Exorcist: a ghost hunter for your package.json

Description and use

Exorcist is a fully local dependency health scanner for package.json that uncovers deprecated, duplicated, bloated, and license‑conflicting packages, providing a health score and actionable guidance.

Problem

Node.js projects accumulate hidden issues in package.json such as deprecated packages, duplicate dependencies, oversized bundles, conflicting licenses, and outdated major versions that npm audit does not detect.

Outcome

Exorcist provides a fully local, privacy‑preserving scan of package.json, uncovering deprecated, duplicated, bloated, and license‑conflicting dependencies and delivering a health score and remediation guidance.

Workflow

• Drop a package.json file or paste a GitHub repo URL into the web UI
• The browser loads EmbeddingGemma 300M model via WebAssembly
• The scan pipeline runs seven stages, each reporting progress
• Results are displayed as a themed “morgue toe‑tag” with health score and spirit categories
• User receives recommendations for each finding

Evidence

Exorcist is a dependency health scanner for package.json — the checks npm audit doesn't run.

Source

Fully local. Your package.json never leaves your machine. The ML model downloads once and runs in the browser tab via WebAssembly.

Source

The scan runs entirely in the browser in seven stages:

Source