Package Dependency Size & Vulnerability Lens
A VS Code extension that enhances your package.json with inline bundle sizes, latest version update alerts, and security vulnerability audit CodeLens.
Features
- Inline Bundle Size & Gzip Size: Displays minified bundle size and gzip size directly above each package in
package.json.
- Security Vulnerability Audit: Queries open-source vulnerability databases (OSV) and flags vulnerable package versions with interactive warning badges.
- Latest Version Checker: Indicates whether your dependency is on the latest version or if an update is available.
- Rich Hover Tooltips: Hover over any package in
package.json to inspect:
- Exact minified size and gzipped size
- License details (MIT, Apache, BSD, etc.)
- Security advisory details with direct CVE links
- Quick navigation links to NPM, Bundlephobia, and GitHub repository.
- Local Smart Caching: Caches API responses locally with configurable TTL to keep editor performance fast and offline-friendly.
Usage
- Open any
package.json file in VS Code.
- CodeLens badges will automatically appear above dependencies in
dependencies, devDependencies, peerDependencies, and optionalDependencies.
- Click on a size badge to inspect bundle composition on Bundlephobia.
- Click on a version badge to view the package on NPM.
- Click on a vulnerability badge to view CVE details and fixes.
Extension Commands
Dependency Lens: Refresh Dependency Info: Clears local cache and re-queries metadata and vulnerability status.
Extension Settings
This extension contributes the following settings:
| Setting |
Type |
Default |
Description |
packageDependencyLens.showSize |
boolean |
true |
Show package bundle size and gzip size CodeLens |
packageDependencyLens.showVulnerabilities |
boolean |
true |
Show security vulnerability warnings |
packageDependencyLens.showLatestVersion |
boolean |
true |
Show latest version update notices |
packageDependencyLens.showLicense |
boolean |
true |
Show package license in Hover tooltips |
packageDependencyLens.cacheTtlMinutes |
number |
60 |
Cache time-to-live in minutes |
License
MIT
| |
