dependency-audit

To scan dependencies for security vulnerabilities, you need an auditing tool that checks your project's dependency tree against known CVE databases. This skill identifies known vulnerabilities across Python, Node.js, Rust, and Go environments to prevent potential security breaches.

Dependency health checking detects outdated packages by comparing your installed versions against latest releases. It identifies version conflicts, unused imports, and technical debt to ensure your project's third-party libraries remain stable and up-to-date.

Dependency auditing works with Python, Node.js, Rust, and Go projects. It supports auditing workflows across these multiple programming languages, requiring standard package management tools and security auditing utilities to be present in your environment.

The best way to audit dependencies before a major release is to run a comprehensive vulnerability scan and health check. This ensures all third-party libraries are up-to-date and free of critical security vulnerabilities, maintaining codebase integrity.

You need standard package management tools and security auditing utilities like pip-audit and pipdeptree installed in your environment. These dependencies are required to perform comprehensive dependency analysis and identify version conflicts in Python projects.

Checking for unused code and imports during a dependency audit addresses technical debt and security risks associated with unused packages. Identifying unused dependencies helps maintain codebase stability and reduces potential attack surfaces from unnecessary libraries.