Google has introduced a new service called Open Source Insights (deps.dev), which visualizes the complete graph of direct and indirect dependencies for packages distributed through NPM, Go, Maven, and Cargo (support for NuGet and PyPI will be added soon). The main purpose of the service is to analyze the spread of vulnerabilities in modules and libraries present in the dependency chain, which can be useful for identifying vulnerabilities in deep-level dependencies (dependencies of dependencies).
Possible use cases also include exploring the license compliance of a project (providing statistics on which licenses are used in dependencies), monitoring new releases and events related to dependencies (such as identifying vulnerabilities), and assessing dependent projects (like viewing reports on which projects use a specified library directly or through other dependencies). Data sources include package repositories and data from GitHub, including Issues.
Source: opennet.ru
