dependency-analysis

To audit project dependencies for security vulnerabilities, run the provided script at your repository root. It automatically detects your package manager, executes security audits, and produces a structured report detailing vulnerabilities and suggested fixes.

Yes, you can check outdated npm, pip, and go packages in one run. The tool auto-detects Node.js, Python, and Go environments, lists outdated packages across them, and outlines actionable upgrade paths in a single report.

The best way to plan a major dependency upgrade is to generate an audit report first. This identifies outdated packages and existing security vulnerabilities, providing actionable upgrade steps aligned with your detected package managers.

You need underlying package managers like npm, yarn, pnpm, pip, or go available in your environment. The audit script leverages tools such as pip-audit and govulncheck to execute checks and produce the dependency-audit report.

Automated package manager detection works by scanning your project root during the dependency audit. It identifies whether you are using npm, yarn, pnpm, pip, or go, then executes the appropriate security and outdated package checks for that specific environment.