dependency-audit

To audit dependencies for security vulnerabilities across npm, pip, and cargo, this Skill parses your manifest files and runs npm audit, pip-audit, and cargo audit. It generates a unified findings report containing security issues, outdated packages, and license compliance risks.

Yes, you can check dependency license compliance and outdated packages during release preparation. The Skill identifies license issues with risk indicators, detects outdated packages with version recommendations, and outputs consolidated remediation guidance for your release workflow.

The best way to handle CVE alerts in a polyglot project is to run a unified dependency audit across your package.json, requirements.txt, and Cargo.toml files. This process scans for known vulnerabilities and generates a consolidated report with actionable remediation guidance.

Yes, the dependency audit works with package.json, requirements.txt, and Cargo.toml manifest files. It parses these files to identify dependencies, runs the respective package manager audits, and performs license checks to output a unified vulnerability and compliance report.

You generate a unified vulnerability report for npm, pip, and cargo by running the audit workflow. It parses your project manifests, executes the relevant package manager security audits, and consolidates the findings into a single report covering vulnerabilities, outdated packages, and license issues.