codebase-cleanup-deps-audit

To audit project dependencies for security vulnerabilities and license compliance, this Skill inspects manifest files across multi-language projects, cross-references scanning databases for known CVEs, and flags legal risks. It then provides actionable remediation strategies and automated update scripts.

Supply chain security checking for third-party libraries detects typosquatting and suspicious package behavior within your project dependencies. This Skill analyzes manifests to pinpoint malicious packages, identify outdated versions, and generate automated PRs for secure updates.

Yes, dependency vulnerability scanning works with multi-language projects. The Skill inspects various dependency manifest files across different programming languages, checking them against vulnerability databases to identify known CVEs, license compliance issues, and outdated packages.

To fix outdated packages and generate remediation scripts automatically, this Skill analyzes your manifests against vulnerability databases to pinpoint old dependencies. It then provides actionable remediation strategies, including automated update scripts and PR generation.

You need to provide access to your project's dependency manifests and vulnerability databases to perform an accurate dependency audit. The Skill inspects these manifest files to detect known CVEs, analyze license compatibility, and identify outdated packages.

Yes, you can check license compliance and identify potential legal risks in your codebase dependencies. The Skill analyzes the licenses of your project dependencies for compatibility issues, providing actionable remediation strategies to resolve any compliance violations.