dependency-doctor

Dependency diagnosis identifies security vulnerabilities across npm, pip, and other package managers by scanning your project's dependencies. Run a vulnerability assessment to detect known CVEs and get remediation guidance for each package.

Version conflicts occur when multiple packages require incompatible versions of the same dependency. Dependency diagnosis de-duplicates conflicting versions, elevates safe alternatives, and provides step-by-step resolution to unblock builds.

Safe dependency upgrades require testing compatibility before deployment. This Skill provides upgrade guidance, identifies breaking changes, and integrates with CI pipelines to validate updates against your lockfiles and virtual environments.

Yes. Universal diagnosis works across languages and ecosystems—npm, pip, and others—using consistent commands and remediation practices that work with lockfiles, virtual environments, and CI pipelines in real-world projects.

Dependency bloat analysis detects unused or redundant packages slowing installs and increasing attack surface. Diagnosis provides actionable steps to remove unnecessary dependencies while ensuring CI builds remain stable.

Yes. Dependency diagnosis addresses license compliance by auditing dependencies across your project, identifying licensing issues, and providing prevention practices to maintain compliance as your dependency tree grows.