dependencies / Node.js CLI

dep-health

Score npm dependencies using freshness, maintenance, deprecation, and adoption signals.

dep-health reads a package.json, queries public npm metadata, and produces a compact maintenance-health score for every dependency. JSON output and a minimum-score threshold make the same check usable in local review and CI.

verified against its package

The repository's two real development dependencies score 7.4 overall.

A run on 2026-08-26 queried current npm metadata for this repository. Unknown download data was removed from the weighting instead of scored as zero.

observed output
packages 2overall 7.4 / healthycritical 0unknowns reweighted

what it exposes

Capabilities

  • Compare installed and latest published versions
  • Factor publish recency, deprecation, type support, and download signals into a score
  • Filter production and development dependencies
  • Emit JSON and fail CI below a chosen score

workflow integration

Keep the evidence in the run

Write score evidence to CI and enforce a minimum threshold.

- uses: barissozudogru/dep-health@v0.5.1

good fit

Use it when

  • Getting a fast maintenance overview of an npm dependency set
  • Finding stale or deprecated packages for deeper review
  • Creating a lightweight dependency-health gate in CI

operating limits

Know before using

  • It is not a vulnerability or CVE scanner
  • Low release frequency can describe a stable package as well as an abandoned one
  • Popularity is only one maintenance signal and should not decide adoption by itself