dependency-auditor

What problem does it solve?

This Skill addresses the critical need to identify and mitigate risks associated with project dependencies, including security vulnerabilities, outdated packages, and license incompatibilities.

Core Features & Use Cases

• Vulnerability Scanning: Detects known CVEs in direct and transitive dependencies.
• Outdated Dependency Detection: Flags packages that are significantly behind the latest major version or are unmaintained.
• License Compliance: Analyzes dependency licenses against project requirements and flags potential conflicts.
• Supply-Chain Risk Assessment: Evaluates risks related to maintainer activity, package popularity, build processes, and dependency depth.
• Use Case: Before releasing a new version of your software, use this Skill to ensure all dependencies are secure, up-to-date, and compliant with your licensing policies.

Quick Start

Run a dependency audit on the current project's package.json file.