Open-Source CLI Tools

40 zero-dependency Node.js developer tools published under @lowdep on npm. No node_modules, ever — Node built-ins only, cross-platform on Windows, macOS and Linux.

• envdead — Audit environment variables — find missing, dead, and undocumented vars across JS, TS, Python, Go, Rust, Shell, Dockerfile and more.
• standup — Generate a standup report from your local git repos — what you committed yesterday and today, across every repo, in seconds.
• http-snap — Snapshot HTTP API responses and detect structural changes over time — git-friendly regression testing, CI-ready.
• git-pulse — Terminal dashboard for repository health: activity heatmap, top contributors, hot files, stale branches — all in one view.
• changelog-gen — Zero-config changelog generator from git commits — supports Conventional Commits, outputs Markdown, CI-ready.
• img-info — Read image metadata (dimensions, format, color space, EXIF) without ImageMagick or any native binary.
• dep-size — Show the real on-disk footprint of npm dependencies — sorted by size, highlights direct vs transitive.
• codestat — Count lines of code by language — a zero-dep alternative to cloc and tokei that works on Windows.
• portwatch — Live terminal dashboard monitoring local dev services — TCP ports and HTTP URLs, color-coded, auto-refreshing.
• lockcheck — Validate that your npm/yarn/pnpm lockfile is in sync with package.json — ideal as a pre-commit or CI gate.
• secret-scan — Scan files and git history for accidentally committed secrets — AWS/GCP/GitHub keys, tokens, passwords.
• req-test — File-based HTTP test runner — define requests in JSON, assert on status codes and response bodies, run like a test suite.
• csv-peek — Preview and analyze CSV/TSV files in the terminal: table view, column types, basic stats — no Python or pandas needed.
• md-check — Markdown link checker — local file references, HTTP/HTTPS URLs, and anchor IDs, with CI-friendly exit codes.
• procfile-run — Start all your dev services from a Procfile with a single command — colorized output, graceful shutdown.
• json-diff — Semantic JSON differ — shows added, removed, and changed keys with color, ignoring key order.
• todo-scan — Scan source code for TODO/FIXME/HACK/BUG comments with structured output, file grouping, and CI support.
• watch-run — Run any command when files change — cross-platform file watcher, debounced, supports glob patterns.
• http-mock — Local HTTP mock server from a JSON routes file — like json-server but with zero dependencies.
• json-schema-gen — Generate a JSON Schema (draft-07) from sample JSON — format detection, multi-sample merging, composable with json-validate.
• size-check — Assert build artifact sizes haven't exceeded limits — gzip/brotli aware, designed as a CI gate.
• git-clean-branches — Interactively clean up merged and stale local git branches — preview before deleting, safe by default.
• dot-clean — Remove .DS_Store, Thumbs.db, desktop.ini, and other OS-generated junk files recursively.
• log-tail — Cross-platform tail -f with regex filtering, multi-file support, JSON pretty-print, and color highlighting.
• yaml-lint — YAML structural validator with friendly error messages and GitHub Actions integration.
• dir-tree — Cross-platform tree command with file sizes, item counts, and .gitignore awareness.
• env-diff — Compare two .env files for missing, extra, and changed keys — secret-safe redaction, CI-friendly.
• api-bench — Lightweight HTTP load benchmark — RPS, p50/p95/p99 latencies, status code breakdown, configurable concurrency.
• port-kill — Find and kill the process listening on any port — works on Windows, macOS, and Linux with a single command.
• wait-port — Wait until a port, URL, or file is ready before continuing — ideal for CI pipelines and dev startup scripts.
• json-validate — Validate JSON data against a JSON Schema (draft-07) with readable errors — composable with json-schema-gen.
• csv2json — Convert between CSV and JSON in both directions with type inference and RFC 4180-compliant parsing.
• headers-check — Audit a URL's HTTP security headers (HSTS, CSP, X-Frame-Options, etc.) with a letter grade — runs locally.
• jwt-decode — Decode and inspect a JWT locally — header, claims, human-readable expiry — without sending it to a web tool.
• uuid-tool — Generate and inspect UUIDs — v4 random, v7 time-ordered, v3/v5 namespaced — plus decode version and timestamp.
• cron-explain — Explain a cron expression in plain English and show the next N run times — supports macros, names, and step values.
• serve-here — Static file server for the current directory — directory listings, correct MIME types, range requests, SPA mode.
• hashsum — Compute and verify file checksums (MD5, SHA-1, SHA-256, SHA-512) with a consistent cross-platform interface.
• json-flatten — Flatten nested JSON to dot-notation keys and unflatten back — lossless round-trip, handles delimiter-in-key edge cases.
• license-gen — Generate a LICENSE file (MIT, Apache-2.0, BSD, ISC, 0BSD, Unlicense) with author and year filled in — fully offline.