depsdev VS digraph

Open Source Insights by Google for the dependency graph

Something I've recently worked on is building an SQLite database of all the dependencies my organisation uses, which makes it possible to write our own queries and reports. The tool is all Open Source (https://dmd.tanna.dev) and has a CLI as well as the SQLite data.

Ive used it to look for software that's out of date (via https://endoflife.date), to find vulnerablilities (via https://osv.dev) and get license information (via https://deps.dev)

It's been hugely useful for us understanding use of internal and external dependencies, and I wish I'd built it earlier in my career so I could've had it for other companies I've worked at!

https://deps.dev/ (a Google project) repeatedly examines sites such as github.com, npmjs.com, and pkg.go.dev to find up-to-date information about open source software packages. Using that information it builds for each package the full dependency graph from scratch—not just from package lock files—connecting it to the packages it depends on and to those that depend on it. And then does it all again to keep the information fresh. This transitive dependency graph allows problems in any package to be made visible to the owners and users of any software they affect.

My own purpose in using it is to be able to get back to any link that I've read or have potentially wanted to read at a later point in time.

You scan see screenshots here: https://github.com/emwalker/digraph.

I have the same habit and wrote a web app to catalog the links I come across:

https://digraph.app/

This was kind of the idea behind a side project I started a few years ago:

https://digraph.app/

https://blog.digraph.app/2020-06-13-democratization-of-searc...

I definitely think crowd-sourcing and a well-conceived reputation management system that can influence results are good next areas for exploration.

> I think building search vertical that are hand-curated would be very interesting to see.

That was my inspiration behind a side project I made a few years ago — a decentralized, hand curated "search engine" [0]. Never got beyond the side project stage. But I see promise in this in the future. Eventually we'll figure out that human and moderated curation is better than the best machine learning.

[0] https://github.com/emwalker/digraph