https://github.com/bug-ops/deps-lsp

Universal LSP server for dependency management — autocomplete, version hints, and diagnostics for Cargo.toml and package.json. Supports Zed, Neovim, Helix.
https://github.com/bug-ops/deps-lsp

autocomplete cargo dependency-management go golang helix ide inlay-hints language-server lsp neovim npm rust zed

Last synced: 16 days ago
JSON representation

Universal LSP server for dependency management — autocomplete, version hints, and diagnostics for Cargo.toml and package.json. Supports Zed, Neovim, Helix.

Host: GitHub
URL: https://github.com/bug-ops/deps-lsp
Owner: bug-ops
License: mit
Created: 2025-12-21T22:28:34.000Z (3 months ago)
Default Branch: main
Last Pushed: 2026-02-16T16:34:41.000Z (22 days ago)
Last Synced: 2026-02-16T21:40:51.103Z (22 days ago)
Topics: autocomplete, cargo, dependency-management, go, golang, helix, ide, inlay-hints, language-server, lsp, neovim, npm, rust, zed
Language: Rust
Homepage: https://bug-ops.github.io/deps-lsp/
Size: 3.32 MB
Stars: 12
Watchers: 1
Forks: 0
Open Issues: 0
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md

Awesome Lists containing this project

README

          # deps-lsp

[![Crates.io](https://img.shields.io/crates/v/deps-lsp)](https://crates.io/crates/deps-lsp)

[![docs.rs](https://img.shields.io/docsrs/deps-lsp)](https://docs.rs/deps-lsp)

[![codecov](https://codecov.io/gh/bug-ops/deps-lsp/graph/badge.svg?token=S71PTINTGQ)](https://codecov.io/gh/bug-ops/deps-lsp)

[![CI](https://img.shields.io/github/actions/workflow/status/bug-ops/deps-lsp/ci.yml?branch=main)](https://github.com/bug-ops/deps-lsp/actions)

[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)

[![MSRV](https://img.shields.io/badge/MSRV-1.89-blue)](https://blog.rust-lang.org/)

[![unsafe forbidden](https://img.shields.io/badge/unsafe-forbidden-success.svg)](https://github.com/rust-secure-code/safety-dance/)

A universal Language Server Protocol (LSP) server for dependency management across multiple package ecosystems.

## Features

- **Intelligent Autocomplete** — Package names, versions, and feature flags

- **Version Hints** — Inlay hints showing latest available versions

- **Loading Indicators** — Visual feedback during registry fetches with LSP progress support

- **Lock File Support** — Reads resolved versions from Cargo.lock, package-lock.json, poetry.lock, uv.lock, go.sum

- **Diagnostics** — Warnings for outdated, unknown, or yanked dependencies

- **Hover Information** — Package descriptions with resolved version from lock file

- **Code Actions** — Quick fixes to update dependencies

- **High Performance** — Parallel fetching with per-dependency timeouts, optimized caching

![deps-lsp in action](https://raw.githubusercontent.com/bug-ops/deps-zed/main/assets/img.png)

## Performance

deps-lsp is optimized for responsiveness:

| Operation | Latency | Notes |

| ----------- | --------- | ------- |

| Document open (50 deps) | ~150ms | Parallel registry fetching |

| Inlay hints | <100ms | Cached version lookups |

| Hover | <50ms | Pre-fetched metadata |

| Code actions | <50ms | No network calls |

> [!TIP]

>

> Lock file support provides instant resolved versions without network requests.

## Supported Ecosystems

| Ecosystem | Manifest File | Status |

| ----------- | --------------- | -------- |

| Rust/Cargo | `Cargo.toml` | ✅ Supported |

| npm | `package.json` | ✅ Supported |

| Python/PyPI | `pyproject.toml` | ✅ Supported |

| Go Modules | `go.mod` | ✅ Supported |

> [!NOTE]

>

> - PyPI support includes PEP 621, PEP 735 (dependency-groups), and Poetry formats.

> - Go support includes require, replace, and exclude directives with pseudo-version handling.

## Installation

### From crates.io

```bash

cargo install deps-lsp

```

> [!TIP]

>

> Use `cargo binstall deps-lsp` for faster installation without compilation.

### From source

```bash

git clone https://github.com/bug-ops/deps-lsp

cd deps-lsp

cargo install --path crates/deps-lsp

```

### Pre-built binaries

Download from [GitHub Releases](https://github.com/bug-ops/deps-lsp/releases/latest):

| Platform | Architecture | Binary |

| ---------- | -------------- | -------- |

| Linux | x86_64 | `deps-lsp-x86_64-unknown-linux-gnu` |

| Linux | aarch64 | `deps-lsp-aarch64-unknown-linux-gnu` |

| macOS | x86_64 | `deps-lsp-x86_64-apple-darwin` |

| macOS | Apple Silicon | `deps-lsp-aarch64-apple-darwin` |

| Windows | x86_64 | `deps-lsp-x86_64-pc-windows-msvc.exe` |

| Windows | ARM64 | `deps-lsp-aarch64-pc-windows-msvc.exe` |

### Feature Flags

By default, all ecosystems are enabled. To build with specific ecosystems only:

```bash

# Only Cargo and npm support

cargo install deps-lsp --no-default-features --features "cargo,npm"

# Only Python support

cargo install deps-lsp --no-default-features --features "pypi"

```

| Feature | Ecosystem | Default |

| --------- | ----------- | ------- |

| `cargo` | Cargo.toml | ✅ |

| `npm` | package.json | ✅ |

| `pypi` | pyproject.toml | ✅ |

| `go` | go.mod | ✅ |

## Editor Setup

> [!IMPORTANT]

>

> Inlay hints must be enabled in your editor to see version indicators. See configuration for each editor below.

### Zed

Install the **Deps** extension from Zed Extensions marketplace.

Enable inlay hints in Zed settings:

```json

// settings.json

{

  "inlay_hints": {

    "enabled": true

  }

}

```

### Neovim

```lua

require('lspconfig').deps_lsp.setup({

  cmd = { "deps-lsp", "--stdio" },

  filetypes = { "toml", "json" },

})

-- Enable inlay hints (Neovim 0.10+)

vim.lsp.inlay_hint.enable(true)

```

For older Neovim versions, use [nvim-lsp-inlayhints](https://github.com/lvimuser/lsp-inlayhints.nvim).

### Helix

```toml

# ~/.config/helix/languages.toml

[[language]]

name = "toml"

language-servers = ["deps-lsp"]

[[language]]

name = "json"

language-servers = ["deps-lsp"]

[language-server.deps-lsp]

command = "deps-lsp"

args = ["--stdio"]

```

Enable inlay hints in Helix config:

```toml

# ~/.config/helix/config.toml

[editor.lsp]

display-inlay-hints = true

```

### VS Code

Install an LSP client extension and configure deps-lsp. Enable inlay hints:

```json

// settings.json

{

  "editor.inlayHints.enabled": "on"

}

```

## Configuration

Configure via LSP initialization options:

```json

{

  "inlay_hints": {

    "enabled": true,

    "up_to_date_text": "✅",

    "needs_update_text": "❌ {}"

  },

  "diagnostics": {

    "outdated_severity": "hint",

    "unknown_severity": "warning",

    "yanked_severity": "warning"

  },

  "cache": {

    "enabled": true,

    "refresh_interval_secs": 300,

    "fetch_timeout_secs": 5,

    "max_concurrent_fetches": 20

  },

  "loading_indicator": {

    "enabled": true,

    "fallback_to_hints": true,

    "loading_text": "⏳"

  },

  "cold_start": {

    "enabled": true,

    "rate_limit_ms": 100

  }

}

```

### Configuration Reference

| Section | Option | Default | Description |

| --------- | -------- | --------- | ------------- |

| `cache` | `fetch_timeout_secs` | `5` | Per-package fetch timeout (1-300 seconds) |

| `cache` | `max_concurrent_fetches` | `20` | Concurrent registry requests (1-100) |

| `loading_indicator` | `enabled` | `true` | Show loading feedback during fetches |

| `loading_indicator` | `fallback_to_hints` | `true` | Show loading in inlay hints if LSP progress unsupported |

| `loading_indicator` | `loading_text` | `"⏳"` | Text shown during loading (max 100 chars) |

> [!TIP]

>

> Increase `fetch_timeout_secs` for slower networks. The per-dependency timeout prevents slow packages from blocking others.

> [!NOTE]

>

> Cold start support ensures LSP features work immediately when your IDE restores previously opened files.

## Development

> [!IMPORTANT]

>

> Requires Rust 1.89+ (Edition 2024).

### Build

```bash

cargo build --workspace

```

### Test

```bash

# Run tests with nextest

cargo nextest run

# Run tests with coverage

cargo llvm-cov nextest

# Generate HTML coverage report

cargo llvm-cov nextest --html

```

### Lint

```bash

# Format (requires nightly for Edition 2024)

cargo +nightly fmt

# Clippy

cargo clippy --workspace -- -D warnings

# Security audit

cargo deny check

```

### Project Structure

```text

deps-lsp/

├── crates/

│   ├── deps-core/      # Shared traits, cache, generic handlers

│   ├── deps-cargo/     # Cargo.toml parser + crates.io registry

│   ├── deps-npm/       # package.json parser + npm registry

│   ├── deps-pypi/      # pyproject.toml parser + PyPI registry

│   ├── deps-go/        # go.mod parser + proxy.golang.org

│   ├── deps-lsp/       # Main LSP server

│   └── deps-zed/       # Zed extension (WASM)

├── .config/            # nextest configuration

└── .github/            # CI/CD workflows

```

### Architecture

The codebase uses a trait-based architecture with the `Ecosystem` trait providing a unified interface for all package ecosystems:

```rust

// Each ecosystem implements the Ecosystem trait

pub trait Ecosystem: Send + Sync {

    fn id(&self) -> &'static str;

    fn display_name(&self) -> &'static str;

    fn matches_uri(&self, uri: &Uri) -> bool;

    fn registry(&self) -> Arc;

    fn formatter(&self) -> Arc;

    async fn parse_manifest(&self, content: &str, uri: &Uri) -> Result;

}

// EcosystemRegistry discovers the right handler for any manifest file

let ecosystem = registry.get_for_uri(&uri);

```

### Benchmarks

Run performance benchmarks with criterion:

```bash

cargo bench --workspace

```

View HTML report: `open target/criterion/report/index.html`

## License

[MIT](LICENSE)

## Acknowledgments

Inspired by:

- [crates-lsp](https://github.com/MathiasPius/crates-lsp) — Cargo.toml LSP

- [dependi](https://github.com/filllabs/dependi) — Multi-ecosystem dependency management

- [taplo](https://github.com/tamasfe/taplo) — TOML toolkit

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Awesome

https://github.com/bug-ops/deps-lsp

Awesome Lists containing this project

README