One-click install
npx skills add https://github.com/kirti/react-ai-skills --skill dependency-governance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dependency-governance
Source: https://github.com/kirti/react-ai-skills/tree/main/dependency-governance
Command: npx skills add https://github.com/kirti/react-ai-skills --skill dependency-governance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires xlsx, semver, and includes references (resource) components.

What problem does it solve?

Enterprise teams struggle to keep Node.js projects secure and compliant as dependencies drift and CVEs emerge. This skill provides a policy-driven automation framework to audit, upgrade, and remediate npm dependencies in line with Excel-based governance.

Core Features & Use Cases

  • Excel policy-driven decision engine for dependency upgrades, vulnerability remediation, and lock file governance
  • Automated input collection, drift detection, upgrade planning, and auditable reporting across single or multiple repositories
  • Major upgrade impact analysis and rollback artifact generation to reduce production risk

Quick Start

Load the dependency policy Excel file and run the drift and audit scripts to begin governance.

Frequently Asked Questions about dependency-governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate npm dependency upgrades using an Excel policy file?

You can automate npm dependency upgrades by loading an Excel policy file to define allowed versions, then running the skill's audit and drift detection scripts to enforce those rules across your Node.js repositories.

Can I audit npm lockfile integrity and vulnerabilities across multiple repositories?

Yes, you can audit lockfile integrity and vulnerabilities across single or multiple repositories by applying Excel-based governance rules to detect drift and generate auditable risk reports.

What is the best way to plan major npm version upgrades without breaking production?

The best way to plan major npm upgrades is by performing automated code impact analysis to evaluate risks, generating rollback artifacts to ensure safe remediation and production stability.

How does Excel-based dependency governance work for Node.js projects?

Excel-based dependency governance works by using a spreadsheet as a decision engine to enforce version approvals, lockfile integrity checks, and vulnerability remediation policies across your Node.js environments.

Do I need semver and xlsx packages to run npm dependency remediation?

Yes, the skill requires the xlsx package to parse Excel policy files and the semver package to evaluate version ranges for npm dependency remediation and upgrade planning.