ripplemap

ripplemap is a powerful tool designed to help developers and teams identify and visualize cross-repository dependencies effortlessly. With ripplemap, understanding the impact of changes to shared resources like base images, Terraform modules, CI workflows, and libraries becomes intuitive and straightforward.

Key Features

• Dependency Mapping: Quickly determine which repositories will be affected when a change is made to a shared resource. This includes tracking dependencies in Dockerfiles, Terraform, GitHub Actions, Kubernetes, Helm, npm, Go, and Python without requiring extensive configuration.
• Impact Analysis: Run commands to see the impact of changes on repositories, find version discrepancies, and locate unpinned references:

  npx ripplemap impact <repo>    # Shows the potential impacts of changes to <repo>
  npx ripplemap drift            # Identifies repositories using stale versions
  npx ripplemap unpinned         # Finds references that do not specify version numbers
  

• Integration with CI/CD: Utilize a GitHub Action to automatically comment on pull requests indicating which repositories may be affected by proposed changes. This enables proactive communication within teams and helps avoid breaking changes in the workflow:

  # .github/workflows/ripplemap.yml
  name: ripplemap
  on: pull_request_target
  permissions:
    contents: read
    pull-requests: write
  jobs:
    impact:
      runs-on: ubuntu-latest
      steps:
        - uses: Zintrivious/ripplemap@v0
  

• Runtime Performance: Scanning for dependencies is quick—scans of large organizations take only seconds, and repeat scans are further optimized through caching mechanisms.

Use Cases

• Before making breaking changes: Analyze which repositories need updates and notify the relevant teams.
• During pull requests: Automate comments on pull requests to inform about potential impacts on other repositories.
• Identifying outdated dependencies: Pinpoint repositories that are lagging in version updates or using unpinned references.

Supported Formats

ripplemap parses a variety of file formats to discern dependencies. Supported files include:

• Dockerfiles
• Terraform files (*.tf)
• GitHub Actions workflows
• Kubernetes manifests
• Helm charts
• npm package.json files
• Python requirements files

Getting Started

Get started easily with just two commands—no need to clone repositories manually. Simply run:

npx ripplemap scan --org your-org  # scans organization
npx ripplemap report --open         # generates an interactive report

ripplemap streamlines the process of managing dependencies across multiple repositories, saving developers time and reducing the risk of issues stemming from outdated references. Explore the live demo to see the tool in action.