Dependency Overview (Docker-compose monorepo)

Inventory script that walks a services/ directory of Docker-compose stacks and produces a Markdown or JSON report of:

• Compose images — image: references with tag/digest, classified by pinning quality (floating, implicit-latest, major, minor, semver, digest, custom)
• Build services — FROM lines from Dockerfiles, useful for spotting outdated base images
• Runtime hints — Node/Python versions inferred from .nvmrc, .node-version, .python-version, package.json engines, pyproject.toml
• Dependency manager signals — which lockfiles exist (pnpm-lock.yaml, package-lock.json, poetry.lock, uv.lock, …)
• Per-service update-check skills — <service>/.agents/skills/*-update-check/ if you've put deeper version-checking skills next to each service

It does not hit the network. It answers "what am I using?", not "what's the latest?".

Quick Start

From the repo root, with docker compose (v2) available locally: