vcode-sh/depfresh - Evidence-backed dependency workflow
Run version-coupled check, capabilities, inspect, plan, or reviewed apply workflows
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| command | Workflow command: check, capabilities, inspect, plan, apply | no | check |
| mode | Version range mode: default, major, minor, patch, latest, newest, next | no | default |
| write | Write updated versions to package files | no | false |
| fail-on-outdated | Exit 1 if outdated dependencies are found (ignored when write is true) | no | true |
| include | Comma-separated list of package name patterns to include | no | "" |
| exclude | Comma-separated list of package name patterns to exclude | no | "" |
| recursive | Recursively scan workspace packages | no | true |
| working-directory | Directory to run depfresh in | no | . |
| node-version | Exact Node.js version to use (must be >= 24.15.0) | no | 24.15.0 |
| plan-file | Reviewed plan file, relative to working-directory (apply only) | no | "" |
| sync-lockfile | Plan or grant the sync-lockfile phase | no | false |
| install | Plan or grant the contained install phase | no | false |
| verify-artifacts | Plan or grant exact npm artifact verification (requires install) | no | false |
Outputs
| name | description |
|---|---|
| json | Full JSON output from depfresh |
| outdated-count | Number of outdated dependencies found |
| exit-code | Raw exit code; interpret it with the selected command contract and JSON result |
| has-updates | Whether outdated dependencies were found (true/false) |
| contract | Machine contract identifier for capabilities, inspect, plan, or apply |
| result-status | Apply result status; blank for other commands |
| has-findings | Whether the selected machine workflow reported reviewable findings |