← All projects
Project overview
dep_sherpa
Dependency risk analysis that makes maintenance, compatibility and transitive complexity visible.
Context
A published Dart and Flutter CLI that examines direct and transitive dependency graphs.
Problem
A dependency can look current in isolation while concentrating maintenance, compatibility or transitive risk elsewhere in the graph.
Approach
Transparent risk components combine version lag, maintenance, adoption, quality, graph depth and transitive impact. Optional public metadata enriches the report without preventing offline operation.
Implementation
The CLI supports ranking, graph inspection, report diffs, explanations and CI-oriented exit codes. Its iOS and macOS readiness analysis inspects CocoaPods and Swift Package Manager metadata statically, without modifying or compiling the target project.
Technical highlights
- Direct and transitive graph analysis
- Explainable risk components
- JSON and Markdown reports
- Caching, offline operation and CI exit codes