lacspace-deps

Audit licences, size & unused deps — a CI gate.

terminal

npx lacspace-deps

What it does

Everything, in one command

Most projects don't really know what they ship. lacspace-deps reads package.json, the lockfile and your local node_modules and answers the questions that matter for supply-chain hygiene: are these licences allowed, what's bloating node_modules, which libraries are installed twice, what's declared but never imported (or imported but never declared), and — opt-in — what's fallen behind on the registry. Everything except the outdated check is pure filesystem work with no telemetry.

Features

What's inside

Licence policy gate

Classify every package and fail on a GPL-*/AGPL-* with --allow/--deny.

Install-size report

Heaviest packages by real on-disk bytes + file counts, with a gzip estimate.

Duplicate detection

Packages installed at multiple versions, with where each copy lives.

Unused & missing

Declared-but-never-imported and imported-but-undeclared deps from a source scan.

Outdated (opt-in)

Registry latest-version diff flagging majors behind; the only online feature.

CI-ready output

Human, --json or -f md; non-zero exit on --fail-on categories.

Zero-dep & local

Keyless, no account, no telemetry; Node built-ins only.

How to use

Copy, paste, done

Real commands and snippets — from a one-liner to the typed library.

Full audit

terminal

npx lacspace-deps

Health score + every section for the current project.

Enforce a licence policy in CI

terminal

npx lacspace-deps --allow "MIT,ISC,Apache-2.0,BSD-*" --deny "GPL-*,AGPL-*"

Exits 1 on a copyleft dependency.

Dead + undeclared deps

terminal

npx lacspace-deps unused --fail-on unused,missing

Gate the build on hygiene.

What's bloating node_modules

terminal

npx lacspace-deps size --top 15 --gzip

Heaviest packages by install size.

Duplicate versions

terminal

npx lacspace-deps duplicates

Find the same library installed twice.

Markdown for a CI summary

terminal

npx lacspace-deps -f md > deps-report.md

Drop into a job summary.

Good for

What people build with it

✓ CI licence-compliance gate

✓ Pre-release supply-chain audit

✓ Trim node_modules bloat (size + duplicates)

✓ Catch dead/phantom dependencies during refactors

Start now

Run lacspace-deps today

Free, open-source, no API keys. It's a CLI and a typed library.

terminal

npx lacspace-deps

npm ↗Source ↗All tools →