Documentation

Learn how to use DependencyDesk to analyze your repositories and understand your dependencies.

Welcome to DependencyDesk

DependencyDesk helps you discover, catalog, and report on all third-party software dependencies across your GitHub repositories. Whether you're preparing for a compliance audit, conducting M&A due diligence, or simply want to understand what your software depends on, DependencyDesk provides the tools you need.

Getting Started

  1. Sign in with GitHub - Use your GitHub account to authenticate with DependencyDesk.
  2. Install the GitHub App - Add the DependencyDesk GitHub App to your organization and select which repositories to analyze.
  3. Run Analysis - Trigger a dependency analysis to scan your repositories for package manager files.
  4. Review Results - View comprehensive reports showing all dependencies, versions, and licenses.
  5. Export Reports - Download CSV reports to share with stakeholders or import into other tools.

Key Features

  • Multi-Language Support - Analyze JavaScript, PHP, Ruby, and Python projects
  • License Detection - Identify the licenses of your dependencies
  • Vulnerability Scanning - Detect known security vulnerabilities in NPM packages
  • Organization-Wide Analysis - Scan all repositories in your GitHub organization at once
  • CSV Export - Download machine-readable reports for further analysis
  • Secure by Design - Read-only access, no code execution, proactive cache cleanup

Documentation Topics

Explore our documentation to learn more about specific topics: