dep-audit

Scan Node.js, Python, Rust, and Go manifests for outdated packages, advisories, and license issues.

97|18|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/thatrebeccarae/claude-marketing --skill dep-audit-thatrebeccarae
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dep-audit
Source: https://github.com/thatrebeccarae/claude-marketing/tree/main/skills/dep-audit
Command: npx skills add https://github.com/thatrebeccarae/claude-marketing --skill dep-audit-thatrebeccarae

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cross-repository dependency health is hard to maintain; teams struggle to surface outdated packages, security advisories, and licensing conflicts across multiple repositories.

Core Features & Use Cases

  • Scans Node.js, Python, Rust, and Go manifests (package.json, pyproject.toml, Cargo.toml, go.mod) for production and development dependencies.
  • Identifies outdated packages, known advisories, and cross-repo version conflicts; generates a prioritized update plan.
  • Supports monorepos and multi-repo onboarding to align dependencies and reduce drift.

Quick Start

Run the dependency audit on a repository path to generate a health report and actionable update plan.

Frequently Asked Questions about dep-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit dependencies across multiple repositories for security advisories and version conflicts?▼

To audit dependencies across multiple repositories, scan manifests and lockfiles like package.json, pyproject.toml, Cargo.toml, and go.mod to surface outdated packages, security advisories, and cross-repo version conflicts, generating a prioritized and unified update plan.

Can I check cross-repo dependency health and identify version conflicts in a Node.js monorepo?▼

Yes, you can check cross-repo dependency health in a Node.js monorepo by parsing package.json manifests to identify version conflicts, outdated packages, and alignment opportunities, enabling a unified update plan to reduce drift.

What's the best way to generate a prioritized update plan for outdated Python and Rust packages?▼

The best way to generate a prioritized update plan for outdated Python and Rust packages is to scan pyproject.toml and Cargo.toml manifests to compare dependency versions and surface advisories, outputting an actionable update plan.

Does cross-repository dependency auditing work with Go manifests to detect licensing issues?▼

Yes, cross-repository dependency auditing works with Go manifests by parsing go.mod files to detect licensing issues, known advisories, and outdated packages, surfacing these health metrics across multiple repositories.

Why should I scan lockfiles and manifests for dependency health instead of just checking individual repos?▼

Scanning lockfiles and manifests for dependency health across multiple repositories reveals cross-repo version conflicts and alignment opportunities, making it easier to maintain unified standards and execute a cohesive update plan.

When do I need a multi-repo dependency audit to align package versions and reduce drift?▼

You need a multi-repo dependency audit when onboarding new repositories into a monorepo or struggling to maintain cross-repository dependency health, allowing you to align package versions and reduce drift with a prioritized plan.