dependency-doctor

Audit software dependencies and generate prioritized upgrade reports from manifest files.

Updated Jan 21, 2026
One-click install
npx skills add https://github.com/vecear/Nipponverb --skill dependency-doctor-vecear
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dependency-doctor
Source: https://github.com/vecear/Nipponverb/tree/main/.claude/skills/dependency-doctor
Command: npx skills add https://github.com/vecear/Nipponverb --skill dependency-doctor-vecear

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dependency Doctor solves the pain of brittle, insecure, and out-of-date dependencies by auditing packages and proposing safe upgrades.

Core Features & Use Cases

  • Scan manifests (package.json, requirements.txt, go.mod, Cargo.toml, etc.)
  • Identify outdated, duplicated, and heavyweight dependencies
  • Generate prioritized upgrade paths with security and maintainability insights
  • Produce a comprehensive dependency health report for stakeholders

Quick Start

Provide your project manifests (e.g., package.json, requirements.txt, go.mod, Cargo.toml) and run Dependency Doctor to generate a prioritized upgrade plan.

Frequently Asked Questions about dependency-doctor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit dependencies in a multi-language project for security and compatibility?

To audit dependencies across multiple languages, provide your project manifests like package.json, requirements.txt, go.mod, and Cargo.toml. The tool scans these files to identify security vulnerabilities, compatibility issues, and outdated packages.

What is the best way to prioritize dependency upgrades safely?

The best way to prioritize dependency upgrades safely is to generate a structured health report that ranks packages by security risk, performance impact, and maintainability, providing clear upgrade paths and safe pinning recommendations.

Can I scan requirements.txt and go.mod files to identify duplicated or heavyweight dependencies?

Yes, you can scan requirements.txt and go.mod files alongside package.json and Cargo.toml. The audit identifies duplicated packages and heavyweight dependencies to help optimize your project's performance and maintainability.

How do I generate a dependency health report for stakeholders?

To generate a dependency health report for stakeholders, run the audit on your project manifests. It produces a comprehensive report detailing outdated packages, security insights, and prioritized upgrade plans to communicate project status.

Does dependency auditing work with Cargo.toml and package.json manifests simultaneously?

Yes, dependency auditing works with Cargo.toml and package.json manifests simultaneously. It supports multi-language projects by scanning common manifest files to produce a unified, prioritized report for security and maintenance.