Dependency Checker and Auditor CLI

advanced

A CLI tool that checks project dependencies for vulnerabilities, outdated versions, license compliance, and unused packages. Generates audit reports with upgrade suggestions and security advisories...

Target user

Developers and security teams who audit project dependencies

Problem

Projects accumulate outdated and vulnerable dependencies that pose security risks, but manually checking each package for vulnerabilities and license issues is impractical without an automated tool.

Requirements

Check for known vulnerability advisories
Identify outdated package versions
Audit license compatibility
Detect unused dependencies
Generate detailed audit report

Core technologies

Node.js, TypeScript, semver

Completion criteria

Users can audit dependencies for vulnerabilities, outdated versions, licenses, and usage with actionable upgrade suggestions.

Optional extensions

Add auto-fix for safe upgrades
Implement CI integration mode
Add policy-based blocking
Support monorepo scanning