dep-health

Audit npm dependencies for vulnerabilities, outdated packages, and license compliance.

1|Updated Mar 18, 2026
One-click install
npx skills add https://github.com/lasswellt/cc-plugin-suite --skill dep-health
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dep-health
Source: https://github.com/lasswellt/cc-plugin-suite/tree/main/skills/dep-health
Command: npx skills add https://github.com/lasswellt/cc-plugin-suite --skill dep-health

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audits npm dependencies for vulnerabilities, outdated packages, and license compliance. Supports audit, upgrade, and report modes.

Core Features & Use Cases

  • Performs security and license checks across dependencies
  • Generates an actionable health report with recommendations
  • Scopes across production and development dependencies in Node.js projects

Quick Start

Run the dep-health skill at the root of your project to perform a full audit and generate a health report.

Frequently Asked Questions about dep-health

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit npm dependencies for security vulnerabilities and outdated packages?

You can audit npm dependencies for vulnerabilities and outdated packages by running the dep-health skill at the root of your Node.js project. It performs a read-only security scan and update check across both production and development dependencies.

What is the best way to check npm license compliance in a Node.js project?

The best way to check npm license compliance is to run a dependency audit tool that scans your project packages. This skill assesses license compliance across your dependency tree and generates a comprehensive health report with actionable recommendations.

Does this npm dependency audit support upgrading vulnerable packages?

Yes, this npm dependency audit supports an upgrade mode in addition to its default read-only audit mode. You can use it to identify vulnerable packages and apply necessary updates to your Node.js project dependencies.

Can I generate a health report for both production and development dependencies?

Yes, you can generate a comprehensive health report covering both production and development dependencies. The audit uses a reference template to compile security vulnerabilities, outdated packages, and license compliance issues into actionable recommendations.

What do I need to perform a security scan on my Node.js project dependencies?

You need to run the audit at the root of your Node.js project to perform a full security scan. The process operates in read-only mode by default to safely assess dependency vulnerabilities without altering your package state.

Why should I use a read-only mode for npm dependency audits?

A read-only mode for npm dependency audits prevents unintended package modifications during vulnerability and license checks. This skill defaults to read-only to safely analyze your dependency tree before you choose to apply upgrades or generate reports.