Dependency Audit Skill

A security vulnerability scan for npm and Python dependencies identifies known risks in your project packages. This skill provides a systematic workflow using tools like npm, pip, and poetry to detect and remediate vulnerable libraries.

Finding and removing unused npm packages in a JavaScript project involves detecting unutilized libraries to clean up your codebase. This skill utilizes depcheck to identify unnecessary dependencies and streamlines their safe removal.

Detecting outdated packages and migrating deprecated libraries in Python requires flagging packages not on their latest versions. This skill provides migration guidance and common replacements using pip and poetry for comprehensive analysis.

Yes, this dependency audit workflow supports both pnpm and yarn package managers. It provides comprehensive analysis and remediation across multiple JavaScript ecosystems to help maintain a secure and efficient codebase.

You should perform a project dependency cleanup regularly to prevent security breaches and improve application performance. Running this audit workflow systematically addresses vulnerabilities, updates outdated packages, and removes unused dependencies.