skills.rest
emanuelrechsteiner
emanuelrechsteinerCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dependency-audit

Audit npm dependencies for vulnerabilities, outdated packages, and unused packages.

Updated Aug 27, 2026
Search Tags:#security#npm#dependencies#audit#package.json#upgrades#depcheck
One-click install
npx skills add https://github.com/emanuelrechsteiner/FairSplit --skill dependency-audit-emanuelrechsteiner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-audit
Source: https://github.com/emanuelrechsteiner/FairSplit/tree/main/.claude/skills/dependency-audit
Command: npx skills add https://github.com/emanuelrechsteiner/FairSplit --skill dependency-audit-emanuelrechsteiner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit npm dependencies for security vulnerabilities, outdated packages, and unused dependencies. Provides actionable upgrade recommendations. Use to maintain healthy dependencies.

Core Features & Use Cases

  • Security vulnerabilities: run npm audit to identify issues and prioritize fixes.
  • Outdated packages: run npm outdated to surface available upgrades.
  • Unused dependencies: run depcheck to detect unused or extraneous packages.
  • Use Case: teams maintain secure and lean dependency trees across projects.

Quick Start

Run the audit workflow to scan your project dependencies and get upgrade recommendations.

Frequently Asked Questions about dependency-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit npm dependencies for security vulnerabilities and outdated packages?▼

Running npm audit identifies security vulnerabilities in your dependency tree by checking installed packages against known vulnerability databases, allowing you to prioritize fixes based on severity and available patches.

How do I find and remove unused dependencies in a Node.js project?▼

Depcheck detects unused or extraneous packages in your package.json by analyzing your codebase for actual imports, allowing you to safely remove dead dependencies and maintain a lean dependency tree.

What is the best way to plan npm package upgrades across a project?▼

Running npm outdated surfaces available package upgrades by comparing installed versions against latest registry versions, enabling structured upgrade planning and periodic maintenance across your project.

Can I use this dependency audit process in CI pipelines for periodic checks?▼

Yes, this dependency audit workflow applies to CI pipelines and periodic audits for security hardening and regular maintenance, scanning package.json files to ensure secure and lean dependency trees across projects.

Why does depcheck show a package as unused when it is actually needed?▼

Depcheck limitations include false positives for dynamically required or implicitly used packages, so manual review is needed before removing flagged dependencies to avoid breaking runtime functionality.

Related Skills

Explore More Software Engineering Skills→
jparkerwebjparkerweb
87

ai-assist-npm-update

Update outdated npm dependencies across multiple package.json files.

Community
Advanced
huseyindenizhuseyindeniz
15

deps-audit

Audit Node.js dependencies for outdated and unused packages.

Community
Intermediate
SergeiGolosSergeiGolos
1

lint-and-validate

Lint and validate Node.js and Python code with ESLint, Ruff, and type checkers.

Community
Intermediate
ZateZate
9

vulnerability-patterns

Route codebases to vulnerability-pattern detection skills for security scanning.

Community
Basic