| version | Version spec of @sheplu/dependency-guard to run via npx. Accepts any spec
npm understands: an exact version ("0.1.0"), a semver range ("^0.1.0"),
a dist-tag ("latest", "next"), or a git/file URL. Defaults to "latest"
for getting-started ergonomics; pin for reproducible builds.
| no | latest |
| working-directory | Directory containing package.json. Ignored if "path" is set. | no | . |
| path | Explicit package.json path. Overrides "working-directory". | no | — |
| format | Output format printed to the action log: table | json | markdown. | no | table |
| fail-on | Fail the job if updates are needed at this level: major | minor | patch | any | deprecated. | no | — |
| max-age-days | Fail if any dependency version is older than N days. | no | — |
| only | Comma-separated package names to analyze (e.g. "react,lodash"). | no | — |
| ignore-scopes | Comma-separated npm scopes to skip (e.g. "@internal,@private"). | no | — |
| filter | Comma-separated dependency buckets to include: prod, dev, peer, optional, overrides, resolutions, pnpm-overrides. | no | — |
| include-transitive | Expand analysis via lockfile to include transitive dependencies. | no | false |
| registry | Custom npm registry URL. | no | — |
| no-cache | Disable registry response cache. | no | false |
| cache-clear | Clear the registry cache before running. | no | false |
| cache-ttl | Cache TTL in minutes. | no | — |
| sort | Sort by: age | status | name. | no | — |
| all-columns | Table format: show empty patch/minor/major columns. | no | false |
| update-level | WARNING: Rewrites package.json. One of: patch | minor | major | all. Pair with dry-run for safety. | no | — |
| dry-run | Preview --update changes without writing. | no | false |
| quiet | Suppress summary line in non-JSON formats. | no | false |
| summary | Write a markdown report to $GITHUB_STEP_SUMMARY. | no | true |