devcompass
Advanced tools
Dependency health checker with ecosystem intelligence, unified interactive dashboard with 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), historical tracking with SQLite, snapshot comparison, timeline visualization, modular CSS/JS architecture,
AI-powered dependency health checker with unified interactive dashboard featuring 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), intelligent AI recommendations, multi-provider LLM support, modular CSS/JS architecture, intelligent clustering (Ecosystem/Health/Depth grouping), real-time filtering, advanced zoom controls, theme support (dark/light), supply chain security with auto-fix, license conflict resolution, package quality auto-fix, batch fix modes, backup & rollback, historical tracking with SQLite database, snapshot comparison, timeline visualization, and professional dependency exploration.
Analyze your JavaScript projects to find unused dependencies, outdated packages, detect security vulnerabilities, get AI-powered recommendations, ask questions about your dependencies, find package alternatives with AI, chat with AI about your project, monitor GitHub issues in real-time for 502 packages, configure your own GitHub token to avoid rate limits, customize all configuration via JSON files, visualize dependency graphs with 5 dynamic layouts including Analytics dashboard, modular architecture with zero code duplication, organize packages by ecosystem (React/Vue/Angular/Testing/Build Tools), group by health status (Critical/Warning/Healthy), analyze by depth levels, instant layout switching, dark/light theme toggle, real-time filtering, advanced zoom controls, track dependency changes over time with SQLite database, compare snapshots to see what changed, visualize evolution with interactive timelines, check bundle sizes, verify licenses, detect and auto-fix supply chain attacks, resolve license conflicts automatically, replace abandoned/deprecated packages automatically, analyze package quality, batch fix with granular control, manage backups and rollback changes, and automatically fix issues with dry-run, progress tracking, and backups. Perfect for CI/CD pipelines with JSON output and exit codes.
š¤ LATEST v3.2.2: AI-Powered Analysis - Get intelligent recommendations from OpenAI, Anthropic, Google, or FREE local AI! š¤
š v3.2.1: Historical Tracking System - Track changes, compare snapshots, visualize trends! š
šØ v3.2.0: Unified Dashboard Architecture - 50% less code, 5 layouts, dark/light themes! šØ
AI-Powered Dependency Analysis - Smart Recommendations from AI!
Get intelligent, context-aware recommendations from AI to help you maintain healthier dependencies.
Features:
AI Commands:
# Setup AI provider
devcompass llm add --provider openai --token sk-xxx --model gpt-4o-mini
devcompass llm test openai
# Or use FREE local AI
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Get AI-powered analysis
devcompass analyze --ai
# Ask questions
devcompass ai ask "Should I update axios to version 1.15.2?"
devcompass ai ask "What are the security risks in my project?"
# Find alternatives
devcompass ai alternatives moment
# Interactive chat
devcompass ai chat
# View usage
devcompass llm stats
What AI Can Help With:
Privacy & Security:
~/.devcompass/ai.dbSupported AI Providers:
| Provider | Models | Cost | Best For |
|---|---|---|---|
| OpenAI | GPT-4, GPT-4 Turbo, GPT-3.5 | ~$0.03/1K tokens | Fast, accurate responses |
| Anthropic | Claude 3.5 Sonnet, Opus, Haiku | ~$0.003/1K tokens | Detailed analysis |
| Gemini Pro, Gemini 1.5 Pro | ~$0.00025/1K tokens | Cost-effective | |
| Ollama | Llama 3, Mistral, CodeLlama | FREE | Privacy, no limits |
Example: 50 AI queries per month
| Provider | Monthly Cost |
|---|---|
| OpenAI GPT-4 | ~$4.50 |
| Anthropic Claude | ~$0.90 |
| Google Gemini | ~$0.04 |
| Ollama (Local) | $0.00 FREE! |
# Global (recommended)
npm install -g devcompass@3.2.2
# Local
npm install --save-dev devcompass@3.2.2
# One-time use
npx devcompass@3.2.2 analyze
# Upgrade from any version
npm install -g devcompass@3.2.2
# Configure GitHub token (recommended)
devcompass config --github-token <your-token>
devcompass config --show
# Analyze project (auto-saves snapshot!)
devcompass analyze
devcompass analyze --ai # š¤ With AI recommendations!
devcompass analyze --no-history # Skip snapshot
# Generate graph (with 5 layouts + themes!)
devcompass graph --open
# Auto-fix issues
devcompass fix
devcompass fix --batch
devcompass fix --dry-run
# Setup AI provider
devcompass llm add --provider openai --token sk-xxx --model gpt-4o-mini
devcompass llm add --provider anthropic --token sk-ant-xxx --model claude-3-5-sonnet
devcompass llm add --provider google --token xxx --model gemini-pro
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Manage providers
devcompass llm list
devcompass llm default openai
devcompass llm test openai
devcompass llm remove openai
devcompass llm stats
# AI Analysis
devcompass analyze --ai
devcompass analyze --ai --ai-provider anthropic
# Ask AI questions
devcompass ai ask "Why is my health score low?"
devcompass ai ask "Should I update axios now?"
devcompass ai ask "What are the breaking changes in React 19?"
# Get recommendations
devcompass ai recommend
# Find alternatives
devcompass ai alternatives moment
devcompass ai alternatives request
devcompass ai alternatives lodash
# Interactive chat
devcompass ai chat
devcompass ai chat --provider anthropic
# List snapshots
devcompass history list
devcompass history list --limit 50
devcompass history list --month 04-2026
# Compare snapshots
devcompass compare 5 8
devcompass compare 5 8 --verbose
# Timeline
devcompass timeline --open
1. Install Ollama (FREE local AI):
# Install Ollama
curl -fsSL https://ollama.com/install.sh | sh
# Start Ollama
ollama serve
# Pull a model
ollama pull llama3.2
# Add to DevCompass
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Test it
devcompass llm test local
# Use it!
devcompass analyze --ai
2. Or use OpenAI:
# Get API key from: https://platform.openai.com/api-keys
# Add provider
devcompass llm add --provider openai --token sk-your-key --model gpt-4o-mini
# Test connection
devcompass llm test openai
# Use it!
devcompass analyze --ai
Get Analysis:
$ devcompass analyze --ai
š¤ AI Recommendations
š“ CRITICAL (Do Now):
- Security Vulnerabilities (24 total)
ā Run: npm audit fix
ā Why: 3 high-severity issues expose your app to attacks
š” HIGH PRIORITY (This Week):
- Update axios (0.21.1 ā 1.15.2)
ā Why: Contains known CVEs
ā Breaking changes: Response format changed
Ask Questions:
$ devcompass ai ask "Should I update axios from 0.21.1 to 1.15.2?"
š¤ Yes, you should update axios:
Security: Version 0.21.1 has critical vulnerabilities (CVE-2023-xxxx)
Breaking Changes: Response.data format changed, error handling updated
Migration: Update interceptors, test error handling
Command: npm install axios@latest
Test thoroughly before deploying!
Find Alternatives:
$ devcompass ai alternatives moment
š Finding alternatives for "moment"
š¤ Top 3 Alternatives:
1. date-fns (~2KB vs 67KB)
- Tree-shakeable, modern API
- Migration: Easy (similar methods)
2. dayjs (~2KB)
- moment.js compatible API
- Migration: Drop-in replacement
3. Luxon (~15KB)
- Better timezone support
- Migration: Medium (different API)
Recommendation: Use date-fns for best bundle size
Interactive Chat:
$ devcompass ai chat
š¤ DevCompass AI Assistant
Ask me anything about your dependencies!
You: Should I remove lodash and moment since they're unused?
š¤ Yes, remove them:
- lodash: 1.3 MB saved
- moment: 4.1 MB saved
Total saved: 5.4 MB
Command: npm uninstall lodash moment
This will improve your health score from 0.5/10 to ~5.3/10!
You: exit
š Chat ended. Used 245 tokens (~$0.0001)
$ devcompass llm stats
š AI Usage Statistics - 2026-04
local (llama3.2)
Requests: 28
Tokens: 11,923
Cost: $0.0000
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
Total Requests: 28
Total Tokens: 11,923
Total Cost: $0.0000
š Projected monthly cost: $0.00
What Gets Sent to AI:
What Doesn't Get Sent:
Encryption:
~/.devcompass/ai.dbTrack your dependency evolution over time with automatic snapshots, comparison tools, and timeline visualization.
1. Auto-Save on Analyze
Every time you run devcompass analyze, a snapshot is automatically saved:
devcompass analyze
# Output:
# ā Scanned 6 dependencies in project
# šø Snapshot saved (ID: 40, 19ms)
# Use "devcompass history list" to view all snapshots
2. View Your History
devcompass history list
3. Compare Changes
devcompass compare 38 40
4. Visualize Trends
devcompass timeline --open
"No AI provider configured"
# Add a provider first
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Or use OpenAI
devcompass llm add --provider openai --token sk-xxx --model gpt-4o-mini
"Ollama connection failed"
# Check Ollama is running
ps aux | grep ollama
# Restart Ollama
ollama serve &
# Test connection
devcompass llm test local
"API key invalid"
# Update token
devcompass llm update openai --token sk-new-token
# Test it
devcompass llm test openai
"Quota exceeded"
# Check usage
devcompass llm stats
# Switch to free provider
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
devcompass llm default local
"Command not found"
npm install -g devcompass@3.2.2
Old version
npm update -g devcompass
devcompass --version # Should show 3.2.2
Contributions welcome!
Add Package Alternatives
data/quality-alternatives.jsonImprove AI Prompts
src/ai/prompt-templates.jsAdd AI Providers
src/ai/providers/Code Contributions
git checkout -b feature/amazing)git commit -m 'Add feature')git push origin feature/amazing)MIT Ā© Ajay Thorat
Want to contribute? Pick a feature and open an issue! š
---# š§ DevCompass
AI-powered dependency health checker with unified interactive dashboard featuring 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), intelligent AI recommendations, multi-provider LLM support, modular CSS/JS architecture, intelligent clustering (Ecosystem/Health/Depth grouping), real-time filtering, advanced zoom controls, theme support (dark/light), supply chain security with auto-fix, license conflict resolution, package quality auto-fix, batch fix modes, backup & rollback, historical tracking with SQLite database, snapshot comparison, timeline visualization, and professional dependency exploration.
Analyze your JavaScript projects to find unused dependencies, outdated packages, detect security vulnerabilities, get AI-powered recommendations, ask questions about your dependencies, find package alternatives with AI, chat with AI about your project, monitor GitHub issues in real-time for 502 packages, configure your own GitHub token to avoid rate limits, customize all configuration via JSON files, visualize dependency graphs with 5 dynamic layouts including Analytics dashboard, modular architecture with zero code duplication, organize packages by ecosystem (React/Vue/Angular/Testing/Build Tools), group by health status (Critical/Warning/Healthy), analyze by depth levels, instant layout switching, dark/light theme toggle, real-time filtering, advanced zoom controls, track dependency changes over time with SQLite database, compare snapshots to see what changed, visualize evolution with interactive timelines, check bundle sizes, verify licenses, detect and auto-fix supply chain attacks, resolve license conflicts automatically, replace abandoned/deprecated packages automatically, analyze package quality, batch fix with granular control, manage backups and rollback changes, and automatically fix issues with dry-run, progress tracking, and backups. Perfect for CI/CD pipelines with JSON output and exit codes.
š¤ LATEST v3.2.2: AI-Powered Analysis - Get intelligent recommendations from OpenAI, Anthropic, Google, or FREE local AI! š¤
š v3.2.1: Historical Tracking System - Track changes, compare snapshots, visualize trends! š
šØ v3.2.0: Unified Dashboard Architecture - 50% less code, 5 layouts, dark/light themes! šØ
AI-Powered Dependency Analysis - Smart Recommendations from AI!
Get intelligent, context-aware recommendations from AI to help you maintain healthier dependencies.
Features:
AI Commands:
# Setup AI provider
devcompass llm add --provider openai --token sk-xxx --model gpt-4o-mini
devcompass llm test openai
# Or use FREE local AI
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Get AI-powered analysis
devcompass analyze --ai
# Ask questions
devcompass ai ask "Should I update axios to version 1.15.2?"
devcompass ai ask "What are the security risks in my project?"
# Find alternatives
devcompass ai alternatives moment
# Interactive chat
devcompass ai chat
# View usage
devcompass llm stats
What AI Can Help With:
Privacy & Security:
~/.devcompass/ai.dbSupported AI Providers:
| Provider | Models | Cost | Best For |
|---|---|---|---|
| OpenAI | GPT-4, GPT-4 Turbo, GPT-3.5 | ~$0.03/1K tokens | Fast, accurate responses |
| Anthropic | Claude 3.5 Sonnet, Opus, Haiku | ~$0.003/1K tokens | Detailed analysis |
| Gemini Pro, Gemini 1.5 Pro | ~$0.00025/1K tokens | Cost-effective | |
| Ollama | Llama 3, Mistral, CodeLlama | FREE | Privacy, no limits |
Example: 50 AI queries per month
| Provider | Monthly Cost |
|---|---|
| OpenAI GPT-4 | ~$4.50 |
| Anthropic Claude | ~$0.90 |
| Google Gemini | ~$0.04 |
| Ollama (Local) | $0.00 FREE! |
# Global (recommended)
npm install -g devcompass@3.2.2
# Local
npm install --save-dev devcompass@3.2.2
# One-time use
npx devcompass@3.2.2 analyze
# Upgrade from any version
npm install -g devcompass@3.2.2
# Configure GitHub token (recommended)
devcompass config --github-token <your-token>
devcompass config --show
# Analyze project (auto-saves snapshot!)
devcompass analyze
devcompass analyze --ai # š¤ With AI recommendations!
devcompass analyze --no-history # Skip snapshot
# Generate graph (with 5 layouts + themes!)
devcompass graph --open
# Auto-fix issues
devcompass fix
devcompass fix --batch
devcompass fix --dry-run
# Setup AI provider
devcompass llm add --provider openai --token sk-xxx --model gpt-4o-mini
devcompass llm add --provider anthropic --token sk-ant-xxx --model claude-3-5-sonnet
devcompass llm add --provider google --token xxx --model gemini-pro
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Manage providers
devcompass llm list
devcompass llm default openai
devcompass llm test openai
devcompass llm remove openai
devcompass llm stats
# AI Analysis
devcompass analyze --ai
devcompass analyze --ai --ai-provider anthropic
# Ask AI questions
devcompass ai ask "Why is my health score low?"
devcompass ai ask "Should I update axios now?"
devcompass ai ask "What are the breaking changes in React 19?"
# Get recommendations
devcompass ai recommend
# Find alternatives
devcompass ai alternatives moment
devcompass ai alternatives request
devcompass ai alternatives lodash
# Interactive chat
devcompass ai chat
devcompass ai chat --provider anthropic
# List snapshots
devcompass history list
devcompass history list --limit 50
devcompass history list --month 04-2026
# Compare snapshots
devcompass compare 5 8
devcompass compare 5 8 --verbose
# Timeline
devcompass timeline --open
1. Install Ollama (FREE local AI):
# Install Ollama
curl -fsSL https://ollama.com/install.sh | sh
# Start Ollama
ollama serve
# Pull a model
ollama pull llama3.2
# Add to DevCompass
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Test it
devcompass llm test local
# Use it!
devcompass analyze --ai
2. Or use OpenAI:
# Get API key from: https://platform.openai.com/api-keys
# Add provider
devcompass llm add --provider openai --token sk-your-key --model gpt-4o-mini
# Test connection
devcompass llm test openai
# Use it!
devcompass analyze --ai
Get Analysis:
$ devcompass analyze --ai
š¤ AI Recommendations
š“ CRITICAL (Do Now):
- Security Vulnerabilities (24 total)
ā Run: npm audit fix
ā Why: 3 high-severity issues expose your app to attacks
š” HIGH PRIORITY (This Week):
- Update axios (0.21.1 ā 1.15.2)
ā Why: Contains known CVEs
ā Breaking changes: Response format changed
Ask Questions:
$ devcompass ai ask "Should I update axios from 0.21.1 to 1.15.2?"
š¤ Yes, you should update axios:
Security: Version 0.21.1 has critical vulnerabilities (CVE-2023-xxxx)
Breaking Changes: Response.data format changed, error handling updated
Migration: Update interceptors, test error handling
Command: npm install axios@latest
Test thoroughly before deploying!
Find Alternatives:
$ devcompass ai alternatives moment
š Finding alternatives for "moment"
š¤ Top 3 Alternatives:
1. date-fns (~2KB vs 67KB)
- Tree-shakeable, modern API
- Migration: Easy (similar methods)
2. dayjs (~2KB)
- moment.js compatible API
- Migration: Drop-in replacement
3. Luxon (~15KB)
- Better timezone support
- Migration: Medium (different API)
Recommendation: Use date-fns for best bundle size
Interactive Chat:
$ devcompass ai chat
š¤ DevCompass AI Assistant
Ask me anything about your dependencies!
You: Should I remove lodash and moment since they're unused?
š¤ Yes, remove them:
- lodash: 1.3 MB saved
- moment: 4.1 MB saved
Total saved: 5.4 MB
Command: npm uninstall lodash moment
This will improve your health score from 0.5/10 to ~5.3/10!
You: exit
š Chat ended. Used 245 tokens (~$0.0001)
$ devcompass llm stats
š AI Usage Statistics - 2026-04
local (llama3.2)
Requests: 28
Tokens: 11,923
Cost: $0.0000
āāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāāā
Total Requests: 28
Total Tokens: 11,923
Total Cost: $0.0000
š Projected monthly cost: $0.00
What Gets Sent to AI:
What Doesn't Get Sent:
Encryption:
~/.devcompass/ai.dbTrack your dependency evolution over time with automatic snapshots, comparison tools, and timeline visualization.
1. Auto-Save on Analyze
Every time you run devcompass analyze, a snapshot is automatically saved:
devcompass analyze
# Output:
# ā Scanned 6 dependencies in project
# šø Snapshot saved (ID: 40, 19ms)
# Use "devcompass history list" to view all snapshots
2. View Your History
devcompass history list
3. Compare Changes
devcompass compare 38 40
4. Visualize Trends
devcompass timeline --open
"No AI provider configured"
# Add a provider first
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
# Or use OpenAI
devcompass llm add --provider openai --token sk-xxx --model gpt-4o-mini
"Ollama connection failed"
# Check Ollama is running
ps aux | grep ollama
# Restart Ollama
ollama serve &
# Test connection
devcompass llm test local
"API key invalid"
# Update token
devcompass llm update openai --token sk-new-token
# Test it
devcompass llm test openai
"Quota exceeded"
# Check usage
devcompass llm stats
# Switch to free provider
devcompass llm add --provider local --model llama3.2 --base-url http://localhost:11434
devcompass llm default local
"Command not found"
npm install -g devcompass@3.2.2
Old version
npm update -g devcompass
devcompass --version # Should show 3.2.2
Contributions welcome!
Add Package Alternatives
data/quality-alternatives.jsonImprove AI Prompts
src/ai/prompt-templates.jsAdd AI Providers
src/ai/providers/Code Contributions
git checkout -b feature/amazing)git commit -m 'Add feature')git push origin feature/amazing)MIT Ā© Ajay Thorat
Want to contribute? Pick a feature and open an issue! š
Made with ā¤ļø by Ajay Thorat
DevCompass v3.2.2 - AI-Powered Dependency Intelligence! š§š¤
Like Lighthouse for your dependencies, now with AI superpowers ā”
Made with ā¤ļø by Ajay Thorat
DevCompass v3.2.2 - AI-Powered Dependency Intelligence! š§š¤
Like Lighthouse for your dependencies, now with AI superpowers ā”
FAQs
Dependency health checker with ecosystem intelligence, unified interactive dashboard with 5 dynamic layouts (Tree/Force/Radial/Conflict/Analytics), historical tracking with SQLite, snapshot comparison, timeline visualization, modular CSS/JS architecture,
The npm package devcompass receives a total of 94 weekly downloads. As such, devcompass popularity was classified as not popular.
We found that devcompass demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.