codebase-cleanup-deps-audit

To audit dependencies for security vulnerabilities and license compliance, supply your project manifests and lockfiles. The skill inventories dependencies across ecosystems, assesses vulnerability and maintenance risks, and prioritizes actionable remediation guidance.

Yes, dependency audit supports mixed repos with Node, Python, Rust, Go, Java, Ruby, and PHP. It analyzes manifests and lockfiles across these ecosystems to identify duplicated dependencies, maintenance gaps, and supply-chain exposure.

The best way to plan safe dependency upgrades for production is to analyze manifests and lockfiles for risk-based prioritization. This identifies stale dependencies and generates safe upgrade paths and mitigation suggestions.

To identify stale or duplicated dependencies across your project, analyze your dependency manifests and lockfiles. The skill inventories dependencies across ecosystems and highlights maintenance concerns and supply-chain exposure.

Risk-based prioritization for dependency remediation is determined by assessing vulnerability severity, license compliance issues, and maintenance gaps. It analyzes manifests and lockfiles to rank supply-chain exposure and plan safe upgrades.