skills.rest
linenoize
linenoizeCOMMUNITY
Explore all skills by this author →
GitHub

dependency-doctor

Detect outdated and vulnerable dependencies and generate a prioritized update plan.

1|Updated May 18, 2026
Search Tags:#vulnerability#dependencies#migration#security audit#package manager#upgrade plan
One-click install
npx skills add https://github.com/linenoize/topia --skill dependency-doctor-linenoize
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-doctor
Source: https://github.com/linenoize/topia/tree/main/skills/dependency-doctor
Command: npx skills add https://github.com/linenoize/topia --skill dependency-doctor-linenoize

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps teams keep dependencies healthy by detecting outdated packages, security vulnerabilities, and risky major upgrades before they cause build failures or production issues.

Core Features & Use Cases

  • Automatically detects the project’s package manager across Node, Python, Rust, Go, and Ruby manifests.
  • Checks for both freshness and vulnerability risk, then ranks updates by severity and safety.
  • Produces a clear update plan with migration notes for major version changes.
  • Use it when you need to triage dependency health, prepare a sprint update list, or run a safe upgrade campaign across a codebase.

Quick Start

Ask the dependency-doctor skill to scan the repository and return a prioritized dependency health report with outdated packages, vulnerabilities, and safe update guidance.

Frequently Asked Questions about dependency-doctor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect vulnerable dependencies in my npm or pip project?▼

Detect vulnerable dependencies by scanning npm, pip, or cargo manifests to identify outdated packages, check for known security vulnerabilities, and generate a prioritized update plan with migration notes.

What is the best way to plan a major version upgrade for project dependencies?▼

The best way to plan major version upgrades is to run a breaking-change analysis on your dependency manifests, health score each package, and produce a prioritized update plan ranked by severity and safety.

Does dependency scanning work with multiple package managers like cargo and go?▼

Yes, dependency scanning works with cargo and go manifests, automatically detecting the project's package manager across Node, Python, Rust, Go, and Ruby environments to perform version comparison and health scoring.

How do I triage dependency health for a sprint update list?▼

Triage dependency health by scanning your repository manifests to check package freshness, identify security vulnerabilities, and rank updates by severity to build a safe sprint update list.

Can I get migration notes for breaking changes in outdated packages?▼

Yes, you can get migration notes for breaking changes by analyzing major version jumps in your dependency manifests, which flags risky upgrades before they cause build failures or production issues.

Related Skills

Explore More Software Engineering Skills→
rajveersingh11rajveersingh11

dependency-triage

Identifies outdated packages and CVEs in software dependencies for risk management.

Community
Intermediate
HZeroxiumHZeroxium

java-dependency-audit

Audit Maven or Gradle Java dependencies for vulnerabilities and version conflicts, then generate an upgrade plan.

Community
Advanced
RDEWAIRDEWAI
5

update-pipeline

Modify CI/CD pipeline configurations incrementally while preserving existing deployment workflows.

Official
Advanced
hiddink-aihiddink-ai
1

cve-triage

Automate CVE report triage with security analysis and remediation planning.

Official
Advanced