dependency_audit

To audit dependencies for known vulnerabilities, this Skill scans Node.js and Python projects using npm audit and pip audit, identifying critical and high-severity CVEs to generate a comprehensive security report.

Checking package license compliance involves evaluating dependency licenses for potential conflicts. This Skill reviews your pip and npm project dependencies to ensure they use acceptable, compliant licenses.

Yes, you can detect outdated packages during a dependency audit. Alongside identifying critical and high-severity vulnerabilities, the Skill flags dependencies that are not running on their latest stable versions.

Yes, this dependency audit works for both environments. It requires npm audit for Node.js projects and pip audit for Python projects to scan dependencies and evaluate license compliance.

You should run a dependency vulnerability scan before deploying a new feature or release. This ensures all new and existing npm and pip dependencies are free from critical vulnerabilities and use acceptable licenses.

Separate npm audit and pip audit scripts are required because Node.js and Python use distinct package managers. The Skill leverages both tools to accurately map vulnerabilities and evaluate licenses across different ecosystems.