audit-dependencies

Dependency vulnerability auditing works by analyzing your project's dependency chains to detect known security flaws. This Skill executes an audit script to identify vulnerabilities and applies systematic resolution strategies, including direct dependency bumps and lockfile updates.

Fixing security vulnerabilities in complex dependency graphs requires a systematic resolution strategy encompassing direct dependency bumps, lockfile updates, and pnpm overrides. This Skill analyzes dependency chains and applies these targeted resolutions to eliminate identified threats.

Yes, pnpm is required for dependency management and overrides when using this auditing approach. The Skill relies on pnpm to execute package overrides and apply systematic resolutions to vulnerabilities detected within your codebase's dependency chains.

Yes, you can filter dependency audits by severity level. When executing the audit command, you can specify a desired severity level like 'critical' to focus the vulnerability identification and resolution process on the most pressing security issues in your codebase.

Integrating vulnerability auditing into a CI/CD pipeline involves running the audit script during the build process to catch security issues early. This Skill supports filtering by severity levels, allowing you to fail builds or trigger automated fixes based on detected dependency threats.