Universal Dependency Resolver

Resolve, Lock and audit dependencies across 18+ ecosystems (PyPI, npm, Cargo, Conda, Go, Maven, NuGet..) In one pass. CUDA-aware resolution, CVE scanning, SBOM generation, and a single cross-ecosystem lock file - with CLI, REST API, desktop app, and VS Code extension.

---

One tool for all your dependencies

• 25 Ecosystems

  ---

  Resolve dependencies across PyPI, npm, Crates.io, Go Modules, Maven, RubyGems, NuGet, Conda, APT, APK, and 17 more — all in one lock file.

  See the full list

• System-Aware

  ---

  Auto-detects OS, CPU, GPU, CUDA version. Selects the right torch+cu121 variant. ROCm and Metal supported too.

  Learn more

• Supply Chain Security

  ---

  Scan CVEs across 18 ecosystems at once. Generate SPDX/CycloneDX SBOMs. Sign lock files with Ed25519.

  Check features

• SAT-Powered Solver

  ---

  Auto-selects Z3, PubGrub, or Hybrid solver per workload. Version clustering. Per-ecosystem isolation. CUDA-aware conflict rules.

  How it works

• 26 CLI Commands

  ---

  udr lock, udr check, udr sbom, udr graph, udr diff, udr why — full toolkit for CI/CD and daily use.

  CLI reference

• 59 REST API Endpoints

  ---

  Full programmatic API with Swagger docs. Authentication, rate limiting, webhooks.

  API reference

---

Quick Start

# Install
pip install ud-resolver

# For full capacity (SAT solvers + system detection):
pip install "ud-resolver[z3,pubgrub,system]"

# Resolve packages from any ecosystem
udr resolve flask>=2.0 react@^18 serde@crates

# Lock your entire project
udr lock

# Check CVEs across all dependencies
udr check --cve

# Start the API server
udr serve --port 8000

---

By the Numbers

Metric	Value
Supported ecosystems	25 (18 resolvable + 7 query-only)
Tests passing	3803 unit + 96 integration + 392 e2e
CLI commands	26
API endpoints	59
Export formats	15
PyPI downloads

---

How It Works

flowchart LR
    A["User Request<br/><code>udr resolve flask react</code>"] --> B
    B["Fetch metadata<br/>from registry APIs"] --> C
    C["Scan system<br/>OS · GPU · CUDA · Python"] --> D
    D["SAT Solver Engine<br/>Per-eco isolation · Version clustering<br/>CUDA-aware conflict resolution"] --> E
    E["Lock / Export<br/>15 formats · udr.lock"]

    B -->|"aiohttp"| F["PyPI · npm · Crates · Maven<br/>+ 14 more registries"]
    C -->|"nvidia-smi"| G["NVIDIA · AMD · Apple Silicon"]
    D -->|"AutoSolver → Z3 / PubGrub / Hybrid"| H["Prefer newer versions<br/>Resolve CUDA variants<br/>Detect cross-eco conflicts"]

---

Components

Component	What it is	Best for
CLI	Terminal tool with 26 commands	CI/CD, scripts, ad-hoc
Python Library	Importable backend.* modules	Embedding in tools
API Server	FastAPI REST server + Swagger UI	Programmatic access
Desktop App	Standalone Electron GUI	GUI users, no terminal
Web UI	Browser-based SPA	Lightweight browser access
VS Code Extension	In-editor dependency management	Developers using VS Code

---

Get Involved

Found a bug? Open an issue
Want a feature? Suggest it
Love the tool? Star the repo

---

MIT — free for personal and commercial use.