dependency-audit

Name: dependency-audit
Availability: InStock
Author: fefogarcia

Audit JavaScript/TypeScript dependencies for vulnerabilities, outdated packages, and license compliance.

1|Updated Feb 10, 2026

Search Tags:#security #npm #dependencies #audit #pnpm #vulnerabilities #outdated

Ready to run

npx skills add https://github.com/fefogarcia/approved-skills --skill dependency-audit-fefogarcia

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-audit
Source: https://github.com/fefogarcia/approved-skills/tree/main/skills/dependency-audit
Command: npx skills add https://github.com/fefogarcia/approved-skills --skill dependency-audit-fefogarcia

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill addresses the critical need to maintain the security and up-to-dateness of project dependencies, preventing vulnerabilities and ensuring smooth operation.

Core Features & Use Cases

Comprehensive Auditing: Scans for security vulnerabilities (CVEs, GHSA), outdated packages (major, minor, patch), and license compliance issues.
Actionable Recommendations: Provides clear, prioritized steps to fix identified problems, including automated patching for safe updates.
Use Case: Before releasing a new version of your application, use this Skill to perform a full dependency audit, identify any critical vulnerabilities, and automatically update minor and patch dependencies to ensure a secure and stable release.

Quick Start

Run a full dependency audit for the current project.

Frequently Asked Questions about dependency-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit JavaScript project dependencies for security vulnerabilities?▼

To audit JavaScript dependencies for security vulnerabilities, you can run a comprehensive scan using npm, pnpm, or yarn. This process identifies CVEs and GHSA issues, prioritizes them by severity, and provides actionable recommendations to fix or automatically patch vulnerable packages.

What is the best way to check npm and pnpm packages for outdated versions and license compliance?▼

Checking npm and pnpm packages for outdated versions and license compliance involves running a full project audit. This process evaluates your dependencies against current vulnerability databases, categorizes outdated packages by major, minor, or patch updates, and flags any license compliance issues.

Does dependency auditing work with yarn, npm, and pnpm package managers?▼

Yes, dependency auditing works with yarn, npm, and pnpm package managers. The auditing process requires access to your package manager commands and vulnerability databases to accurately scan JavaScript and TypeScript projects for security issues and outdated packages.

Can I automatically patch vulnerable dependencies during a security audit?▼

You can automatically patch vulnerable dependencies during a security audit by applying automated patching for safe updates. The audit identifies critical vulnerabilities and provides automated patching specifically for safe minor and patch dependency updates to secure your release.

When should I run a full dependency audit before releasing my application?▼

You should run a full dependency audit before releasing a new application version to identify any critical vulnerabilities and automatically update minor and patch dependencies. This ensures a secure, stable release by resolving issues proactively.