

msgpack
policyfile

Programmatic Usage

var depscan = require('depscan');
var scan = depscan('./index.js', __dirname);

var report = scan.report();
console.log(report);

report is an object like this:

{
  unused: ['foo'],
  missing: ['bar','baz']
}

FAQs

Package last updated on 10 Jun 2015

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts