Dependency Guard

Dependency Guard is a Gradle plugin that enforces a baseline for your project dependencies to prevent accidental or unauthorized library bloat.

Dependency Guard locks down your build configuration by generating a checked-in baseline file (dependencies.txt) for every configuration. It catches transitive dependency changes immediately: if a developer adds a library that pulls in five unexpected sub-dependencies, the build fails. This tool is essential for Android and JVM teams managing complex dependency trees where a single version bump can silently increase binary size or introduce security vulnerabilities. By requiring an explicit baseline update for every change, it forces intentionality into your software supply chain.

https://github.com/dependency-guard/dependency-guard