VS Code Extension

Open `package.json`, `pnpm-workspace.yaml`, or `pnpm-workspace.yml`. Dep Beacon adds CodeLens and quick-fix actions, dependency hovers, and inline status text to supported entries.

Dep Beacon showing package.json and pnpm-workspace.yaml with inline version status, CodeLens update actions, and diagnostics. — Dependency status stays beside the manifest entries you are already editing, including pnpm catalogs, overrides, missing versions, and update targets.

CodeLens actions

`patch` updates to the highest patch in the current minor.
`minor` updates to the nearest higher minor in the current major.
`major` updates to the nearest higher major.
`latest` updates to npm's latest dist-tag or the newest stable version.

Hovers and quick fixes

Hover a dependency name or range to see resolved and latest versions, available update targets, npm links, and vulnerability details. Open VS Code's quick-fix menu to update one dependency or update all compatible or latest dependencies in the current manifest. Catalog-backed actions edit the matching pnpm catalog entry.

Commands

`Dep Beacon: Refresh Dependency Signals` re-analyzes visible manifests.
`Dep Beacon: Clear Registry Cache` clears cached npm metadata.
`Dep Beacon: Toggle Prerelease Versions` includes or excludes prerelease versions.
`Dep Beacon: Sort Current Manifest` alphabetizes package sections in `package.json`.
`Dep Beacon: Run Package Install` starts the selected package manager's dependency install from VS Code.
`Dep Beacon: Show Debug Output` opens the extension output channel with activation, refresh, cache, parse, analysis, and diagnostic details.

Status colors

Green means the declared range already accepts the latest stable version.
Yellow means a newer target exists.
Orange means OSV reports low or medium risk.
Red means the package or version is invalid, missing, high risk, or critical risk.