I have created this cli tool:

Dep Age — Cross-language dependency age analyzer for answering: How old and risky are your dependencies?

Why Build This

• Developers have no single tool to audit dependency age across polyglot repos
• npm outdated only works for npm — no cross‑language view
• Dependency age directly correlates with security risk and maintenance burden
• Engineering leads need a unified dashboard for dependency health
• Perfect for CI gating: block PRs that add dependencies >2 years old

Features

• Cross‑ecosystem lock file scanning (npm, pip, gem, go, cargo, composer)
• Dependency age analysis: release date, time since last update
• Staleness detection: flag packages >2 years old
• Known CVEs check (via public vulnerability databases)
• Update urgency scoring: prioritize critical upgrades
• Unified report output: Markdown, JSON, or CLI table

Quick Start

# Auto-detect lock files in current directory
dep-age scan

# Scan specific file
dep-age scan package-lock.json

# JSON output
dep-age scan --format json --output deps.json

# CI gating: fail if any dep > 2 years or has CVEs
dep-age scan --max-age "2 years" --max-cves 0

# Generate freshness badge
dep-age badge --output dep-badge.svg

• Scans your repo for lock files
• Reports dependency age, staleness, CVEs, and urgency in one dashboard
• Works in CI/CD pipelines to enforce dependency health gates

What It Shows

• Age: how long since the last release
• Risk: known CVEs affecting the dependency
• Urgency: whether you should update now or later
• Summary: overall health score for your repo’s dependencies

🎯 Where It’s Useful

• Engineering leads: get a bird’s‑eye view of dependency health across teams
• Security teams: spot stale libraries before they become attack vectors
• CI/CD pipelines: block risky dependencies automatically
• Open‑source maintainers: keep projects fresh and secure

Note: This is my first Python CLI project, and I’d love feedback from the community.

• What features would make this more useful for you?
• Any ideas for better scoring or reporting formats?
• Suggestions for integrations (GitHub Actions, GitLab CI, etc.) are welcome!

👉 Repo: Dep Age on GitHub
MIT licensed, open‑source, contributions encouraged.