Dep Beacon

Follow the signal

Documentation / Field guide

A clearer view of your dependencies.

Read the signal. Choose your next update. Keep the decision beside the manifest you are already editing.

Editors
VS Code + Zed
Packages
npm ecosystem
Security data
OSV.dev

Find your next step

From first install to workspace policy.

Read the signal

Dep Beacon combines npm metadata, semver-aware update targets, pnpm catalog resolution, and OSV advisories. Version status and security risk stay distinct, so you can decide what needs attention.

Up to date
Your declared range already accepts the latest stable version.
Update available
A newer target is available. Choose patch, minor, major, or latest.
Needs attention
Review missing packages, invalid ranges, or reported security risk.

At home in your manifests

package.json
Dependency sections, npm overrides, Yarn resolutions, and pnpm-specific blocks.
pnpm-workspace.yaml
Default and named catalogs, overrides, and package extensions. The .yml extension works too.
Your editor
Inspect a dependency, choose an update, or use VS Code commands to refresh signals, sort manifests, and run installs.