Dependency Age Report
Shows how far behind your dependencies are, and which ones are abandoned.
What you're making
Every project quietly rots. This one tells you how bad it's got: which packages are years out of date, which haven't been touched by their author in ages, and which are only one small version behind and safe to bump today. It sorts by risk so you fix the scary ones first instead of the easy ones.
Reads a lockfile, queries the registry for release history, and reports how stale each dependency is alongside how actively it's maintained. Distinguishing 'behind' from 'abandoned' is the judgement the tool exists to make.
Hosting · Free forever
Deploys free on npm, PyPI or GitHub Releases.
Nothing to host. Publishing to a package registry is free and permanent, and anyone can run it with a single command.
Publish to npm — one command and anyone can run it.
Core features · 7
- Reads the lockfile to get exact installed versions
- Queries the registry for each package's release history
- Reports how far behind each dependency is
- Flags packages with no release for a long time as possibly abandoned
- Separates safe patch bumps from risky major jumps
- Sorts output by risk rather than alphabetically
- Handles hundreds of dependencies without hitting rate limits
The interesting part
- Batching registry requests so a big project doesn't get rate limited
- Deciding what 'abandoned' means — a stable package may simply be finished
- Reading several lockfile formats, which are all different
Once it works
- Add a badge you can put in a README
- Suggest maintained alternatives for abandoned packages
- Track the score over time to show drift