Next steps
Analyse your Dependency Radar report
Premium analysis starts with a report generated by the Dependency Radar CLI. Run Dependency Radar in the root of your JavaScript or TypeScript project, then upload the generated dependency-radar.html or dependency-radar.json file for additional analysis.
dependency-radar.htmldependency-radar.jsonSupported files are reports generated by Dependency Radar: dependency-radar.html or dependency-radar.json. Other HTML or JSON files are not supported.
No repository access required. The free CLI does not require an account or upload.
Premium analysis
What the premium analysis adds
The CLI report shows the structure and signals inside your dependency graph. Premium analysis is optional and starts only when you choose to upload a generated report. It adds ecosystem intelligence, prioritisation, and supply-chain review context.
Maintenance health
Detect packages that may introduce long-term risk: archived repositories, deprecated packages, stalled maintenance, declining activity, and weak supply-chain signals.
Risk prioritisation
Not all vulnerabilities, outdated packages, or supply-chain warnings matter equally. The analysis highlights dependencies most likely to cause real problems.
Upgrade insight
Identify packages likely to create friction when upgrading Node versions, frameworks, major dependencies, or CI dependency policies.
Compare-mode guardrails
Use generated reports to compare dependency changes and catch risk regressions before they merge.
Example insights
A typical analysis may highlight things like:
- Dependencies that are no longer maintained
- Packages with restrictive licences
- Vulnerable packages with real runtime impact
- Dependencies likely to block Node upgrades
- Supply-chain signals that deserve human review
- Dependency changes that should fail a CI guardrail
These signals help you decide what to fix, replace, or ignore.
Analyse your report
Upload a Dependency Radar-generated dependency-radar.html or dependency-radar.json report to receive additional analysis.
If you do not yet have a report, run:
npx dependency-radarin the root of your JavaScript or TypeScript project. Do not upload arbitrary HTML or JSON files.
Questions?
Dependency Radar is developed as an open-source CLI with an optional premium analysis layer. CLI scans run locally, do not require an account, and do not upload reports during normal use. Upload is a deliberate premium step.