Analyze Deps

Compare dependencies in package.json to the latest available versions.

Installation

1npm install analyze-deps --save

Usage

1const analyzeDeps = require('analyze-deps');
2const packageJson = {
3  name: 'analyze-deps',
4  license: 'MIT',
5  dependencies: {
6    'lodash.mapvalues': "^4.6.0",
7    'package-json': "^1.2.0",
8    'promise-all': "^1.0.0",
9    'semver': "^5.2.0"
10  },
11  devDependencies: {
12    'eslint': "^3.7.0"
13  }
14};
15
16analyzeDeps(packageJson).then(analysis => console.log(analysis));
17/*
18  {
19    dependencies: {
20      'lodash.mapvalues': {
21        status: 'latest'
22      },
23      'package-json': {
24        status: 'not-latest',
25        current: '^1.2.0',
26        latest: '2.4.0',
27        latestRange: '^2.4.0',
28        diff: 'major'
29      },
30      'promise-all': {
31        status: 'latest'
32      },
33      semver: {
34        status: 'not-latest',
35        current: '^5.2.0',
36        latest: '5.3.0',
37        latestRange: '^5.3.0',
38        diff: 'minor'
39      }
40    },
41    devDependencies: {
42      eslint: {
43        status: 'not-latest',
44        current: '^3.7.0',
45        latest: '3.7.1',
46        latestRange: '^3.7.1',
47        diff: 'patch'
48      }
49    }
50  }
51*/

Description

This library analyzes the provided package.json, and returns the packages which version range can be updated to include the latest version only.

Currently, only dependencies and devDependencies are analyzed (feel free to submit a Pull Request if you need more than that).

You can pass a second argument if you don't want to analyze everything. For example, to avoid analyzing dependencies, do:

1analyzeDeps(packageJson, { dependencies: false }).then(...)

Related

• analyze-deps-cli - CLI for this module

License

MIT