v4.1.3 · Open Source
DevCompass
A dependency health checker with real-time CVE detection, AI-powered insights, and safe auto-fix — for any Node.js / npm project.
Free and open source. Covers what npm audit and Dependabot structurally don't: license conflicts, unused dependencies, historical health trends, and AI-suggested alternatives.
npm install -g devcompassOSV + NVD
CVE sources
4
AI providers
5
Graph layouts
MIT
License
npm audit and Dependabot are already in your workflow — DevCompass covers what they don't.
| Capability | npm audit | Dependabot | DevCompass |
|---|---|---|---|
| CVE scanning | Yes | Yes | Yes (OSV + NVD) |
| License conflicts | No | No | Yes |
| Unused dependency detection | No | No | Yes |
| Historical health trends | No | No | Yes |
| AI-suggested alternatives | No | No | Yes |
| Safe auto-fix w/ rollback | Partial | PR-based | Yes, with automatic backup |
Install it, run it, done.
1. Install
$ npm install -g devcompass2. Run your first analysis
$ devcompass analyzeFive feature areas, one CLI.
Security & Vulnerability Detection
Dual-source CVE detection — OSV (free) + NVD (optional API key)
AI-Powered Analysis
4 providers supported — OpenAI, Anthropic, Google, or local Ollama
Historical Tracking
Snapshot your project state and compare over time
Interactive Visualization
Tree, Force, Radial, Conflict, and Analytics layouts
Intelligent Fixing
Risk classification — safe / moderate / risky