✂️ Find unused files, dependencies and exports in your JavaScript and TypeScript projects. Knip it before you ship it!
Validate and visualize dependencies. Your rules. JavaScript, TypeScript, CoffeeScript. ES6, CommonJS, AMD.
Static Value-Flow Analysis Framework for Source Code
LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
Code quality analysis for Python in the age of AI coding.
Catch risky npm dependency changes before they merge.
A tool to automatically build a dependency graph and Software Bill of Materials (SBOM) for packages and arbitrary source code repositories.
Detect unused composer dependencies
Go modules analysis tool
git commit dependency analysis tool
A tool to stop JVM architecture drift before it reaches main. Highly configurable through yaml; no architecture test code.
NsDepCop is a static code analysis tool that enforces namespace and assembly dependency rules in C# projects.
Understand, analyze, and govern software systems across repositories, languages, and technologies.
Dependency analysis and optimization toolkit for modern JavaScript and TypeScript codebases. Enforce dependency graph hygiene and remove unused code with a very fast CLI.
Easy auditing & sandboxing for your JavaScript dependencies 🪱
Automatic detecting missing I18n translations tool.
Malicious package & supply-chain intelligence
To associate your repository with the dependency-analysis topic, visit your repo's landing page and select "manage topics."