dep-audit

Scan Node.js, Python, Rust, and Go manifests for outdated packages, advisories, and license issues.

97|18|Updated Feb 9, 2026
One-click install
npx skills add https://github.com/thatrebeccarae/claude-marketing --skill dep-audit-thatrebeccarae
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dep-audit
Source: https://github.com/thatrebeccarae/claude-marketing/tree/main/skills/dep-audit
Command: npx skills add https://github.com/thatrebeccarae/claude-marketing --skill dep-audit-thatrebeccarae

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cross-repository dependency health is hard to maintain; teams struggle to surface outdated packages, security advisories, and licensing conflicts across multiple repositories.

Core Features & Use Cases

  • Scans Node.js, Python, Rust, and Go manifests (package.json, pyproject.toml, Cargo.toml, go.mod) for production and development dependencies.
  • Identifies outdated packages, known advisories, and cross-repo version conflicts; generates a prioritized update plan.
  • Supports monorepos and multi-repo onboarding to align dependencies and reduce drift.

Quick Start

Run the dependency audit on a repository path to generate a health report and actionable update plan.

Frequently Asked Questions about dep-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit dependencies across multiple repositories for security advisories and version conflicts?

To audit dependencies across multiple repositories, scan manifests and lockfiles like package.json, pyproject.toml, Cargo.toml, and go.mod to surface outdated packages, security advisories, and cross-repo version conflicts, generating a prioritized and unified update plan.

Can I check cross-repo dependency health and identify version conflicts in a Node.js monorepo?

Yes, you can check cross-repo dependency health in a Node.js monorepo by parsing package.json manifests to identify version conflicts, outdated packages, and alignment opportunities, enabling a unified update plan to reduce drift.

What's the best way to generate a prioritized update plan for outdated Python and Rust packages?

The best way to generate a prioritized update plan for outdated Python and Rust packages is to scan pyproject.toml and Cargo.toml manifests to compare dependency versions and surface advisories, outputting an actionable update plan.

Does cross-repository dependency auditing work with Go manifests to detect licensing issues?

Yes, cross-repository dependency auditing works with Go manifests by parsing go.mod files to detect licensing issues, known advisories, and outdated packages, surfacing these health metrics across multiple repositories.

Why should I scan lockfiles and manifests for dependency health instead of just checking individual repos?

Scanning lockfiles and manifests for dependency health across multiple repositories reveals cross-repo version conflicts and alignment opportunities, making it easier to maintain unified standards and execute a cohesive update plan.

When do I need a multi-repo dependency audit to align package versions and reduce drift?

You need a multi-repo dependency audit when onboarding new repositories into a monorepo or struggling to maintain cross-repository dependency health, allowing you to align package versions and reduce drift with a prioritized plan.