
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
devcompass
Advanced tools
Dependency health checker with ecosystem intelligence, unified interactive dashboard with 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), historical tracking with SQLite, snapshot comparison, timeline visualization, modular CSS/JS architecture,
Dependency health checker with unified interactive dashboard featuring 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), modular CSS/JS architecture, intelligent clustering (Ecosystem/Health/Depth grouping), real-time filtering, advanced zoom controls, theme support (dark/light), supply chain security with auto-fix, license conflict resolution, package quality auto-fix, batch fix modes, backup & rollback, historical tracking with SQLite database, snapshot comparison, timeline visualization, and professional dependency exploration.
Analyze your JavaScript projects to find unused dependencies, outdated packages, detect security vulnerabilities, monitor GitHub issues in real-time for 502 packages, configure your own GitHub token to avoid rate limits, customize all configuration via JSON files, visualize dependency graphs with 5 dynamic layouts including Analytics dashboard, modular architecture with zero code duplication, organize packages by ecosystem (React/Vue/Angular/Testing/Build Tools), group by health status (Critical/Warning/Healthy), analyze by depth levels, instant layout switching, dark/light theme toggle, real-time filtering, advanced zoom controls, track dependency changes over time with SQLite database, compare snapshots to see what changed, visualize evolution with interactive timelines, check bundle sizes, verify licenses, detect and auto-fix supply chain attacks, resolve license conflicts automatically, replace abandoned/deprecated packages automatically, analyze package quality, batch fix with granular control, manage backups and rollback changes, and automatically fix issues with dry-run, progress tracking, and backups. Perfect for CI/CD pipelines with JSON output and exit codes.
📊 LATEST v3.2.1: Historical Tracking System - Track changes, compare snapshots, visualize trends! 📊
🎨 v3.2.0: Unified Dashboard Architecture - 50% less code, 5 layouts, dark/light themes! 🎨
🔧 v3.1.7: Dynamic Data Configuration - Scalable JSON-based configuration system! 🔧
Historical Tracking System - Track Your Dependency Evolution!
Complete dependency history tracking with SQLite database backend.
Features:
Database Structure:
~/.devcompass/history.db
├── snapshots # Project snapshots with metadata
├── packages # Package details per snapshot
└── dependencies # Dependency relationships
Performance:
Compare any two snapshots to see exactly what changed:
# Compare two snapshots
devcompass compare 5 8
# Detailed comparison
devcompass compare 5 8 --verbose
# Save to file
devcompass compare 5 8 -o report.md
What Gets Compared:
Output Example:
📊 Snapshot Comparison
Snapshots: #5 → #8
Health Score: 8.20 → 6.20 (-2.00) ❌
🔄 Updated Packages (9):
⟳ axios
Health: 8.2 → 6.2 (-2.0)
📊 Snapshot Comparison Snapshots: #5 → #8 Health Score: 8.20 → 6.20 (-2.00) ❌ 🔄 Updated Packages (9): ⟳ axios Health: 8.2 → 6.2 (-2.0)
📊 Snapshot History (Grouped by Month)
📅 April 2026 (22 snapshots, Avg Health: 7.71)
────────────────────────────────────────────────────────────
#24 25, 07:17 PM Deps: 9 Health: 6.2
#23 25, 07:17 PM Deps: 9 Health: 6.2
...
#3 25, 06:15 PM Deps: 7 Health: 7.7
Total: 22 snapshots
Features:
Fixed Typosquatting False Positives:
knip → knex false alarmFixed Dynamic Security:
similarTo property name| Operation | Target | Actual | Improvement |
|---|---|---|---|
| Snapshot Save | <100ms | 8-19ms | 6-11× faster |
| Snapshot Load | <50ms | ~4ms | 12× faster |
| Comparison | <200ms | 4-5ms | 50× faster |
| Timeline Gen | <500ms | 6ms | 83× faster |
| Database Size | ~5KB | ~3KB | 40% smaller |
Average Improvement: 40× faster than targets!
npm install -g devcompass@3.2.1
New Commands:
# History management
devcompass history list
devcompass history show <id>
devcompass history summary
devcompass history cleanup
devcompass history stats
# Comparison
devcompass compare <id1> <id2>
# Timeline
devcompass timeline
devcompass timeline --open
Auto-save Feature:
# Snapshots auto-saved on analyze
devcompass analyze # Saves to database
# Disable if needed
devcompass analyze --no-history
New Files Created:
~/.devcompass/history.db - SQLite database# Global (recommended)
npm install -g devcompass@3.2.1
# Local
npm install --save-dev devcompass@3.2.1
# One-time use
npx devcompass@3.2.1 analyze
# Upgrade from any version
npm install -g devcompass@3.2.1
# Configure GitHub token (recommended)
devcompass config --github-token <your-token>
devcompass config --show
# Analyze project (auto-saves snapshot!)
devcompass analyze
devcompass analyze --no-history # Skip snapshot
# Generate graph (with 5 layouts + themes!)
devcompass graph --open
# Auto-fix issues
devcompass fix
devcompass fix --batch
devcompass fix --dry-run
# Batch modes
devcompass fix --batch-mode critical
devcompass fix --batch-mode high
devcompass fix --batch-mode all
# Category-specific
devcompass fix --only quality
devcompass fix --skip updates
# Manage backups
devcompass backup list
devcompass backup restore --name <backup>
# CI/CD
devcompass analyze --json
devcompass analyze --ci
# List snapshots
devcompass history list
devcompass history list --limit 50
devcompass history list --date 25-04-2026
devcompass history list --month 04-2026
devcompass history list --year 2026
devcompass history list --from 01-04-2026 --to 30-04-2026
# View snapshot details
devcompass history show 5
# Monthly summary
devcompass history summary
devcompass history summary --year 2026
# Cleanup old snapshots
devcompass history cleanup --keep 30
# Statistics
devcompass history stats
# Compare snapshots
devcompass compare 5 8
devcompass compare 5 8 --verbose
devcompass compare 5 8 -o report.md
# Generate timeline
devcompass timeline
devcompass timeline --days 60
devcompass timeline --open
devcompass timeline --output my-timeline.html --open
# Generate unified dashboard
devcompass graph
# Open in browser
devcompass graph --open
# Custom output
devcompass graph --output my-deps.html --open
# JSON export
devcompass graph --format json --output data.json
Track your dependency evolution over time with automatic snapshots, comparison tools, and timeline visualization.
1. Auto-Save on Analyze
Every time you run devcompass analyze, a snapshot is automatically saved:
devcompass analyze
# Output:
# ✔ Scanned 6 dependencies in project
# 📸 Snapshot saved (ID: 40, 19ms)
# Use "devcompass history list" to view all snapshots
2. View Your History
devcompass history list
Output:
📊 Snapshot History
ID Date & Time Project Deps Health
────────────────────────────────────────────────────────────
40 Apr 26, 2026, 02:30 PMdevcompass 6 7.0
39 Apr 25, 2026, 08:20 PMdevcompass 6 7.0
38 Apr 25, 2026, 08:19 PMdevcompass 6 7.0
3. Compare Changes
devcompass compare 38 40
Output:
📊 Snapshot Comparison
Snapshots: #38 → #40
Health Score: 7.00 → 7.00 (0.00)
Changes:
Added: 0
Removed: 0
Updated: 2
Unchanged: 4
4. Visualize Trends
devcompass timeline --open
Opens interactive HTML chart showing:
Query snapshots using flexible date formats:
# European formats
devcompass history list --date 25-04-2026 # Specific day
devcompass history list --month 04-2026 # Specific month
# ISO formats
devcompass history list --date 2026-04-25 # ISO day
devcompass history list --month 2026-04 # ISO month
# Year only
devcompass history list --year 2026
# Date ranges
devcompass history list --from 01-04-2026 --to 30-04-2026
devcompass history list --after 15-04-2026
When you have >20 snapshots, they're automatically grouped by month:
devcompass history list --year 2026
Output:
📊 Snapshot History (Grouped by Month)
📅 April 2026 (22 snapshots, Avg Health: 7.71)
────────────────────────────────────────────────────────────
#24 25, 07:17 PM Deps: 9 Health: 6.2
#23 25, 07:17 PM Deps: 9 Health: 6.2
...
Total: 22 snapshots
devcompass history summary
Output:
📊 Monthly Snapshot Summary
April 2026 22 snapshots Avg Health: 7.71/10 Avg Deps: 9
March 2026 15 snapshots Avg Health: 8.20/10 Avg Deps: 8
All snapshots are stored in:
~/.devcompass/history.db
Storage Efficiency:
If you don't want automatic snapshots:
devcompass analyze --no-history
The clustering system helps you understand and organize your dependencies by grouping them into meaningful categories.
1. Choose a Clustering Mode
Click one of three buttons in the sidebar:
2. View Organized Clusters
See your packages organized in the sidebar with:
3. Click to Highlight
Click any cluster to temporarily highlight those packages on the graph (highlights for 3 seconds, then fades back)
Automatically detects and groups:
Plus "Other Dependencies" for uncategorized packages
Groups by status:
Groups by dependency level:
DevCompass supports user-configurable GitHub Personal Access Tokens to avoid API rate limiting.
Without Token:
With Token:
1. Create GitHub Token
Visit: https://github.com/settings/tokens/new
DevCompass CLI90 days (or your preference)public_repo only2. Configure Token
devcompass config --github-token ghp_YOUR_TOKEN_HERE
3. Verify
devcompass config --show
# Output: ✓ GitHub token configured: ghp_xxx***xxx
4. Done!
devcompass analyze
# No rate limit warnings!
"Command not found"
npm install -g devcompass@3.2.1
Old version
npm update -g devcompass
devcompass --version # Should show 3.2.1
History database not saving
# Check database exists
ls -la ~/.devcompass/history.db
# If missing, re-run analyze
devcompass analyze
# Check for errors
DEBUG=1 devcompass analyze
Date format not recognized
# Supported formats:
# DD-MM-YYYY: 25-04-2026
# MM-YYYY: 04-2026
# YYYY: 2026
# YYYY-MM-DD: 2026-04-25
# YYYY-MM: 2026-04
# Example:
devcompass history list --date 25-04-2026
Timeline not generating
# Ensure you have snapshots
devcompass history list
# Generate timeline
devcompass timeline --open
# Check output file
ls -la devcompass-timeline.html
Comparison showing no changes
# Verify snapshot IDs exist
devcompass history list
# Compare different snapshots
devcompass compare <older-id> <newer-id>
Contributions welcome!
Add Package Alternatives
data/quality-alternatives.jsonExpand License Database
data/license-risks.jsonImprove Typosquatting Detection
data/popular-packages.jsonCode Contributions
git checkout -b feature/amazing)git commit -m 'Add feature')git push origin feature/amazing)MIT © Ajay Thorat
Want to contribute? Pick a feature and open an issue! 🚀
Made with ❤️ by Ajay Thorat
DevCompass v3.2.1 - Track, Compare, Evolve! 🧭
Like Lighthouse for your dependencies ⚡
FAQs
Dependency health checker with ecosystem intelligence, unified interactive dashboard with 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), historical tracking with SQLite, snapshot comparison, timeline visualization, modular CSS/JS architecture,
The npm package devcompass receives a total of 94 weekly downloads. As such, devcompass popularity was classified as not popular.
We found that devcompass demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.