dependency-doctor

Audit project dependencies for outdated packages, duplicates, and security vulnerabilities.

1|Updated Nov 6, 2025

Search Tags:#versioning #security #package management #optimization #dependencies #audit

Ready to run

npx skills add https://github.com/zinohome/CozyChat --skill dependency-doctor-zinohome

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-doctor
Source: https://github.com/zinohome/CozyChat/tree/main/.claude/skills/dependency-doctor
Command: npx skills add https://github.com/zinohome/CozyChat --skill dependency-doctor-zinohome

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the complexity and potential risks associated with managing project dependencies by identifying outdated packages, security vulnerabilities, and optimization opportunities.

Core Features & Use Cases

Dependency Auditing: Analyzes package manifests (e.g., package.json, requirements.txt) to detect outdated, vulnerable, or duplicate dependencies.
Security & Performance Insights: Provides prioritized reports on security risks, performance bottlenecks, and maintainability issues.
Upgrade Planning: Generates actionable upgrade paths and safe version pinning recommendations.
Use Case: When preparing for a major release, use this Skill to ensure all project dependencies are up-to-date, secure, and compatible, preventing potential runtime issues.

Quick Start

Use the dependency-doctor skill to audit the dependencies in the current project.

Frequently Asked Questions about dependency-doctor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit project dependencies for security vulnerabilities and outdated packages?▼

To audit project dependencies, this tool analyzes package manifests like package.json and requirements.txt to detect outdated packages, security vulnerabilities, and duplicate dependencies, generating a prioritized report with actionable insights.

What's the best way to find and optimize heavy libraries in my npm or pip project?▼

To optimize heavy libraries, run an audit on your package.json or requirements.txt to identify performance bottlenecks and receive maintainability insights, upgrade paths, and safe version pinning recommendations.

Does dependency auditing work with both yarn and pnpm package managers?▼

Yes, dependency auditing works with npm, yarn, pnpm, and pip. It utilizes package manager commands to perform analysis and suggest updates across these environments.

How do I plan safe version upgrades for risky dependency combinations?▼

To plan safe version upgrades, the audit detects risky version combinations and generates actionable upgrade paths with safe version pinning recommendations to prevent potential runtime issues.

Why do I need to check for duplicate dependencies before a major release?▼

Checking for duplicate dependencies is needed before a major release to ensure all packages are up-to-date, secure, and compatible, preventing potential runtime issues caused by conflicting or redundant libraries.