DEV Community

Ojus Chugh
Ojus Chugh

Posted on

ghostdep - phantom dependency detector for 5 languages

I kept running into the same two problems:

  1. importing a package that only works because of a transitive dep
  2. manifests full of deps nobody uses anymore

So I built ghostdep. Point it at a project, it tells you what's missing and what's dead.

cargo install ghostdep
ghostdep -p my-project

Supports Go, JS/TS, Python, Rust, Java. AST-based, not regex. Has JSON/SARIF output for CI, auto-fix commands, monorepo support.

First release - looking for feedback and contributors.

https://github.com/ojuschugh1/ghostdep

Top comments (0)