skills.rest
EvanPluchart
EvanPluchartCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dependency-audit

Audit project dependencies for vulnerabilities, outdated packages, and license risks.

2|Updated Mar 19, 2026
Search Tags:#package manager#outdated packages#dependency audit#license compliance#security vulnerabilities#dependency weight
One-click install
npx skills add https://github.com/EvanPluchart/kyomu --skill dependency-audit-evanpluchart
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-audit
Source: https://github.com/EvanPluchart/kyomu/tree/main/.claude/skills/dependency-audit
Command: npx skills add https://github.com/EvanPluchart/kyomu --skill dependency-audit-evanpluchart

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill reduces the risk of outdated, vulnerable, or incompatible dependencies by systematically auditing project packages across common ecosystems and producing an actionable report.

Core Features & Use Cases

  • Multi–package-manager detection: Identifies pnpm, npm, yarn, or Composer based on lockfiles to target the correct audit commands.
  • Vulnerability, outdatedness, licensing, and size insights: Covers known security issues, outdated packages, license compatibility checks, and dependency weight to inform optimization.
  • Prioritized remediation plan: Ranks findings by severity (critical/high first) and provides a structured order for updates, replacements, and major-version planning.

Quick Start

Run the dependency-audit skill on your repository to generate a maintenance report covering vulnerabilities, outdated packages, licenses, and dependency size; use the full audit mode by setting the mode to --full.

Frequently Asked Questions about dependency-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit project dependencies for security vulnerabilities and license compliance?▼

To audit dependencies for security vulnerabilities and license compliance, run an audit on your repository to detect the package manager from lockfiles, execute checks, and generate a prioritized remediation plan.

What is the best way to find outdated packages across pnpm, npm, yarn, and Composer?▼

The best way to find outdated packages across pnpm, npm, yarn, and Composer is to use an audit tool that detects the ecosystem from lockfiles and executes the corresponding outdated checks to report package versions.

Does dependency auditing work automatically if I have multiple lockfiles in my codebase?▼

Dependency auditing works by identifying the specific package manager from lockfiles, allowing it to target the correct audit commands for pnpm, npm, yarn, or Composer ecosystems automatically.

How do I generate a prioritized update plan for vulnerable or heavy project dependencies?▼

Generate a prioritized update plan by running a full dependency audit that parses results into severity tiers, ranking critical vulnerabilities first and providing a structured order for updates and replacements.

When should I run a dependency audit for my web or backend codebase?▼

You should run a dependency audit during routine maintenance before releases and for ongoing security hygiene to reduce the risk of outdated, vulnerable, or incompatible packages in your codebase.

Related Skills

Explore More Software Engineering Skills→
orangehrmorangehrm
1.1k

dependencies

Manage PHP Composer and Yarn dependencies within the OrangeHRM Docker environment.

Official
Intermediate
Rune-kitRune-kit
82

dependency-doctor

Detect package managers, audit outdated dependencies, and generate prioritized update plans.

Official
Advanced
Chai-UnChai-Un

verify

Run formatting, linting, type checks, and tests before commits.

Community
Intermediate
OirancaOiranca

dependency-audit

Audit project dependencies for known vulnerabilities and outdated packages using native package managers.

Community
Intermediate