I built an AI-powered npm dependency scanner – give it 30 seconds & a package.json



This content originally appeared on DEV Community and was authored by dark king

👋 Hey devs,

I recently built a super minimal tool:

https://package-scan.vercel.app

Drop your package.json, and it will:

  • Scan all dependencies
  • Fetch NPM + GitHub info
  • Pull known vulnerabilities via OSV
  • Run AI to generate risk scores, warnings, and upgrade suggestions

It’s a tiny tool but the goal is to answer:
👉 “Are my dependencies safe or outdated?”

Hit the big button: “Summon the Oracle” 🧙‍♂

…and let me know if it’s useful — feedback welcome, UI is still rough.

Would love ideas for features you’d actually want.


This content originally appeared on DEV Community and was authored by dark king