dependency-audit

Inventory project dependencies and assess vulnerabilities, licenses, and maintenance health.

2|1|Updated Apr 13, 2026

Search Tags:#security #maintainability #audit #dependency #licenses

Ready to run

npx skills add https://github.com/dreamingechoes/dx-toolkit --skill dependency-audit-dreamingechoes

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-audit
Source: https://github.com/dreamingechoes/dx-toolkit/tree/main/templates/skills/dependency-audit
Command: npx skills add https://github.com/dreamingechoes/dx-toolkit --skill dependency-audit-dreamingechoes

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dependencies are the foundation of your software, but they come with risks. This skill provides a structured process to inventory, assess, and manage dependencies across ecosystems to keep projects secure and maintainable.

Core Features & Use Cases

Inventory direct and transitive dependencies across ecosystems
Check for known vulnerabilities, maintenance health, and licenses
Generate a prioritized remediation plan for upgrades and governance
Useful for quarterly audits, pre-release assessments, and license compliance reviews

Quick Start

Audit your project dependencies to identify risks and generate a remediation plan.

Frequently Asked Questions about dependency-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit project dependencies for security vulnerabilities and licenses?▼

To audit dependencies, you need to inventory all direct and transitive packages to assess known vulnerabilities, maintenance health, and licenses, generating a structured remediation plan to inform upgrades and governance.

What is the best way to inventory transitive dependencies across common ecosystems?▼

Inventorying transitive dependencies involves identifying all nested packages across common ecosystems to evaluate their bundle impact, maintenance health, and vulnerabilities, producing a reproducible report for governance.

Can I generate a remediation plan for dependency upgrades based on an audit?▼

Yes, you can generate a prioritized remediation plan with actionable items and owners after assessing vulnerabilities, maintenance health, and bundle impact, documenting the findings in a reproducible report.

When do I need to perform a dependency audit for license compliance?▼

You need a dependency audit for license compliance during quarterly audits, pre-release assessments, or governance reviews to identify risks across all project dependencies and document them in a structured report.

Does a dependency audit check for maintenance health and bundle impact?▼

Yes, a dependency audit assesses maintenance health and bundle impact alongside vulnerabilities and licenses across common ecosystems to provide a complete view of project risks and inform necessary upgrades.

How to document dependency findings in a reproducible report?▼

Document dependency findings by inventorying direct and transitive packages, assessing their vulnerabilities and licenses, and formatting the results into a structured remediation plan with actionable items and assigned owners.