Exorcist: a ghost hunter for your package.json

说明与用途

Exorcist 是一个完全本地的依赖健康扫描器，扫描 package.json，发现过时、重复、臃肿和许可证冲突的依赖，提供健康评分和可操作建议。

问题

Node.js projects accumulate hidden issues in package.json such as deprecated packages, duplicate dependencies, oversized bundles, conflicting licenses, and outdated major versions that npm audit does not detect.

结果

Exorcist provides a fully local, privacy‑preserving scan of package.json, uncovering deprecated, duplicated, bloated, and license‑conflicting dependencies and delivering a health score and remediation guidance.

工作流

• Drop a package.json file or paste a GitHub repo URL into the web UI
• The browser loads EmbeddingGemma 300M model via WebAssembly
• The scan pipeline runs seven stages, each reporting progress
• Results are displayed as a themed “morgue toe‑tag” with health score and spirit categories
• User receives recommendations for each finding

证据

Exorcist is a dependency health scanner for package.json — the checks npm audit doesn't run.

来源

Fully local. Your package.json never leaves your machine. The ML model downloads once and runs in the browser tab via WebAssembly.

来源

The scan runs entirely in the browser in seven stages:

来源