Configuration

Customize Dependi behavior through Zed settings.

Table of contents

1. Configuration Location
2. Full Configuration Example
3. Configuration Options Reference
   1. Inlay Hints
   2. Diagnostics
   3. Cache
   4. Security (Vulnerability Scanning)
   5. Ignore Patterns
   6. Private Registries
      1. Cargo Alternative Registries
      2. npm Scoped Registries
4. Cache Locations
   1. Clearing the Cache
5. Configuration Tips
   1. Offline Work
   2. Noisy Projects
   3. Security-Focused Setup
   4. Minimal UI
6. Troubleshooting Configuration
   1. Configuration Not Applying
   2. Debugging

---

Configuration Location

Configure Dependi in your Zed settings.json:

• User settings: ~/.config/zed/settings.json (Linux) or ~/Library/Application Support/Zed/settings.json (macOS)
• Project settings: .zed/settings.json in your project root

Full Configuration Example

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "inlay_hints": {
          "enabled": true,
          "show_up_to_date": true
        },
        "diagnostics": {
          "enabled": true
        },
        "cache": {
          "ttl_secs": 3600
        },
        "security": {
          "enabled": true,
          "show_in_hints": true,
          "show_diagnostics": true,
          "min_severity": "low"
        },
        "ignore": ["internal-*", "test-pkg"]
      }
    }
  }
}

Configuration Options Reference

Inlay Hints

Option	Type	Default	Description
inlay_hints.enabled	boolean	true	Enable/disable inlay hints
inlay_hints.show_up_to_date	boolean	true	Show hints for up-to-date packages

Example:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "inlay_hints": {
          "enabled": true,
          "show_up_to_date": false
        }
      }
    }
  }
}

Diagnostics

Option	Type	Default	Description
diagnostics.enabled	boolean	true	Enable/disable diagnostics for outdated dependencies

Example:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "diagnostics": {
          "enabled": true
        }
      }
    }
  }
}

Cache

Option	Type	Default	Description
cache.ttl_secs	number	3600	Cache time-to-live in seconds (1 hour default)

Example:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "cache": {
          "ttl_secs": 7200
        }
      }
    }
  }
}

The cache is stored in your system’s cache directory. Increasing TTL reduces network requests but may show stale data.

Security (Vulnerability Scanning)

Option	Type	Default	Description
security.enabled	boolean	true	Enable/disable vulnerability scanning
security.show_in_hints	boolean	true	Show vulnerability count in inlay hints
security.show_diagnostics	boolean	true	Show vulnerability diagnostics
security.min_severity	string	"low"	Minimum severity to report: low, medium, high, critical

Example:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "security": {
          "enabled": true,
          "show_in_hints": true,
          "show_diagnostics": true,
          "min_severity": "high"
        }
      }
    }
  }
}

Ignore Patterns

Option	Type	Default	Description
ignore	string[]	[]	Package names or glob patterns to ignore

Example:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "ignore": [
          "internal-*",
          "my-private-pkg",
          "@company/*"
        ]
      }
    }
  }
}

Private Registries

Configure custom registries for private packages. See Private Registries for detailed setup.

Cargo Alternative Registries

Option	Type	Description
registries.cargo.registries	object	Map of registry name to configuration
registries.cargo.registries.<name>.index_url	string	Sparse index URL (without sparse+ prefix)
registries.cargo.registries.<name>.auth	object	Optional authentication configuration
registries.cargo.registries.<name>.auth.type	string	Auth type ("env")
registries.cargo.registries.<name>.auth.variable	string	Environment variable containing the token

Example:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "registries": {
          "cargo": {
            "registries": {
              "my-registry": {
                "index_url": "https://my-registry.example.com/api/v1/crates",
                "auth": {
                  "type": "env",
                  "variable": "MY_REGISTRY_TOKEN"
                }
              }
            }
          }
        }
      }
    }
  }
}

Dependencies using an alternative registry must specify it in Cargo.toml: my-crate = { version = "0.1.0", registry = "my-registry" }. Dependencies without a registry field are fetched from crates.io. Authentication falls back to ~/.cargo/credentials.toml if not configured in LSP settings.

npm Scoped Registries

Option	Type	Description
registries.npm.url	string	Base registry URL
registries.npm.scoped	object	Scoped registry configuration

Example:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "registries": {
          "npm": {
            "url": "https://registry.npmjs.org",
            "scoped": {
              "company": {
                "url": "https://npm.company.com",
                "auth": {
                  "type": "env",
                  "variable": "COMPANY_NPM_TOKEN"
                }
              }
            }
          }
        }
      }
    }
  }
}

Scope names should not include the @ prefix. Use "company" not "@company".

Cache Locations

Dependi stores cached data in your system’s cache directory:

Platform	Location
Linux	~/.cache/dependi/cache.db
macOS	~/Library/Caches/dependi/cache.db
Windows	%LOCALAPPDATA%\dependi\cache.db

Clearing the Cache

To force refresh all package data:

# Linux
rm -rf ~/.cache/dependi/

# macOS
rm -rf ~/Library/Caches/dependi/

# Windows
rmdir /s %LOCALAPPDATA%\dependi

Then restart Zed. The cache will rebuild as you open dependency files.

Configuration Tips

Offline Work

For working offline, increase the cache TTL:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "cache": {
          "ttl_secs": 86400
        }
      }
    }
  }
}

Noisy Projects

For projects with many internal packages, use ignore patterns:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "ignore": ["@internal/*", "dev-*"]
      }
    }
  }
}

Security-Focused Setup

For strict security scanning:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "security": {
          "enabled": true,
          "show_in_hints": true,
          "show_diagnostics": true,
          "min_severity": "medium"
        }
      }
    }
  }
}

Minimal UI

For a cleaner interface showing only updates:

{
  "lsp": {
    "dependi": {
      "initialization_options": {
        "inlay_hints": {
          "enabled": true,
          "show_up_to_date": false
        }
      }
    }
  }
}

Troubleshooting Configuration

Configuration Not Applying

1. Verify JSON syntax is valid
2. Ensure settings are under the correct path:

   {
     "lsp": {
       "dependi": {
         "initialization_options": {
           // settings here
         }
       }
     }
   }
   

3. Restart Zed after configuration changes
4. Check for typos in setting names

Debugging

Run Zed with debug logging to see configuration loading:

RUST_LOG=debug zed --foreground