dependency-conflict-resolver

Dependency conflict detection analyzes package requirements across npm, yarn, pnpm, pip, poetry, cargo, and composer to identify peer and transitive conflicts before installation. The Skill auto-triggers on install commands, flags version constraint mismatches, and surfaces platform or runtime incompatibilities across JavaScript, Python, Rust, and PHP ecosystems to prevent broken builds.

Safe conflicts—including patch updates and dev dependency mismatches—are auto-resolved without manual intervention. Breaking changes and risky fixes are flagged with risk classifications and migration path suggestions, requiring explicit review before application to prevent unintended behavior changes.

Yes. The Skill supports npm, yarn, pnpm, pip, poetry, cargo, and composer, detecting and resolving conflicts uniformly across JavaScript, Python, Rust, and PHP projects. Multi-manager environments benefit from consistent conflict detection and structured resolution outputs.

Security vulnerabilities are identified as part of pre-install analysis alongside peer and transitive conflicts. Vulnerable packages and their conflict sources are surfaced in structured resolution outputs with risk classifications, enabling informed decisions before installation.

Breaking changes trigger manual review prompts rather than auto-apply. The Skill provides migration path proposals and risk classifications so teams can evaluate trade-offs and decide whether to proceed, proceed with alternatives, or defer resolution.