# Check the health of your project’s dependencies. Versions, licences, maintenance and incidents A dependency health check shows which packages are outdated, unmaintained or risky before you upgrade. With Agentik, your AI reads each package from npm and PyPI, each repository’s activity from GitHub, and recent security news with Serper. - For: Developers and engineering leads - Providers: 4 (npm, PyPI, GitHub and Serper), 4 tools - Example (10 npm packages, 5 PyPI packages, 10 GitHub repositories, 3 news searches): at most $0.03, computed from the live catalog - Updated: 2026-10-10 ## Each provider does one part No single provider covers this job. Through Agentik your AI calls each one for its part, from one connection and one prepaid balance. - **npm** (1 tool, free): The latest version, licence and dependencies of each npm package. - **PyPI** (1 tool, free): The latest version, licence and Python support of each PyPI package. - **GitHub** (1 tool, free): Each repository’s last push, open issues, stars and licence. - **Serper** (1 tool, at most $0.03): News of vulnerabilities, takeovers or malicious releases. ## Give this to your agent ```text Use my connected Agentik MCP server for this job: dependency health check. Check the health of my project’s dependencies. First ask me for my package.json or requirements file, or the list of packages. Read each npm package with npm/package-latest and each Python package with pypi/package. Read each project’s repository with github/repo (last push, open issues, stars, licence). Search for security incidents with serper/news. Finish with a table (package, my version, latest, licence, last push, open issues, risk) and the packages to update, replace or watch, with reasons. Before running anything, inspect each tool with inspect_tool, ask me for any input you don’t have instead of inventing it, and tell me the total price. Wait for my go. At the end, tell me what Agentik charged. ``` ## You provide - Your package.json or requirements file - Or the list of packages ## What you get: a dependency health report - Latest versions against yours - Licences to check - Maintenance signals per package - Packages to update, replace or watch ## How to check a project’s dependency health in Claude or ChatGPT Prices are the most each call can reserve for this example: 10 npm packages, 5 PyPI packages, 10 GitHub repositories, 3 news searches. ### 1. Read the packages npm returns the latest version, licence and dependencies of ten packages, and PyPI the same for five Python packages. - [npm package latest version](/tools/npm/package-latest.md) `npm/package-latest` (npm, 10 packages): free - [PyPI package](/tools/pypi/package.md) `pypi/package` (PyPI, 5 packages): free ### 2. Read the repositories GitHub returns each repository’s last push, open issues, stars and licence. - [GitHub repository](/tools/github/repo.md) `github/repo` (GitHub, 10 repositories): free ### 3. Search for incidents Serper searches the news for vulnerabilities, takeovers or malicious releases. - [Google News search](/tools/serper/news.md) `serper/news` (Serper, 3 searches): at most $0.03 ### 4. Write the report Your AI writes the packages to update, replace or watch, and the licences to check. Example total: at most $0.03. Each call is billed for measured usage; unused reservations are released. ## Ask it your way - Check the health of the dependencies in my package.json. - Which of my Python packages are no longer maintained? - Do any of my dependencies have licences I should check? - Was any package I use compromised recently? ## Why through Agentik - npm, PyPI, GitHub and news come through one connection. - npm, PyPI and GitHub are free; the example’s cost is three news searches. ## Good to know - npm, PyPI and GitHub lookups are free; the news searches cost at most a cent each. - GitHub’s unauthenticated quota is shared; your agent spaces calls on large lists. ## When to use something else For continuous vulnerability scanning in CI, use a software composition analysis tool. This playbook gives a readable health check when you plan upgrades. ## Dependency health check: questions ### Does it replace a vulnerability scanner? No. It gives a readable check before upgrades; a scanner in CI catches known vulnerabilities on every build. ### What about large dependency lists? GitHub’s free quota is shared, so your agent spaces calls on long lists. ### What does the example cost? At most $0.03, reserved before each call and settled at the measured usage. ## Keep going - [Software vendor comparison](/vendor-comparison.md): Three vendors’ pricing pages, their Trustpilot reviews, what users say on Reddit and Hacker News, side by side before you buy. - [Launch day monitor](/launch-day-monitor.md): Your launch’s Hacker News thread, the posts on X and Reddit, and the press, read together every few hours with the questions to answer now. - [App feedback digest](/app-feedback-digest.md): Your latest App Store and Google Play reviews with what people say on Reddit and X, sorted into bugs, feature requests and praise with counts and quotes. - [Developer tools for your agent](/tools/dev.md) - [News tools for your agent](/tools/news.md) [All playbooks](/playbooks.md) · [Connection guides](/docs/clients.md) · [Billing](/docs/billing.md) --- [HTML page](/dependency-health) · [Agent index](/llms.txt)