git-pkgs tracks package dependencies across your repository's git history. It answers questions like "who added this dependency?", "when was it introduced?", and "how long were we exposed to this vulnerability?" Works with 35+ package managers.
Install it with:
brew tap git-pkgs/git-pkgs
brew install git-pkgsOr download a binary from the releases page.
Or build from source:
go install github.com/git-pkgs/git-pkgs@latest- managers - Go library wrapping package manager CLIs behind a common interface
- manifests - Go library for parsing package manager manifest and lockfiles
- purl - Go library for Package URL construction, parsing, and registry URL mapping
- registries - Go library for fetching package metadata from registry APIs
- spdx - Go library for SPDX license expression parsing and normalization
- vers - Version range parsing and comparison per the VERS spec