Features
Implemented workflows, stated plainly.
From release 1.0.0: scan, report, findings filters, action plan, history, privacy controls, safe change and exports. Each item below names what is done and what still needs on-device proof.
Scan a project folder
Select a folder; Depcura discovers manifests with ignore/symlink protection and depth, file-count and file-size limits. Progress, partial-result warnings and precise errors stay visible. Cancellation is real: the running scan stops and nothing partial is stored.
Score and findings
A deterministic health score summarises the report. Offline rules cover conflicts, duplicates, missing lockfiles, manifest/lockfile mismatch, unpinned and wildcard constraints, pre-releases, missing integrity, licence-policy gaps, toolchain compatibility and maintenance signals. Online-only rules stay inert without enrichment data.
Action plan
Findings order into a prioritised plan with remediation guidance per severity, package and ecosystem. Re-running a stored scan with online data (online_enrich_scan(scan_id)) reuses the persisted report under the same id; the frontend supplies only the scan id, and consent is still required.
Safe change with rollback
Supported JSON/TOML changes preview a unified diff, back up locally, apply atomically, validate, and roll back automatically on failure. Manual rollback remains available. This is a generic file safeguard — not per-ecosystem automated upgrades.
History on your PC
Every scan persists to local SQLite with newest-first listing, full-report retrieval, single delete and clear-all. Blocking database work runs off the async runtime with short-lived connections and a bounded busy timeout.
Exports
JSON (schema depcura.report/v1), CSV (RFC 4180, formula-guard) and self-contained escaped HTML with CSP and no scripts. PDF orchestration handles temp files, overwrite confirmation, cancellation and cleanup; automatic WebView2 rendering needs on-device verification and falls back to the native print dialog.
Honest limits
What release 1.0.0 does not claim.
- PDF auto-rendering is implemented but not yet verified on-device; the native print-dialog fallback applies.
- Safe change covers supported JSON/TOML edits with validation — not every manifest format, and not dependency upgrades.
- Online enrichment adds advisory/registry context only after consent; offline findings never imply a live feed.
- Screenshots come from the release 1.0.0 image set. This site offers no direct download — get the app from the Microsoft Store listing.