DepVault

A unified package manager viewer for macOS. Scans Homebrew, npm, pip, Bun, and Cargo in parallel and shows all your dependencies in one place.

Built with Tauri v2 (Rust backend) + React + TypeScript.

Features

• Parallel scanning — all five package managers scanned concurrently with 10s timeouts
• Unified view — one table for every package across brew, npm, pip, bun, and cargo
• Filtering — filter by source, scope (global vs project), and update availability
• Inline search — instant filtering across all package names
• Local cache — results cached for 5 minutes so subsequent opens are instant
• Detail panel — click any row to see version info and where else that package appears

Supported package managers

Manager	Method	Scope
Homebrew	brew list --versions	Global
npm	npm list -g --json	Global
pip	pip3 list --format=json	Global
Bun	bun pm ls -g	Global
Cargo	Parses ~/.cargo/.crates.toml	Global

Getting started

Prerequisites

• Rust (stable)
• Bun
• macOS (Tauri v2 desktop target)

Run in development

bun install
bun tauri dev

Build for production

bun tauri build

The .app bundle will be in src-tauri/target/release/bundle/macos/.

Project structure

src-tauri/
  src/
    main.rs              Entry point
    lib.rs               Tauri commands (scan_all, refresh_scan)
    models.rs            Unified Package struct
    cache.rs             JSON file cache (~5min TTL)
    scanners/
      mod.rs             Parallel scan orchestrator
      brew.rs            Homebrew scanner
      npm.rs             npm scanner
      pip.rs             pip scanner
      bun.rs             Bun scanner
      cargo.rs           Cargo scanner
src/
  App.tsx                Layout + filtering
  types.ts               Shared TypeScript types
  hooks/usePackages.ts   IPC hook
  components/
    Sidebar.tsx          Filter panel
    PackageTable.tsx     Main table
    PackageDetail.tsx    Detail panel

Roadmap

• Project-level dependency scanning (parse package.json, Cargo.toml, requirements.txt)
• Update checking via registry APIs (npm registry, PyPI, homebrew formula JSON)
• Vulnerability scanning via OSV.dev API
• Configurable project directories to scan

License

MIT