dependency-hygiene

What problem does it solve?

This Skill addresses the critical risk of introducing vulnerable or unmanaged third-party dependencies into your codebase, ensuring software supply chain integrity and build reproducibility.

Core Features & Use Cases

• Version Pinning Enforcement: Ensures all dependencies have fixed versions to prevent unexpected updates.
• Vulnerability Scanning: Integrates with build processes to block deployments containing high-severity (CVSS ≥ 7.0) vulnerabilities.
• SBOM Generation: Supports the creation of Software Bill of Materials for compliance and transparency.
• Use Case: Automatically fail a CI build if a new dependency introduces a critical security vulnerability, preventing insecure code from reaching production.

Quick Start

Ensure all dependencies in the project are version-pinned and do not contain critical vulnerabilities.