First public release of Deps Audit — a VS Code / Cursor extension that scans workspace Node repos for vulnerable, outdated, and malware-flagged dependencies.
Install
- Download deps-audit-1.3.1.vsix from this release
- Command Palette → Extensions: Install from VSIX…
- Open a projects folder → Deps Audit in the activity bar → refresh
What's included
- Findings by repo: Critical, High, Moderate, Low, Malware, Outdated majors
- Advisory dedupe (same GHSA/CVE collapsed)
- Optional Google Chat digests (preview first; manual post by default)
- Schedules: every N minutes, daily, weekly, or monthly while the editor is open
- First-run walkthrough + how-to / severity docs
- Shield activity-bar icon and 512×512 marketplace PNG
- Optional CLI and manual GitHub Action for multi-repo audits