Reports

Reports turns what Depos knows about your organization into a document you can keep, print or send. Every member can open, preview and print reports. Generating, sharing, deleting and scheduling them is for org admins.

A report is a snapshot: its figures are taken once, when it is generated, and never change afterwards. A report from last quarter still shows last quarter's numbers, which is what makes it usable as a record.

Report types

• Executive summary — repositories scanned, packages in use, allowlist violations and notes as of generation, plus what changed over the last 30 or 90 days: packages added to and removed from your repositories, the packages added most often, and changes made to notes, the allowlist and the policy.
• Dependency inventory — every package in use, with the repositories that use it, its allowlist result and whether it has a note.
• Allowlist evidence — every allowlist entry with its decision, reason, scope, expiry and who last changed it; the policy mode of each ecosystem; the pull request check scope; and the violations in each added repository. It supports an audit or a self-assessment; it does not certify compliance on its own.

Generate a report

1. Open Reports and click Generate report.
2. Pick a report. It opens as a preview with your current data. For the executive summary, choose the period.
3. Click Generate report. The report is saved in the history and opens.

Nothing is saved until you click Generate report. To make a newer version of a report, open it and click Regenerate: you get a new report, and the old one stays as it was.

The Reports tab lists every generated report, newest first. Search by report name or by who generated it, or filter by type.

Download as PDF

Click Download PDF on a report (or the printer icon in the list). The report opens on its own page and your browser's print dialog appears. Choose Save as PDF. Each printed page carries the report's name and its page number.

The dependency inventory and the allowlist evidence also have CSV buttons on their tables, built from the same snapshot as the page.

Share a link

Click the link icon next to a report in the list. A link is copied that anyone can open without signing in, for 30 days. Each click makes a new link. Send it only to people who may see the report.

Deleting a report ends every link to it at once.

Schedules

The Schedules tab generates a report on a cadence and e-mails its link to the recipients:

• Weekly on a day of the week, monthly on a day of the month, or quarterly (January, April, July and October) on a day of the month.
• At an hour you pick, in UTC.
• Recipients are members of the organization, or e-mail addresses of people without an account.

Each e-mail carries a link to the report that works for 30 days. Every report a schedule generates also appears in the history, marked Scheduled. Use the switch to pause a schedule, or delete it; reports it already generated stay in the history.