dependency-analyzer

Dependency analysis scans your project files (package.json, requirements.txt, go.mod, Cargo.toml, pom.xml) to detect outdated packages and security vulnerabilities. It queries package registries, compares current versions against available updates, and flags packages with known security issues so you can prioritize remediation.

Yes. The analysis examines changelogs and version histories to assess whether available updates contain breaking changes. It evaluates compatibility across your dependencies and provides migration guidance, helping you plan safe updates without disrupting your application.

Dependency analysis works with Node.js (package.json), Python (requirements.txt), Go (go.mod), Rust (Cargo.toml), and Java/Maven (pom.xml) projects. It locates and reads dependency files in each ecosystem to generate unified security and update reports.

The Skill automatically scans project dependencies to identify security vulnerabilities and generate audit reports. It integrates with package registries to continuously monitor for newly disclosed vulnerabilities, eliminating manual checks and reducing the window where outdated packages pose security risks.

A dependency health report identifies outdated packages, lists security vulnerabilities with severity levels, flags breaking changes in available updates, assesses compatibility, and provides recommended update strategies. This gives you a complete view of dependency status and actionable next steps.