Do I need to upload a lockfile to use this tool?

No, a lockfile is optional. Without it, the tool audits direct dependencies but disables transitive dependency tree resolution.

What does the strictness setting change?

Strict flags all minor issues like unsorted keys, Standard uses sensible defaults for general hygiene, and Lenient only highlights critical errors.

Which lockfile formats are supported?

The auditor supports npm package-lock.json and Yarn v1 yarn.lock files.

How does the tool identify duplicate dependencies?

It flags packages that are declared in both dependencies and devDependencies, or resolved to multiple conflicting versions in the lockfile.

Is my package.json data sent to a server?

No, the auditor runs entirely in your browser, ensuring your dependency manifests and lockfiles remain private.

Elysia Tools

Navigation

Development

package.json Dependency Auditor

Audit a package.json for dependency hygiene, version-range quality, and optionally inspect a transitive dependency tree from package-lock.json or yarn.lock. Flags duplicates, wildcard or pre-release specs, unsorted keys, missing metadata, and misclassified runtime/dev dependencies.

Details

What this tool helps you do

A package.json auditor for Node.js / frontend engineers, library authors and code reviewers:

Paste the contents of a package.json.
Pick strictness: Strict flags everything, Standard is the sensible default, Lenient focuses on serious issues.
Version analysis classifies each dependency spec (caret / tilde / exact / wildcard / workspace / alias / git-url / comparator) and shows the minimum satisfiable version when available.
Deep exploration is optional: paste package-lock.json or Yarn v1 yarn.lock to resolve transitive versions and build a dependency tree.
Report sections include a grade, findings list, version-policy table, optional dependency table, and optional resolved dependency tree.

Offline-first: without a lockfile the tool still audits direct dependencies, but transitive resolution stays disabled by design.

Execution

Run this tool

Fill in the form, run the tool, and review the result in one place.

Prepared example runs

Click an example to fill the form automatically. File inputs still need an upload.

2 examples

Audit a messy package.json

A package.json with a duplicate dependency, a wildcard range, an unsorted deps block and a missing engines field.

<div class="pja-wrap">…grade C, duplicate lodash, wildcard range, eslint in dependencies, missing engines, and a note that tree resolution needs a lockfile…</div>

Resolved tree from package-lock.json

A package.json paired with package-lock.json so the report can show resolved direct and transitive versions in a small dependency tree.

<div class="pja-wrap">…version policy table plus dependency tree alpha -> gamma and beta, with resolved versions 1.0.5 / 3.2.1 / 2.1.4…</div>

Inputs

Set the required fields, then run the tool.

7 options

ContentPaste or type the main input values.2

package.json contenttextareaRequiredLockfile content (optional)textareaOptional

SettingsAdjust formats, ranges, numbers, and modes.3

StrictnessselectOptionalLockfile typeselectOptionalTree depthnumberOptional

TogglesEnable or disable optional behavior.2

Show dependency tablecheckboxOptionalEnabled when checkedShow dependency treecheckboxOptionalEnabled when checked

Result

Ready for a run

Run the tool to preview files, text, structured data, or streamed output here.

Samples

package.json Dependency Auditor

What this tool helps you do

Run this tool

Prepared example runs

Inputs

Result

Examples that match this tool

Continue with connected tools and hubs

Prepared example runs

Inputs

Result

Learn when to use this tool, what it supports, and how real users apply it.

Key facts

Overview

When to use

How it works

Use cases

Examples

1. Cleaning Up a Messy package.json

2. Resolving Transitive Dependencies with a Lockfile

FAQ

Terraform Plan JSON Samples

pnpm Package Manager Samples

Chat Transcript JSON Samples

JSON Samples

JWK Generator & Parser

SQL Explain Plan Visualizer

GraphQL Playground

ECharts Theme Token Extractor

API Versioning, Breaking Change, and Release Readiness Tools

JSON Interchange and Format Translation Tools

JSON Inspection, Diff, and Transformation Tools

JSON Schema, Mock Data, and API Fixture Generators