What problem does it solve? Node.js and TypeScript projects accumulate vulnerable, outdated, dead, and license-incompatible dependencies over time, while internal module coupling and circular imports silently degrade architecture. This Skill runs a structured, read-only audit that scores 11 dimensions of dependency health and produces a graded report with a prioritized remediation roadmap. ## Core Features & Use Cases - 11-dimension scoring: Covers supply-chain CVEs, typosquatting and dependency-confusion integrity checks, freshness, dead dependencies, license compliance, bundle weight, circular dependencies, coupling metrics, architecture boundary violations, barrel file health, and change coupling from git history. - Critical gates: Findings such as exploit-grade CVEs, GPL in production, runtime circular dependencies, secrets leaked to client bundles, or confirmed typosquats trigger an automatic FAIL regardless of the numeric score. - Tiered tooling with graceful degradation: Uses npm/pnpm/yarn/bun built-ins first, then npx tools like knip, dependency-cruiser, madge, and license-checker, falling back to grep-based analysis when tools are unavailable. - Use Case: Before a release, run a full audit on a monorepo to get a letter grade, a "Delete These Tomorrow" list of removable dependencies, and a remediation roadmap sorted by effort. ## Quick Start Ask the AI to run a full dependency audit on this project and report the score, critical findings, and unused dependencies.
