depgaze

About

depgaze is a command line tool for Linux and Windows that uses OS level fingerprinting to audit and explain, via an LLM, the dependencies within your CI pipeline and inner development loop. It identifies malicious, abandoned, and risky packages before they can access your system. Current support includes npm and PyPi. It can also be operated by AI agents through an agent skill and is deployable on your own infrastructure to ensure complete privacy.