Low Severity
Published: Oct 27, 2026
Your npm dependencies triaged in one screen: what to update now, and whether it breaks your code. Malware & CVE detection, safest target version, Node.js EOL. Local web UI, Docker, zero deps.
<p align="center">
<img src="docs/social-preview.png" alt="DepGate — do I need to update, and will it break my code?" width="820">
</p>
<h1 align="center">DepGate</h1>
<p align="center">
<b>Your npm dependencies in one screen: what to update now, whether it breaks your code — and exactly where.</b><br>
Linux · macOS · Windows · Docker or a single binary · zero dependencies · English & Azerbaijani
</p>
<p align="center">
<a href="https://github.com/Ali7Zeynalli/depgate/actions/workflows/ci.yml"><img src="https://github.com/Ali7Zeynalli/depgate/actions/workflows/ci.yml/badge.svg" alt="ci"></a>
<a href="https://github.com/Ali7Zeynalli/depgate/releases"><img src="https://img.shields.io/github/v/release/Ali7Zeynalli/depgate?include_prereleases&sort=semver" alt="release"></a>
<a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue.svg" alt="MIT"></a>
<img src="https://img.shields.io/badge/third--party%20deps-0-brightgreen" alt="zero dependencies">
· <a href="README.az.md">Azərbaycan dilində</a>
</p>
---
`npm audit` tells you *something* is vulnerable. DepGate tells you **what to do** — for every package:
- ① **Do I need to update?** now · soon · plan · optional · not needed — malware and exploited CVEs first
- ② **Will it affect my code?** no · maybe · yes — and if yes, **every place to change** (`file:line`) plus the codemod
- 🎯 **To which version?** the *safest minimum*, not "latest"
- 🤖 **Can my AI agent do it?** a ready prompt, version rules and an MCP server — Claude Code, Cursor, VS Code, Windsurf, Codex, Gemini
- 📈 **What changed?** projects are rescanned on their own and every scan is compared with the one before
It also checks Dockerfiles, docker-compose, nginx, Caddy and your Node.js runtime. It runs on your computer and **never changes your files** — it only shows and suggests.
## Install
**Docker** — Linux, macOS, Windows; nothing to configure:
```bash
git clone https://github