Audit Gradle dependencies for outdated versions and CVEs.
npx skills add https://github.com/pwittchen/varun.surf --skill check-deps-pwittchen
Please help me install this Agent Skill. Skill: check-deps Source: https://github.com/pwittchen/varun.surf/tree/main/.claude/skills/check-deps Command: npx skills add https://github.com/pwittchen/varun.surf --skill check-deps-pwittchen
This Skill analyzes a Gradle project to identify outdated dependencies, security CVEs, and unnecessary transitive dependencies.
Run the dependency audit workflow against your Gradle project to generate a comprehensive report.
High-intent search queries and answers about installing and using this skill.
You can check Gradle dependencies for CVEs by analyzing the project's dependency tree to flag high-risk libraries and propose safe upgrade paths. This process requires reading build.gradle files to enumerate direct and transitive dependencies.
Finding outdated dependencies requires auditing the Gradle build configuration to enumerate direct and transitive packages. The analysis produces a report detailing current versions alongside recommended updates for runtime and compile scopes.
Yes, Gradle dependency analysis detects transitive bloat by auditing the full dependency tree. It identifies unnecessary transitive packages and suggests build-time exclusions or BOM constraints to stabilize the dependency graph.
Yes, you can analyze both Java and Kotlin Gradle projects for dependency updates. The audit applies to any Gradle-based project, reading build files to uncover outdated versions and known security vulnerabilities.
The best way to remediate high-risk dependencies is generating a comprehensive audit report that identifies CVEs and outdated versions. This report provides recommended actions, including safe upgrade paths and build-time BOM constraints.
Using BOM constraints stabilizes your dependency graph by aligning transitive versions and preventing bloat. The audit recommends applying these build-time constraints to remediate vulnerabilities and ensure consistent dependency management.
OmicoExecute Gradle dependency checks and extract resolved versions from dependency-tree outputs.
mymx2Diagnose Gradle and Spring classpath conflicts in Kotlin applications.
rnettAudit Gradle dependency graphs and detect updates via Maven Central.
icartshAnalyze .NET solutions for code quality, security, and dependency issues.
