Lists the dependencies of a branch
const url = 'https://gitea.example.com/api/v1/repos/example/example/security/dependencies?page=1';const options = {method: 'GET', headers: {Authorization: 'Basic <credentials>'}};
try { const response = await fetch(url, options); const data = await response.json(); console.log(data);} catch (error) { console.error(error);}curl --request GET \ --url 'https://gitea.example.com/api/v1/repos/example/example/security/dependencies?page=1' \ --header 'Authorization: Basic <credentials>'Gitea Enterprise only. This endpoint is not part of the community edition.
The component inventory the last dependency scan of the branch stored. A component that is a repository of this instance names it, when the reader can read it.
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Path Parameters
Section titled “Path Parameters”Name of the owner
Name of the repository
Query Parameters
Section titled “Query Parameters”Branch to read, the default branch when empty
Ecosystem of the components, e.g. Go
Only the components that are a repository of this instance
Part of a package name
Page number of results to return (1-based)
Number of items per page
Responses
Section titled “Responses”DependencyInventory
object
object
The lockfile the component came from
Tag or commit of that repository the version points at
Full name (owner/repo) of the repository of this instance the component is, empty for an external package and for a repository the reader cannot read
Number of components of the branch, the page holds some of them
Examplegenerated
{ "branch_name": "example", "commit_id": "example", "components": [ { "ecosystem": "example", "manifest_path": "example", "name": "example", "ref": "example", "repository": "example", "version": "example" } ], "scanned_at": "2026-04-15T12:00:00Z", "total_count": 1}APINotFound is a not found empty response