Identify and mitigate outdated dependencies and security vulnerabilities in Node.js/pnpm projects.
npx skills add https://github.com/mizchi/skills --skill dep-lib-review
Please help me install this Agent Skill. Skill: dep-lib-review Source: https://github.com/mizchi/skills/tree/main/tooling/dep-lib-review Command: npx skills add https://github.com/mizchi/skills --skill dep-lib-review
Periodic dependency review for Node.js/pnpm projects to triage outdated packages, perform security audits, and plan update batching (patch/minor/major) with a validation checklist before releases.
Run the monthly dependency review using the outlined steps to identify outdated packages, triage security findings, and apply patch/minor batch updates.
High-intent search queries and answers about installing and using this skill.
To audit outdated dependencies and security vulnerabilities in a pnpm project, run parallel checks for outdated packages and audit reports, then triage security findings using prioritization rules and bot configuration checks.
The best way to batch update Node.js dependencies before a major release is to categorize updates by patch, minor, or major versions, apply them sequentially, and validate changes using a structured checklist.
To triage security findings, apply prioritization rules to audit reports and verify whether automated dependency bots like Renovate or Dependabot are configured to manage ongoing updates.
Yes, you can use this dependency review process for monthly maintenance cycles across projects of varying sizes and dependency graphs to identify outdated packages and plan update batching.
You need a validation checklist when applying patch and minor updates to package.json to ensure changes are verified, maintain changelogs accurately, and prevent regressions before releases.
A dependency triage and risk assessment workflow for Node.js includes gathering current state via outdated and audit reports, prioritizing security findings, and planning batch updates with changelog maintenance.
emilneuraz-aiAutomate Node.js dependency management with pnpm across monorepos.
jim60105Update major GitHub Actions versions in workflow files and flag breaking changes.
as4584Manage major dependency upgrades with compatibility analysis and staged rollouts.
WrongStackDetect security vulnerabilities in code, configurations, and dependencies.
