Dependi: Your Ultimate Dependency Management Tool

Dependi is a comprehensive dependency management extension that helps developers write code faster and smarter by efficiently managing project dependencies. Formerly known as Crates the most loved and used dependency management extension for Rust. Dependi now supports multiple languages including Rust, Go, JavaScript, TypeScript, Python and PHP.

Install Dependi via VSCode or Dependi.io

When you install Dependi in Visual Studio Code, 2 options are available :

• Dependi Core: Provides essential dependency management for Rust, Go, JavaScript, TypeScript, Python and PHP projects. Free to use with no subscription required.

• Dependi Pro: Offers many advanced features like detailed vulnerability reports, private repository support, and priority support... Easy subscription packages and free trials are available.

Why Dependi?

Are you tired of manually managing your dependencies? Dependi is here to save the day! Whether you're a seasoned developer or just getting started, our extension is designed to make your life easier and your coding experience more enjoyable.

Key Features

Dependi simplifies dependency management in Visual Studio Code, helping you to:

• Manage Versions: Dependi provides clear and concise views of all your project dependencies, making it easy to manage updates and versions.

• Related Links: For more insights and resources related to the languages and tools Dependi supports, check out the following links:

  • Rust:
    • Documentation: https://doc.rust-lang.org/
    • Package Repository (crates.io): https://crates.io/
  • Go:
    • Documentation: https://golang.org/doc/
    • Package Repository (pkg.go.dev): https://pkg.go.dev/
  • JavaScript (NPM):
    • Documentation: https://docs.npmjs.com/
    • Package Repository (npm): https://www.npmjs.com/
  • Python:
    • Documentation: https://docs.python.org/3/
    • Package Repository (PyPI): https://pypi.org/
  • PHP:
    • Documentation: https://www.php.net/docs.php
    • Package Repository (Packagist): https://repo.packagist.org

• Vulnerabilities at a Glance: Quickly identify vulnerabilities in your project dependencies and take action to mitigate risks.

• Vulnerability Reports: Generate comprehensive reports detailing the vulnerabilities in your dependencies, helping you maintain secure codebases.

• Supported Languages and Frameworks: Dependi works with a variety of languages including Rust, Go, JavaScript, TypeScript, Python and PHP. It is designed to support most popular languages and frameworks, making it a versatile tool for developers.

For more information about the feature set visit here.

Telemetry

Dependi collects telemetry data to improve its features and functionality. Currently, we collect data on the language of the files you use with the extension. This helps us understand which languages are most commonly used and prioritize enhancements accordingly.

If you prefer not to share this data, you can disable telemetry by modifying your settings.json file. Here’s how:

1. Open your VS Code settings.json file:

   • Use Ctrl + Shift + P (or Cmd + Shift + P on macOS) to open the Command Palette.
   • Type and select "Preferences: Open Settings (JSON)".

2. Add the following line to disable telemetry:

   "telemetry.telemetryLevel": "off"
   

Configuration Options

While Dependi works out-of-the-box without any configuration, we also offer a few customizable options:

Index

• dependi.apiURL: The URL for the Dependi API server.
• dependi.apiKey: API key for accessing enhanced features.
• dependi.rust.enabled: Enable Rust package management.
• dependi.rust.lockFileEnabled : Enable checking for Rust dependencies in lockfiles.
• dependi.rust.indexServerURL: The URL for the Rust package index server.
• dependi.rust.unstableFilter: Filter unstable versions: Exclude, Include Always, or Include If Unstable.
• dependi.rust.ignoreLinePattern: Matches lines based on * position: text*, *text, *text*. Multiple patterns can be used, separated by commas.
• dependi.rust.silenceVersionOverflows: Consider non-registry versions of packages as up-to-date if their version exceeds the registry version.
• dependi.npm.enabled: Enable NPM package management.
• dependi.npm.lockFileEnabled: Enable checking for Npm dependencies in lockfiles.
• dependi.npm.indexServerURL: The URL for the NPM package index server.
• dependi.npm.unstableFilter: Filter unstable versions: Exclude, Include Always, or Include If Unstable.
• dependi.npm.ignoreLinePattern: Matches lines based on * position: text*, *text, *text*. Multiple patterns can be used, separated by commas.
• dependi.npm.silenceVersionOverflows: Consider non-registry versions of packages as up-to-date if their version exceeds the registry version.
• dependi.go.enabled: Enable Go package management.
• dependi.go.indexServerURL: The URL for the Go package index server.
• dependi.go.unstableFilter: Filter unstable versions: Exclude, Include Always, or Include If Unstable.
• dependi.go.ignoreLinePattern: Matches lines based on * position: text*, *text, *text*. Multiple patterns can be used, separated by commas.
• dependi.go.silenceVersionOverflows: Consider non-registry versions of packages as up-to-date if their version exceeds the registry version.
• dependi.python.enabled: Enable Python package management.
• dependi.python.lockFileEnabled: Enable checking for Python dependencies in lockfiles.
• dependi.python.indexServerURL: The URL for the Python package index server.
• dependi.python.unstableFilter: Filter unstable versions: Exclude, Include Always, or Include If Unstable.
• dependi.python.ignoreLinePattern: Matches lines based on * position: text*, *text, *text*. Multiple patterns can be used, separated by commas.
• dependi.python.silenceVersionOverflows: Consider non-registry versions of packages as up-to-date if their version exceeds the registry version.
• dependi.php.enabled: Enable PHP package management.
• dependi.php.lockFileEnabled: Enable checking for PHP dependencies in lockfiles.
• dependi.php.indexServerURL: The URL for the PHP package index server.
• dependi.php.unstableFilter: Filter unstable versions: Exclude, Include Always, or Include If Unstable.
• dependi.php.ignoreLinePattern: Matches lines based on * position: text*, *text, *text*. Multiple patterns can be used, separated by commas.
• dependi.php.silenceVersionOverflows: Consider non-registry versions of packages as up-to-date if their version exceeds the registry version.
• dependi.vulnerability.enabled: Enable checking for vulnerabilities in dependencies.
• dependi.vulnerability.ghsa.enabled: Include GitHub Security Advisory vulnerabilities in checks.
• dependi.vulnerability.osvQueryURL.batch: The URL for batch querying vulnerabilities via OSV.
• dependi.vulnerability.osvQueryURL.single: The URL for querying single vulnerabilities via OSV.

Decorations

• dependi.decoration.position: Position of UI decorations relative to package names.
• dependi.decoration.compatible.template: Decoration for compatible package versions.
• dependi.decoration.compatible.style: Style for compatible version decorations.
• dependi.decoration.incompatible.template: Decoration for incompatible package versions.
• dependi.decoration.incompatible.style: Style for incompatible version decorations.
• dependi.decoration.error.template: Decoration for error package versions.
• dependi.decoration.error.style: Style for error version decorations.
• dependi.decoration.vulnerability.template: Decoration for vulnerable package versions.

Extras

• dependi.extras.silenceUpdateMessages: This setting hides informational update messages when enabled (true).

Cargo.toml, go.mod, package.json and requirements.txt

• # dependi: disable-check: Disable version check for this specific dependency.

Known Issues

Any minor issues or glitches you encounter will automatically be resolved when you save your work.

Help us simplify dependency management with Dependi, and let's make coding even more enjoyable! Together, we can achieve great things.