# extract-dependencies-from-sources > Inferring dependencies from the source code of a monorepo app Latest version **1.2.3** (published 2026-03-11) · MIT license · 0 weekly downloads ## Install ```sh npm install extract-dependencies-from-sources pnpm add extract-dependencies-from-sources yarn add extract-dependencies-from-sources bun add extract-dependencies-from-sources ``` Provides the commands `extractDeps`, `extractDepsEsm`. ## Health **Score 70/100 (B)** — status: stable. Positive: has types; esm support; no vulnerabilities; has provenance; high maintenance score; high quality score. Warnings: low downloads. ## Facts | | | |---|---| | Version | 1.2.3 | | Published | 2026-03-11 | | First published | 2023-04-18 | | Weekly downloads | 0 | | License | MIT | | TypeScript types | bundled | | Module format | ESM + CommonJS | | Node | >=20.x | | Dependencies | 7 | | Unpacked size | 88.8 KB | | Known vulnerabilities | 0 (+2 in 2 direct dependencies) | | Install scripts | no | | Provenance | attested (GitHub Actions) | | GitHub stars | 4 | | Author | jpb06 | | Maintainers | jpb06 | ## Links - npm: https://www.npmjs.com/package/extract-dependencies-from-sources - Repository: https://github.com/jpb06/extract-dependencies-from-sources - Homepage: https://github.com/jpb06/extract-dependencies-from-sources#readme - Issues: https://github.com/jpb06/extract-dependencies-from-sources/issues - npm.io page: https://npm.io/package/extract-dependencies-from-sources ## Dependencies (7) - [glob](https://npm.io/package/glob.md) 13.0.6 - [yaml](https://npm.io/package/yaml.md) 2.8.2 - [yargs](https://npm.io/package/yargs.md) 18.0.0 - [effect](https://npm.io/package/effect.md) 3.19.19 - [picocolors](https://npm.io/package/picocolors.md) 1.1.1 - [dotenv-flow](https://npm.io/package/dotenv-flow.md) 4.1.0 - [comment-json](https://npm.io/package/comment-json.md) 4.6.2 ## Recent versions - 1.2.3 (latest) — 2026-03-11 - 1.2.2 — 2026-02-11 - 1.2.1 — 2025-10-22 - 1.2.0 — 2025-09-06 - 1.1.12 — 2025-07-05 - 1.1.11 — 2025-07-04 - 1.1.10 — 2025-06-17 - 1.1.9 — 2025-05-17 - 1.1.8 — 2025-04-20 - 1.1.7 — 2025-03-30 - 1.1.6 — 2025-03-01 - 1.1.5 — 2025-02-15 - 1.1.4 — 2025-01-19 - 1.1.3 — 2024-11-25 - 1.1.2 — 2024-11-17 - … 24 more at https://npm.io/package/extract-dependencies-from-sources/versions ## README # extract-dependencies-from-sources [![Open in Visual Studio Code](https://img.shields.io/static/v1?logo=visualstudiocode&label=&message=Open%20in%20Visual%20Studio%20Code&labelColor=2c2c32&color=007acc&logoColor=007acc)](https://github.dev/jpb06/extract-dependencies-from-sources) ![npm bundle size](https://img.shields.io/bundlephobia/min/extract-dependencies-from-sources) ![Github workflow](https://img.shields.io/github/actions/workflow/status/jpb06/extract-dependencies-from-sources/tests-scan.yml?branch=main&logo=github-actions&label=last%20workflow) [![Quality Gate Status](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=jpb06_extract-dependencies-from-sources) [![Maintainability Rating](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=sqale_rating)](https://sonarcloud.io/dashboard?id=jpb06_extract-dependencies-from-sources) [![Security Rating](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=security_rating)](https://sonarcloud.io/dashboard?id=jpb06_extract-dependencies-from-sources) [![Reliability Rating](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=reliability_rating)](https://sonarcloud.io/dashboard?id=jpb06_extract-dependencies-from-sources) [![Coverage](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=coverage)](https://sonarcloud.io/dashboard?id=jpb06_extract-dependencies-from-sources) [![Lines of Code](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=ncloc)](https://sonarcloud.io/summary/new_code?id=jpb06_extract-dependencies-from-sources) [![Technical Debt](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=sqale_index)](https://sonarcloud.io/summary/new_code?id=jpb06_extract-dependencies-from-sources) [![Code Smells](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=code_smells)](https://sonarcloud.io/dashboard?id=jpb06_extract-dependencies-from-sources) [![Bugs](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=bugs)](https://sonarcloud.io/summary/new_code?id=jpb06_extract-dependencies-from-sources) [![Vulnerabilities](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=vulnerabilities)](https://sonarcloud.io/summary/new_code?id=jpb06_extract-dependencies-from-sources) [![Duplicated Lines (%)](https://sonarcloud.io/api/project_badges/measure?project=jpb06_extract-dependencies-from-sources&metric=duplicated_lines_density)](https://sonarcloud.io/dashboard?id=jpb06_extract-dependencies-from-sources) ![Last commit](https://img.shields.io/github/last-commit/jpb06/extract-dependencies-from-sources?logo=git) Inferring dependencies from the source code of a monorepo app

        

## ⚡ Quickstart ### 🔶 Install ```bash yarn add -D extract-dependencies-from-sources ``` ```bash pnpm i -D extract-dependencies-from-sources ``` ### 🔶 Usage #### 🧿 cjs ```bash extractDeps --packagejson ./package.json --path codebasePath Options: --help Show help [boolean] --version Show version number [boolean] --packagejson Root package.json path [required] [default: "./package.json"] --path Codebase path [required] --externaldeps Path to external dependencies file (optional) Examples: extractDeps --packagejson ./package.json --path ./apps/back --path ./libs/back Inferring dependencies from the source code of a monorepo app ``` For example, running the following command will replace the `dependencies` property of the root `package.json` with the dependencies found in the codebases located in `apps/back` and `libs/back/database`. ```bash yarn extractDeps --path apps/back --path libs/back/database ``` #### 🧿 esm ```bash extractDepsEsm --packagejson ./package.json --path codebasePath Options: --help Show help [boolean] --version Show version number [boolean] --packagejson Root package.json path [required] [default: "./package.json"] --path Codebase path [required] --externaldeps Path to external dependencies file (optional) Examples: extractDeps --packagejson ./package.json --path ./apps/back --path ./libs/back Inferring dependencies from the source code of a monorepo app ``` #### 🧿 node You can also use the function directly in your code: ```ts import { getCodebasesDependencies } from 'extract-dependencies-from-sources'; import { readJson } from 'fs-extra'; const data = await readJson('./package.json'); const deps = await getCodebasesDependencies(data.dependencies, [ 'apps/front/auth', 'lib/front/components', ]); ``` ### 🔶 Including external dependencies You can also specify external dependencies to include in the output by providing a path to a yaml file containing a map of dependencies: > external-deps.yml ```yaml externaldeps: - msw: ^1.1.0 - eslint: ~8.36.0 ``` You can then use the `--externaldeps` option to include them: ```bash yarn extractDeps --path apps/front --externaldeps ./external-deps.yml ``` --- _Source: https://npm.io/package/extract-dependencies-from-sources · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._