export interface ScanDependenciesOptions {
    /** Source root to scan for imports (defaults to the manifest's directory). */
    root?: string;
    /** Annotate each vulnerable package with whether it is imported in source. Default true. */
    reachability?: boolean;
}
export declare function scanDependencies(manifestPath: string, format?: "markdown" | "json", opts?: ScanDependenciesOptions): Promise<string>;