dependency-analysis

Analyze JavaScript/TypeScript frontend dependencies for unused, missing, and vulnerable packages.

6|Updated Jan 21, 2026
One-click install
npx skills add https://github.com/hubvue/skills --skill dependency-analysis-hubvue
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dependency-analysis
Source: https://github.com/hubvue/skills/tree/main/fe-analysis/dependency-analysis
Command: npx skills add https://github.com/hubvue/skills --skill dependency-analysis-hubvue

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires acorn, acorn-walk, semver, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps you manage and optimize your project's frontend dependencies, ensuring efficiency, security, and stability.

Core Features & Use Cases

  • Dependency Auditing: Identifies unused, missing, phantom, and outdated dependencies.
  • Security Vulnerability Detection: Scans for known security vulnerabilities in your packages.
  • Conflict Resolution: Detects and helps resolve version conflicts and peer dependency issues.
  • Use Case: Before a major release, use this Skill to identify any unused packages that can be removed to reduce bundle size, and to check for critical security vulnerabilities that need immediate attention.

Quick Start

Run an enhanced dependency analysis on the current project directory.

Frequently Asked Questions about dependency-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find unused and phantom dependencies in my React or Vue frontend project?

Dependency analysis identifies unused and phantom packages in your React or Vue project by comparing your codebase imports against your package manifest. This helps you remove unnecessary bloat, reduce bundle size, and resolve missing module errors.

What is the best way to detect security vulnerabilities in npm frontend dependencies?

Detecting security vulnerabilities in npm dependencies requires a dependency audit that scans installed packages against known vulnerability databases. This identifies critical security issues needing immediate attention and provides actionable recommendations to patch them.

How do I resolve peer dependency version conflicts in a JavaScript or TypeScript project?

Resolving peer dependency version conflicts requires analyzing overlapping version requirements using semver rules. This detects conflicting packages and provides actionable recommendations to align versions, ensuring stability across your JavaScript or TypeScript project.

Does this dependency analysis work with modern build tools and frameworks like Angular?

Yes, dependency analysis integrates with modern build tools and frameworks like Angular, React, and Vue. It evaluates your JavaScript and TypeScript project structure to detect outdated packages and optimize dependencies across different frontend ecosystems.

Why do I have missing dependencies causing build errors in my frontend application?

Missing dependencies occur when packages are imported in your code but absent from your package manifest. Dependency analysis detects these gaps by cross-referencing source code imports with installed npm packages, identifying exactly which modules need to be installed.