Audit npm dependencies for vulnerabilities, outdated packages, and license compliance.
npx skills add https://github.com/me2resh/apexyard --skill audit-deps-me2resh
Please help me install this Agent Skill. Skill: audit-deps Source: https://github.com/me2resh/apexyard/tree/main/.claude/skills/audit-deps Command: npx skills add https://github.com/me2resh/apexyard --skill audit-deps-me2resh
Dependency audit reduces the risk of shipping security vulnerabilities, outdated packages, and license compliance issues hidden inside a project’s dependency tree.
Run /audit-deps path/to/project to generate a dependency report and prioritize fixes for vulnerabilities, outdated packages, and license issues.
High-intent search queries and answers about installing and using this skill.
To audit npm dependencies for vulnerabilities and license compliance, run a dependency audit on your Node.js project. This evaluates packages against allowed, restricted, and banned lists to produce a severity-aware report with actionable remediation recommendations.
Dependency triage for deployment risk is the process of scanning npm audit and npm outdated outputs to identify critical vulnerabilities, version drift, and banned software licenses before releasing a Node.js application to production.
Yes, you can check outdated npm packages to plan major version upgrades safely. By analyzing version drift with npm outdated, you can identify and schedule necessary patch, minor, or major dependency updates for your project.
Yes, dependency auditing detects supply chain security risks like abandoned packages. It flags dependency health signals including low download counts and suspected malicious packages alongside standard npm vulnerability scan results.
To enforce license compliance on restricted and banned npm packages, compare your project's dependency tree against predefined allowed, restricted, and banned license lists during an audit to prevent accidental policy violations.
j0KZAudit npm, yarn, and pnpm dependencies for vulnerabilities and outdated packages.
niltonfredericoValidate .NET NuGet dependencies against security policies and approved libraries.
jassicsReview and secure CI/CD pipelines with automated security scanning gates.
harnessAutomate container image scan step insertion into Harness pipelines.
