arib-check-deps

To audit project dependencies for security vulnerabilities, run the skill to perform a full security audit and dependency health check on the current project. It detects CVEs across multiple ecosystems including npm, pip, and Go.

Dependency supply chain hardening identifies dangerous patterns like typosquatting, suspicious post-install scripts, and unmaintained packages. It mitigates supply chain risks by finding malicious patterns in project dependencies before they impact production.

To check license compliance for npm, pip, and Go dependencies, run a full audit to flag restrictive licenses like GPL or AGPL. This identifies legal risks to commercial projects before deployment.

Yes, you can use automated dependency scanning for continuous monitoring across diverse package ecosystems. It satisfies requirements for secure deployment gates and continuous dependency monitoring throughout the software development lifecycle.

Yes, dependency vulnerability scanning works with npm and Go modules. It detects CVEs and identifies dangerous supply chain attack vectors across multiple diverse package ecosystems including npm, pip, and Go.