Check dependencies and licenses

Paste a lock file or a module list. We show known advisories and the license of every version you use, and warn when upgrading would change your license terms. Files stay on this installation.

Resolved package inventory · choose or change the file or list

Check source coverage

Resolved package file

NuGet packages.lock.json / project.assets.json, or npm package-lock.json v2/v3 · up to 12 MiB / 5000 entries. Framework/runtime and npm installation paths remain separate. Go and crates.io use exact version lists; go.sum alone does not establish installed versions.

Or paste restore JSON / ecosystem:package@version or PowerShell Name Version, one per line

ImportExcel 7.8.10 for PowerShell modules · npm:[email protected] · Go:golang.org/x/[email protected] · crates.io:[email protected]. Entries without a prefix keep NuGet semantics.

Files, dependency paths and the versions in your report are not sent to publishers. Names already established by public sources can contribute aggregate check counts.

Add new public package names to metadata collection

Optional: the collector will query public registries, deps.dev and ClearlyDefined for these names. Leave this off for inventories containing private package names.

Clear inventory and result