Check the health of your project’s dependencies
Your project’s npm and PyPI dependencies with their latest versions, licences and maintenance signals from GitHub, plus any security incidents in the news.
Steps
A dependency health check shows which packages are outdated, unmaintained or risky before you upgrade. With Agentik, your AI reads each package from npm and PyPI, each repository’s activity from GitHub, and recent security news with Serper.
Step 1: Read the packages
npm returns the latest version, licence and dependencies of ten packages, and PyPI the same for five Python packages.
Step 2: Read the repositories
GitHub returns each repository’s last push, open issues, stars and licence.
Step 3: Search for incidents
Serper searches the news for vulnerabilities, takeovers or malicious releases.
Step 4: Write the report
Your AI writes the packages to update, replace or watch, and the licences to check.
Your agent does this part, with no tool call.
What you get
A dependency health report.
You provide
- Your package.json or requirements file
- Or the list of packages
Your agent returns
- Latest versions against yours
- Licences to check
- Maintenance signals per package
- Packages to update, replace or watch
| Package | Yours | Latest | Licence | Last push |
|---|---|---|---|---|
| express | 4.x | MIT | Recent | |
| requests | 2.x | Apache-2.0 | Recent | |
| left-pad-like | 1.x | WTFPL | Years ago |
Placeholders. Your rows come from your run.
Each provider does one part
No single provider covers this job. Your agent calls each one for its part, from one connection.
Good to know
- npm, PyPI and GitHub lookups are free; the news searches cost at most a cent each.
- GitHub’s unauthenticated quota is shared; your agent spaces calls on large lists.
When to use something else
For continuous vulnerability scanning in CI, use a software composition analysis tool. This playbook gives a readable health check when you plan upgrades.
Questions
Does it replace a vulnerability scanner?
No. It gives a readable check before upgrades; a scanner in CI catches known vulnerabilities on every build.
What about large dependency lists?
GitHub’s free quota is shared, so your agent spaces calls on long lists.
What does the example cost?
At most $0.03, reserved before each call and settled at the measured usage.
Connect your agent to 2,400+ tools for free
Sign in with Google or GitHub. No card required.
