Features
Everything DevCompass checks, generates, and fixes — organized by area.
On this page
Security & Vulnerability Detection
- Dual-source CVE detection — OSV (free) + NVD (optional API key)
- CVSS severity scoring — CRITICAL / HIGH / MEDIUM / LOW
- Smart 24-hour local cache for instant repeat scans
- Encrypted (AES-256-GCM) local storage for API keys
- Batch, concurrent vulnerability checks for performance
Detection process
- Scans all project dependencies
- Queries the OSV database for vulnerabilities
- Enriches with NVD data, if configured
- Caches results locally for 24 hours
- Reports findings with severity levels
Performance — cached vs. uncached
| Operation | Without cache | With cache | Improvement |
|---|---|---|---|
| 6 packages | 2-5 seconds | <100ms | 20-50× faster |
| CVE lookup | 300-500ms | <10ms | 30-50× faster |
| Full scan | 8-12 seconds | 5-6 seconds | ~50% faster |
AI-Powered Analysis
- 4 providers supported — OpenAI, Anthropic, Google, or local Ollama
- Interactive chat to ask questions about your dependencies
- AI-suggested package alternatives (size, API compatibility, upkeep)
- Context-aware recommendations based on your project's real state
- Free option — local Ollama keeps AI analysis fully offline
Historical Tracking
- Snapshot your project state and compare over time
- Monthly summaries and long-run statistics
- Timeline visualization of dependency evolution
- SQLite-backed local history — nothing leaves your machine
Interactive Visualization
- Tree, Force, Radial, Conflict, and Analytics layouts
- Real-time filtering — vulnerable, outdated, unused
- Depth control, search, zoom and pan
- Export as PNG or JSON
Intelligent Fixing
- Risk classification — safe / moderate / risky
- Interactive preview and confirmation before any change
- Automatic backup before every fix, with rollback support
- Health score tracking — before vs. after