Upload formats
package-lock.json, yarn.lock, and pnpm-lock.yaml
Depsly
Dependency review for teams that need more than one-off scans
Hosted dependency review for ongoing package risk
Track dependency health over time instead of running one-off scans.
Upload a lockfile, identify the packages driving structural risk, and keep a durable review record your team can revisit as the graph changes.
What you get
Risk score, priority actions, scenario previews
Why teams use it
Saved history and repeatable review
Research
100-project dependency governance benchmark
Start here
Try the browser workflow
Upload a lockfile, inspect the dependency score, and review the highest-impact next actions in one place.
Keep the CLI when you want local analysis
Prefer the terminal for fast local checks, automation, or direct analysis inside your existing engineering workflow.
Benefits
Move from raw dependency data to a repeatable review process.
Run scans that stay useful later
Upload a lockfile once, keep the result, and come back to the same dependency decisions instead of starting from zero on every review.
Focus on the packages that matter most
Depsly highlights structural risk, recommends what to review first, and shows the packages most likely to reduce graph complexity.
Share clearer evidence with your team
Turn a one-off CLI result into a review workflow with saved scans, scenario summaries, and report-ready output for follow-up work.
Workflow
Move from upload to action without rebuilding the same analysis every week.
Step 1
Upload a lockfile
Start with `package-lock.json`, `yarn.lock`, or `pnpm-lock.yaml` and get a structural dependency scan in seconds.
Step 2
Review the highest-impact packages
See the overall risk score, top recommendation, and the packages most likely to simplify the graph.
Step 3
Share and revisit the outcome
Keep scan history, compare future runs, and continue dependency review with context instead of isolated snapshots.
Research
Read the first Depsly research brief on dependency governance.
State of Dependency Governance 2026 analyzes 100 JavaScript and TypeScript repositories to benchmark dependency depth, transitive complexity, concentration hotspots, and governance readiness.