Audit and update project dependencies across npm, pip, cargo, and go ecosystems.
npx skills add https://github.com/JansenAnalytics/claudex --skill dep-audit-jansenanalytics
Please help me install this Agent Skill. Skill: dep-audit Source: https://github.com/JansenAnalytics/claudex/tree/main/skills/dep-audit Command: npx skills add https://github.com/JansenAnalytics/claudex --skill dep-audit-jansenanalytics
Dependency drift and security risks slow development. This skill provides automated tooling to audit and update project dependencies across ecosystems, ensuring builds remain secure and up to date.
Run dep-audit at your project root to scan dependencies and generate a safe update plan.
High-intent search queries and answers about installing and using this skill.
To audit project dependencies for vulnerabilities, you need ecosystem-aware scripts that detect the runtime and apply scanning tools like pip-audit and govulncheck to identify CVEs across npm, pip, cargo, and go projects.
The best way to safely update outdated packages is to apply confirmed minor and patch updates, regenerate lockfiles, and subsequently verify builds and tests to preserve compatibility while maintaining project stability.
Yes, you can use automated dependency updates for monorepos and multi-repo setups, which provide specific guidance for resolving dependency conflicts and safely regenerating lockfiles across interconnected project packages.
To regenerate lockfiles after updating dependencies, run ecosystem-aware scripts at your project root that detect the runtime, apply the confirmed updates, and automatically regenerate the lockfile for npm, pip, or cargo ecosystems.
Yes, dependency auditing works with both JavaScript and Go projects, supporting npm/yarn/pnpm lockfile regeneration and utilizing govulncheck to scan for security vulnerabilities in Go codebases.
Galaxy-DawnManage Python dependencies and virtual environments with uv.
cajiasDiagnose and fix setup, install, test, and build failures in TypeScript monorepos from cajias/monorepo-cookiecutter.
softsparkDetect known CVEs in project dependencies using native package manager audit tools.
edfentonAudit and update Swift Package Manager dependencies with security checks.
