This content originally appeared on DEV Community and was authored by dark king
Hey devs,
I recently built a super minimal tool:
https://package-scan.vercel.app
Drop your package.json
, and it will:
- Scan all dependencies
- Fetch NPM + GitHub info
- Pull known vulnerabilities via OSV
- Run AI to generate risk scores, warnings, and upgrade suggestions
It’s a tiny tool but the goal is to answer:
“Are my dependencies safe or outdated?”
Hit the big button: “Summon the Oracle”
…and let me know if it’s useful — feedback welcome, UI is still rough.
Would love ideas for features you’d actually want.
This content originally appeared on DEV Community and was authored by dark king