audit-deps

What problem does it solve?

This workflow helps developers quickly identify and remediate security vulnerabilities, outdated packages, duplicate dependencies, and unused entries in npm projects, reducing risk and maintenance overhead.

Core Features & Use Cases

• Security scanning: Detects vulnerabilities via npm audit and reports critical/high issues with package name, vulnerability, and suggested fixes.
• Outdated and duplicate management: Lists outdated packages with version gaps and surfaces duplicates that bloat the install.
• Unused dependency cleanup: Cross-checks package.json against source files to flag dependencies with zero imports.
• Wrong dependency typing: Flags dependencies that should be in devDependencies based on usage in scripts/tests.

Quick Start

Run npm audit --json to identify vulnerabilities and then npm outdated --json to surface major version gaps, followed by cross-checking package.json against your src/ directory to identify unused or misplaced dependencies.