Developer Tools●●●Banger
Bundle-roast – the NPM scale that knows your sins
Bundlephobia with teeth: real brotli compression and wire-graph dep trees.
Eye CandySlickCrowd Pleaser
puruvj
1129d ago
Back to browse
GitHub Repository
Dependency risk analysis tool for npm packages
1 starsPython
Depsly – a CLI to see the dependency impact of NPM packages
by cyborg933·Apr 12, 2026·1 point·0 comments
AI Analysis
●●SolidShip ItNiche Gem
Simulates dependency removal to show structural impact before you install.
Strengths
- •Simulating removal to measure structural impact is a unique angle.
- •CLI-first workflow fits into existing CI/CD pipelines easily.
Weaknesses
- •Crowded category with established players like Snyk and Bundlephobia.
- •Very early stage with zero stars and sparse documentation.
Category
Target Audience
Frontend developers, engineering teams
Similar To
Bundlephobia · Snyk · Depcheck
Post Description
Built this because I kept wanting a quick answer to: what does adding this dependency actually do to my project structure?
Still early. The most useful thing so far has been simulating removal and surfacing which package has the biggest structural impact.
Happy to answer questions or hear where this feels useful vs not useful.
Similar Projects
Developer Tools●●Solid
I Built a Kotlin Package Manager (KPM)
npm for Kotlin, but Gradle already solves this—friction is real though.
Niche GemShip It
BenMorrisRains
103mo ago
Developer Tools●●Solid
license checker for npm projects
License classifier for npm with CI enforcement, but tools like FOSSA and Snyk already own this.
Solve My ProblemShip It
chrillemn
303mo ago
Developer Tools●●Solid
Llmpm – NPM for LLMs
Treats LLMs as package dependencies for reproducible AI project setups.
Ship ItSlick
sarthaksaxena
623mo ago
Security●●Solid
Eolds, a scanner for EOL open source packages across 12M versions
Lifecycle intelligence beyond CVEs, but SCA competitors already bundle EOL tracking.
Solve My ProblemNiche Gem
matparker24
203mo ago
Security●●Solid
PACO A tool to find Dependency Confusion vulnerabilities
Real-world bug bounty wins ($625+), but dependency confusion detection is a known category.
Solve My ProblemNiche Gem
r00tSid
123mo ago