deprisk 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,64 @@
+# deprisk
+
+Dependency Risk Advisor for Node.js projects.
+
+Identify maintenance risks, declining trends, and deprecated packages in your project. Deprisk suggests modern alternatives to help minimize technical debt and ensure long-term stability.
+
+## Features
+
+- **Risk Assessment**: Analyze dependencies for maintenance activity, usage trends, and deprecation status.
+- **Health Scoring**: Get an overall health score for your project's dependency tree.
+- **Trend Detection**: identify packages losing community momentum before they are abandoned.
+- **Mitigation Suggestions**: Curated suggestions for modern replacements of high-risk legacy packages.
+- **CI/CD Integration**: JSON output for automated build pipeline checks.
+
+## Installation
+
+Install globally via npm:
+
+```bash
+npm install -g deprisk
+```
+
+Or run directly with npx:
+
+```bash
+npx deprisk scan .
+```
+
+## Usage
+
+### Scan for Dependency Risk
+
+Analyze the current project to see health scores and risk levels.
+
+```bash
+deprisk scan .
+```
+
+To output results in JSON format for automation:
+
+```bash
+deprisk scan . --json
+```
+
+### Get Migration Suggestions
+
+Get recommended modern alternatives for declining or deprecated packages.
+
+```bash
+deprisk suggest .
+```
+
+## How It Works
+
+Deprisk evaluates risk factors by pulling real-time data from the npm registry and download statistics:
+
+1. **Maintenance**: Time since last update and release frequency.
+2. **Deprecation**: Official deprecation status on the npm registry.
+3. **Popularity**: Weekly download volume and long-term trends.
+4. **Community Health**: Heuristics to detect if a package is gaining or losing users.
+
+## License
+
+MIT [LICENSE](./LICENSE)