360 Secure SkillHub
360 安全技能中心

Dep Graph

从 package.json、requirements.txt、pyproject.toml、go.mod、Cargo.toml、Gemfile、composer.json 等清单文件解析项目依赖,自动识别项目类型,按 production/dev/peer 等分组展示依赖树,并支持 JSON 或摘要计数输出,用于查看与审计依赖数量。仅使用 Python 3.8+ 标准库,不联网。

johnnywang2001
johnnywang2001
热度 41.78
最近更新 2026-05-11 17:35:58
分类:开发依赖:代码执行 / 读写文件应用场景:DevOps / 数据处理

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add dep-graph
Metadata
name
dep-graph
description
Analyze and visualize project dependency trees from manifest files. Supports Node.js (package.json), Python (requirements.txt, pyproject.toml), Go (go.mod), Rust (Cargo.toml), Ruby (Gemfile), and PHP (composer.json). Use when asked to list dependencies, show a dependency tree, check what packages a project uses, compare prod vs dev deps, or audit dependency counts.

Dep Graph

Parse and display project dependency trees from manifest files. Auto-detects project type.

Quick Start

# Analyze current project
python3 scripts/dep_graph.py

# Analyze specific directory
python3 scripts/dep_graph.py /path/to/project

# JSON output
python3 scripts/dep_graph.py --json

# Summary only (just counts)
python3 scripts/dep_graph.py --summary

# Force project type
python3 scripts/dep_graph.py --type node

# Hide version constraints
python3 scripts/dep_graph.py --no-versions

Supported Project Types

Type Manifest File Groups
Node.js package.json production, dev, peer
Python requirements.txt production
Python pyproject.toml production
Go go.mod production, indirect
Rust Cargo.toml production, dev
Ruby Gemfile production, dev
PHP composer.json production, dev

Auto-detects multiple manifest files in the same project and reports all.

Output

Tree view shows dependencies grouped by type (production/dev/peer) with version constraints. Use --json for programmatic processing or --summary for quick counts.

Dependencies

  • Python 3.8+ (stdlib only, no pip packages needed)