#cvescanning

We're excited to share the latest update to **LibTracker**, our lightweight dependency tracking extension for Visual Studio Code.

LibTracker gives developers a streamlined way to identify outdated packages, address known security vulnerabilities, and monitor licensing issues—all within their IDE.

**Now with Full PHP Composer Support**

Our latest release includes robust support for PHP projects using Composer. You can now:

* Track and manage Composer dependencies directly in LibTracker

* Add custom messages to your backup notes for easier tracking and differentiation

* Access improved changelog link parsing for faster insights

* Benefit from more accurate and intuitive terminology around security alerts

**Access the Extension**

Explore the tool and streamline your dependency management workflow:

[https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker](https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker)

**What’s Next**

We’re actively working on expanding support for:

* Flutter and Java (Gradle & Maven) projects

* Python environments

* Bundled dependencies to ensure the extension is fully plug-and-play

Managing dependencies is one of the most critical aspects of modern software development. With LibTracker, our VSCode extension, we’re empowering developers to maintain up-to-date, secure, and compliant applications effortlessly.

View your app's dependencies at a glance, identify outdated versions, fix security vulnerabilities, and address problematic licensing—all in one streamlined tool.

Access LibTracker here: [Visual Studio Marketplace](https://marketplace.visualstudio.com/items?itemName=windmillcode-publisher-0.lib-tracker)

New Features:

- Dependency Insights: Now see the latest available version and the recommended stable version for each dependency. The stable version aligns with your package manager's suggestions, helping you make safe updates without risking app stability.

- Enhanced Usability: Added action icons with tooltips for a more intuitive experience.

- Unused Code Detection: Identify unused packages and imports with ease.

- Edge Case Handling: Improved handling for non-registry packages, ensuring you receive as much information as possible.

Upcoming Enhancements:

- Progress Indicators: Visualize progress for checks like outdated versions, unused dependencies, and pre-fetch operations.

- Collapsible Action Icons: Streamline the interface by collapsing less frequently used tools.

- Advanced Filters: Add glob or regex-based ignore patterns for app subpath searches.

- Git-Based Backups: Explore using Git instead of the filesystem for enhanced backup reliability.

- App Detail Page Improvements:

  - Display CVE information.

  - Advanced search functionality.

  - Responsive design with card-based layouts for better readability.

Future Goals:

- SBOM Generation: Automatically create a comprehensive Software Bill of Materials for your projects.

- License and CVE Summaries: Summarize key insights using URLs or AI-generated categories.

- Subdependency Insights: Enable direct navigation to subdependencies within the license pane.