usefulweb.site Package Ecosystem Graph

Security & supply-chain explorers

Package Ecosystem Graph

Who depends on what: resolved dependency graph, duplicates and the blast radius of breaking changes.

Output of GET https://api.deps.dev/v3/systems/{system}/packages/{name}/versions/{version}:dependencies

Try an example: Pasted deps.dev graph

How it works

Shows the resolved dependency graph of an npm, PyPI, Cargo or Maven package version from deps.dev (Open Source Insights): direct and transitive dependencies, depth, packages pulled in at several versions, which dependencies the most other packages in the tree rely on (their breaking changes hit hardest), how many published packages depend on this one, and which direct dependencies have a newer major version. Paste a deps.dev graph JSON to work offline.

  • Graph: deps.dev v3 GetDependencies (GET api.deps.dev/v3/systems/{system}/packages/{name}/versions/{version}:dependencies), i.e. the dependency tree deps.dev resolved for that release on Linux; your lockfile can resolve differently. Blank version = the package's default version from GetPackage.
  • Depth = shortest path from the package (breadth-first). Duplicates = the same package name resolved at more than one version.
  • Blast radius inside the tree: for every dependency, the number of other packages in this graph that depend on it directly or transitively, and which of your direct dependencies pull it in. A breaking release of a package high in this list affects the most code paths.
  • Dependents (ecosystem-wide blast radius): deps.dev v3alpha GetDependents counts (direct + indirect dependents of this exact version). v3alpha is an unstable API; when it fails the count is omitted.
  • Major updates: for up to 20 direct dependencies the default version is fetched from deps.dev; a higher leading version number than the resolved one is a semver-major (potentially breaking) upgrade.

For scripts and AI agents

  • JSON API: POST https://packageecosystemgraph.usefulweb.site/api/v1/calculate (same calculation as this page)
  • Interface description: OpenAPI 3.1 · AI guide: llms.txt
  • MCP server (Streamable HTTP): https://packageecosystemgraph.usefulweb.site/mcp · tool name package_ecosystem_graph
Example request
curl -s -X POST https://packageecosystemgraph.usefulweb.site/api/v1/calculate \
  -H 'content-type: application/json' \
  -d '{…see OpenAPI examples…}'

Related tools

Feedback