dependency-guardian

What problem does it solve?

This Skill automates the complex and critical tasks of managing project dependencies, including security vulnerability scanning, orchestrating updates, and ensuring license compliance. It significantly reduces manual overhead, mitigates security risks, and keeps your codebase healthy and up-to-date.

Core Features & Use Cases

• Vulnerability Scanning: Automatically checks project dependencies against CVE databases, identifies critical risks, and provides clear remediation recommendations.
• Intelligent Updates: Detects outdated packages, classifies updates (patch, minor, major), and can apply safe updates automatically, even creating pull requests.
• License Compliance: Identifies dependency licenses, flags incompatibilities with your policy, and generates comprehensive compliance reports.
• Use Case: Run a weekly scan on your project to automatically detect new vulnerabilities, identify outdated packages, and generate a pull request with safe patch updates, ensuring your codebase remains secure and current without manual intervention.

Quick Start

Scan the current project directory for security vulnerabilities in its dependencies.