devcompass
Advanced tools
Dependency health checker with ecosystem intelligence, user-configurable GitHub Personal Access Token support, real-time GitHub issue tracking for 502 popular npm packages, unified interactive dependency graph with dynamic layout switching, intelligent cl
Dependency health checker with ecosystem intelligence, user-configurable GitHub Personal Access Token support, real-time GitHub issue tracking for 502 popular npm packages, unified interactive dependency graph with intelligent clustering (Ecosystem/Health/Depth grouping), dynamic layout switching, real-time filtering, advanced zoom controls, supply chain security with auto-fix, license conflict resolution with auto-fix, package quality auto-fix, batch fix modes with granular control, backup & rollback, and professional dependency exploration - all in a single interactive HTML file.
Analyze your JavaScript projects to find unused dependencies, outdated packages, detect security vulnerabilities, monitor GitHub issues in real-time for 502 packages, configure your own GitHub token to avoid rate limits, visualize dependency graphs with intelligent clustering, organize packages by ecosystem (React/Vue/Angular/Testing/Build Tools), group by health status (Critical/Warning/Healthy), analyze by depth levels, instant layout switching, real-time filtering, advanced zoom controls, check bundle sizes, verify licenses, detect and auto-fix supply chain attacks, resolve license conflicts automatically, replace abandoned/deprecated packages automatically, analyze package quality, batch fix with granular control, manage backups and rollback changes, and automatically fix issues with dry-run, progress tracking, and backups. Perfect for CI/CD pipelines with JSON output and exit codes.
🔲 LATEST v3.1.6: Intelligent Clustering - Organize packages by Ecosystem, Health, or Depth! 🔲
🔑 v3.1.5: GitHub Personal Access Token Support - Configure your own token to bypass rate limits! 🔑
🎨 v3.1.4: Unified Interactive Graph System - 40+ files → 1 file with dynamic controls! 🎨
Intelligent Dependency Clustering - Organize & Understand Your Dependencies!
Organize your dependencies into meaningful groups for better understanding and management.
Three Clustering Modes:
⚛️ Ecosystem Clustering
🏥 Health Clustering
📊 Depth Clustering
Features:
Each cluster shows:
"Which testing tools do I have?"
devcompass graph --open
# Click "Ecosystem" → See "Testing Tools (15 packages)"
"Show me all critical issues"
devcompass graph --open
# Click "Health" → See "Critical Issues (8 packages)"
"What are my direct dependencies?"
devcompass graph --open
# Click "Depth" → See "Direct Dependencies (42 packages)"
npm install -g devcompass@3.1.6
All features from previous versions PLUS clustering:
The clustering system helps you understand and organize your dependencies by grouping them into meaningful categories.
1. Choose a Clustering Mode
Click one of three buttons in the sidebar:
2. View Organized Clusters
See your packages organized in the sidebar with:
3. Click to Highlight
Click any cluster to temporarily highlight those packages on the graph (highlights for 3 seconds, then fades back)
Automatically detects and groups:
Plus "Other Dependencies" for uncategorized packages
Groups by status:
Groups by dependency level:
Better Understanding:
Faster Problem Identification:
Informed Decision Making:
DevCompass supports user-configurable GitHub Personal Access Tokens to avoid API rate limiting.
Without Token:
With Token:
1. Create GitHub Token
Visit: https://github.com/settings/tokens/new
DevCompass CLI90 days (or your preference)public_repo only2. Configure Token
devcompass config --github-token ghp_YOUR_TOKEN_HERE
3. Verify
devcompass config --show
# Output: ✓ GitHub token configured: ghp_xxx***xxx
4. Done!
devcompass analyze
# No rate limit warnings!
# Show current token (masked)
devcompass config --show
# Remove token
devcompass config --remove-github-token
# Get help
devcompass config --help
~/.devcompass/github-token600 (owner only)public_repo scope (read-only)DevCompass features a revolutionary unified interactive graph - all layouts, filters, clustering, and controls in one beautiful interface!
# Generate unified interactive graph
devcompass graph --open
What you get in ONE file:
Click to switch between:
Click to filter packages:
Click to organize packages:
# Global (recommended)
npm install -g devcompass@3.1.6
# Local
npm install --save-dev devcompass@3.1.6
# One-time use
npx devcompass@3.1.6 analyze
# Upgrade
npm install -g devcompass@3.1.6
# Configure GitHub token
devcompass config --github-token <your-token>
devcompass config --show
# Analyze project
devcompass analyze
# Generate graph (with clustering!)
devcompass graph --open
# Auto-fix issues
devcompass fix
devcompass fix --batch
devcompass fix --dry-run
# Batch modes
devcompass fix --batch-mode critical
devcompass fix --batch-mode high
devcompass fix --batch-mode all
# Category-specific
devcompass fix --only quality
devcompass fix --skip updates
# Manage backups
devcompass backup list
devcompass backup restore --name <backup>
# CI/CD
devcompass analyze --json
devcompass analyze --ci
# Generate unified graph
devcompass graph
# Open in browser
devcompass graph --open
# Custom output
devcompass graph --output my-deps.html --open
# JSON export
devcompass graph --format json --output data.json
DevCompass tracks 502 popular npm packages across 33 categories!
Major Categories:
Data Source: data/tracked-repos.json
# List backups
devcompass backup list
# Restore backup
devcompass backup restore --name <backup>
# Show details
devcompass backup info --name <backup>
# Clean old backups
devcompass backup clean
devcompass backup clean --keep 3
# Interactive mode
devcompass fix --batch
# Preset modes
devcompass fix --batch-mode critical # Categories 1-2
devcompass fix --batch-mode high # Categories 1-4
devcompass fix --batch-mode all # All 7
# Specific categories
devcompass fix --only quality
devcompass fix --only supply-chain,license
# Skip categories
devcompass fix --skip updates
devcompass fix --skip ecosystem,updates
Create devcompass.config.json:
{
"ignore": ["package-name"],
"ignoreSeverity": ["low"],
"minSeverity": "medium",
"minScore": 7,
"cache": true
}
Options:
"Command not found"
npm install -g devcompass@3.1.6
Old version
npm update -g devcompass
devcompass --version # Should show 3.1.6
GitHub rate limits
# Configure your token
devcompass config --github-token <token>
# Get token: https://github.com/settings/tokens/new
# Scope: public_repo only
Token not working
# Verify
devcompass config --show
# Check permissions
ls -la ~/.devcompass/github-token
# Should show: -rw------- (600)
Graph not loading
# Hard refresh browser
# Ctrl+F5 (Windows/Linux)
# Cmd+Shift+R (Mac)
Clustering not showing
# Ensure v3.1.6
devcompass --version
# Clear cache
# Hard refresh browser
Contributions welcome!
git checkout -b feature/amazing)git commit -m 'Add feature')git push origin feature/amazing)MIT © Ajay Thorat
Want to contribute? Pick a feature and open an issue! 🚀
Made with ❤️ by Ajay Thorat
DevCompass - Keep your dependencies healthy! 🧭
Like Lighthouse for your dependencies ⚡
FAQs
Dependency health checker with ecosystem intelligence, unified interactive dashboard with 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), historical tracking with SQLite, snapshot comparison, timeline visualization, modular CSS/JS architecture,
The npm package devcompass receives a total of 94 weekly downloads. As such, devcompass popularity was classified as not popular.
We found that devcompass demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.
Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.