Overview Version History Q & A Rating & Review
Dependency Watch
A lightweight VS Code extension that helps developers understand dependency health and identify outdated or potentially vulnerable packages in their projects.
Features
Detects supported project manifests and lockfiles (package.json, npm lockfiles, requirements.txt, pyproject.toml)
Shows installed and declared dependency versions where reliable
Identifies outdated packages using safe registry integrations
Flags known vulnerabilities when trustworthy advisory data is available
Clean Dependency Watch sidebar/tree view
Commands to scan, refresh, and open dependency details
Cache results sensibly and avoid unnecessary network requests
Respects workspace trust and privacy - never sends project files, source code, secrets, or environment variables to external services
Usage
Open a workspace containing supported manifest files
Open the Dependency Watch view in the Explorer panel
Click "Scan Dependencies" or run the "Dependency Watch: Scan Dependencies" command
Review dependency status in the tree view
Limitations
Vulnerability data is only shown when trustworthy advisory data is available
Never automatically modifies or upgrades dependencies
Requires internet access for checking latest versions and advisories
Supports common formats; not all ecosystems are covered
Privacy
No project files, source code, secrets, or environment variables are sent to external services
Only package names and version metadata are queried from public registries when needed
Results are cached locally to minimize network requests
License
MIT
