depstat: Analyzing a Go Project’s Dependencies
summary
depstat is a CLI that computes four concrete metrics—number of direct deps, transitive deps, total deps and max depth—and exposes subcommands depstat stats, depstat graph, depstat cycle and depstat list. it generates a graph.dot / dag.svg to visualize chains, reports exact dependency chain changes on PRs that touch go.mod go.sum or vendor, and runs as periodic and pre-merge prow job checks to show diffs (one example PR removed 16 dependencies).
AI-written summary · about
chapters (16)
- 0:00Intro
- 0:40Overview
- 1:33What Are Dependencies?
- 2:33Go and Dependencies
- 3:07A Simple 'go.mod File
- 4:30Why Should You Care?
- 6:32The Problems
- 7:24Enter depstat
- 7:53depstat stats
- 9:54A Dependency Can Be Both Direct And Transitive
- 11:37depstat graph
- 13:33depstat cycles
- 14:31How do we use it?
- 15:30Periodic Job
- 16:26Presubmit Job
- 17:00How I Got Started
related talks
28mFinding Dependable Go Packages
26mFinding Dependable Go Packages
29mA History of Dependency Management: 1.0 to Workspaces
38mUsing Go Modules in everyday life
24m"Finding Dependable Go Packages"
22mIt depends: A dialog about dependencies
38mDependency Management: The Cause of—and Solution to—All Supply...
16mTools for working with Go Code