Skip to content

What is Dependicus?

Dependicus is a dependency governance tool for monorepos. It pulls data from your lockfile (or tool config), the npm registry, and GitHub, then produces an interactive dashboard, Linear tickets, and GitHub Issues so you can make informed decisions about your dependency graph at an organizational scale.

If you maintain a monorepo with multiple teams, dozens of workspace packages, and hundreds of dependencies, Dependicus gives you the visibility that automated-PR tools don't: which packages are behind, by how much, who owns them, and where teams have drifted to different versions of the same dependency. You can see our own dashboard for a sense of what it looks like in practice.

Dependicus has a plugin system so you can customize it to your unique needs. It's a young open source project, but we use it daily at Descript.

graph LR
    lockfile["lockfiles and tool configs"] --> dependicus-update["<tt>dependicus update</tt><br>&rarr; <tt>dependencies.json</tt>"]
    registries["package registries"] --> dependicus-update
    GitHub --> dependicus-update
    dependicus-update --> dependicus-html["<tt>dependicus html</tt>"]
    dependicus-update --> dependicus-make-linear-issues["<tt>dependicus make-linear-issues</tt>"]
    dependicus-update --> dependicus-make-github-issues["<tt>dependicus make-github-issues</tt>"]

    dependicus-html --> static-site["Static site"]
    dependicus-make-linear-issues --> linear-tickets["Linear tickets"]
    dependicus-make-github-issues --> github-issues["GitHub Issues"]

Dependicus supports pnpm, bun, yarn, npm, mise, uv, Go, and Rust as dependency providers, with auto-detection of the active one. See Package Managers for details.