package.json Dependency Auditor

Audit a package.json for dependency hygiene, version-range quality, and optionally inspect a transitive dependency tree from package-lock.json or yarn.lock. Flags duplicates, wildcard or pre-release specs, unsorted keys, missing metadata, and misclassified runtime/dev dependencies.

html· HTML resultOpen tool

Quick start

Call this tool from your code in three languages.

cURL

curl -X POST 'https://api.elysiatools.com/en/api/tools/package-json-dependency-auditor' \
  -H 'Content-Type: application/json' \
  -d '{"packageJson":"{\n  \"name\": \"messy-app\",\n  \"version\": \"1.0.0\",\n  \"dependencies\": {\n    \"lodash\": \"*\",\n    \"eslint\": \"^8.0.0\",\n    \"axios\": \"^1.2.0\"\n  },\n  \"devDependencies\": {\n    \"lodash\": \"^4.17.21\",\n    \"typescript\": \"^5.0.0\"\n  }\n}","strictness":"standard","showTable":true,"lockfileType":"auto","lockfileContent":"","showTree":true,"treeDepth":3}'

API reference

Send a POST request with your inputs as JSON. File parameters require a separate upload first.

Endpoint

HTTP

POST https://api.elysiatools.com/en/api/tools/package-json-dependency-auditor

Parameters

Name	Type	Required	Description
packageJson	textarea	Yes	—
strictness	select	No	—
showTable	checkbox	No	—
lockfileType	select	No	—
lockfileContent	textarea	No	—
showTree	checkbox	No	—
treeDepth	number	No	—

Response format

HTML result

JSON

{
  "result": "<div>Processed HTML content</div>",
  "error": "Error message (optional)",
  "message": "Notification message (optional)",
  "metadata": {
    "key": "value"
  }
}

MCP integration

Add this tool to your Model Context Protocol server so AI agents can list and call it.

Server configuration

Add this block to your MCP client configuration:

mcp.json

{
  "mcpServers": {
    "elysiatools-package-json-dependency-auditor": {
      "name": "package-json-dependency-auditor",
      "description": "Audit a package.json for dependency hygiene, version-range quality, and optionally inspect a transitive dependency tree from package-lock.json or yarn.lock. Flags duplicates, wildcard or pre-release specs, unsorted keys, missing metadata, and misclassified runtime/dev dependencies.",
      "baseUrl": "https://api.elysiatools.com/mcp/sse?toolId=package-json-dependency-auditor",
      "command": "",
      "args": [],
      "env": {},
      "isActive": true,
      "type": "sse"
    }
  }
}

List available tools

After connecting to the SSE endpoint, list the exposed tools:

tools/list

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/list"
}

Call this tool

Invoke the tool by its id, passing arguments built from its parameters:

tools/call

{
  "jsonrpc": "2.0",
  "id": 2,
  "method": "tools/call",
  "params": {
    "name": "package-json-dependency-auditor",
    "arguments": {
  "packageJson": "{\n  \"name\": \"messy-app\",\n  \"version\": \"1.0.0\",\n  \"dependencies\": {\n    \"lodash\": \"*\",\n    \"eslint\": \"^8.0.0\",\n    \"axios\": \"^1.2.0\"\n  },\n  \"devDependencies\": {\n    \"lodash\": \"^4.17.21\",\n    \"typescript\": \"^5.0.0\"\n  }\n}",
  "strictness": "standard",
  "showTable": true,
  "lockfileType": "auto",
  "lockfileContent": "",
  "showTree": true,
  "treeDepth": 3
}
  }
}

Chain multiple tools in one session with a comma-separated toolId list, e.g. /mcp/sse?toolId=png-to-webp,jpg-to-webp,gif-to-webp (max 20).

Questions or issues? Contact [email protected]