urunsiyabend/depintel
Maven dependency intelligence — audit CVEs, score conflicts, trace paths, preview bumps
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| command | Command to run: audit, conflicts, why, list, tree, bump | yes | audit |
| pom | Path to pom.xml or project directory | no | . |
| pom-url | GitHub URL to analyze remotely (alternative to pom) | no | "" |
| severity | Minimum severity filter (low, medium, high, critical) | no | "" |
| artifact | Artifact for why/bump commands (e.g. com.google.guava:guava) | no | "" |
| bump-to | Target version for bump command | no | "" |
| group | Filter by groupId prefix (conflicts command) | no | "" |
| module | Focus on a specific module in multi-module projects | no | "" |
| include-test | Include test-scope dependencies in audit (true/false) | no | false |
| output-format | Output format: text, json | no | text |
| output-file | Write output to this file path | no | "" |
| fail-on-findings | Fail the step when HIGH/CRITICAL findings exist (true/false) | no | true |
| version | depintel version to install (e.g. v0.1.0, or latest) | no | latest |
Outputs
| name | description |
|---|---|
| exit-code | Exit code from depintel (0=clean, 2=findings) |
| output-file | Path to the output file, if output-file was set |
| finding-count | Number of findings (extracted from JSON output when available) |