Verified:GitHub

dependency-hygiene

Enforce dependency version pinning and block builds with CVSS 7.0+ vulnerabilities.

Updated Jan 30, 2026

Search Tags:#ci/cd #package management #dependency management #vulnerability scanning #supply chain security #sbom

One-click install

npx skills add https://github.com/spallempati/AI-Studio --skill dependency-hygiene

Or copy as Structured Prompt for Agent▼

Please help me install this Agent Skill.
Skill: dependency-hygiene
Source: https://github.com/spallempati/AI-Studio/tree/main/skills/devops/dependency-hygiene
Command: npx skills add https://github.com/spallempati/AI-Studio --skill dependency-hygiene

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical risk of introducing vulnerable or unmanaged third-party dependencies into your codebase, ensuring software supply chain integrity and build reproducibility.

Core Features & Use Cases

Version Pinning Enforcement: Ensures all dependencies have fixed versions to prevent unexpected updates.
Vulnerability Scanning: Integrates with build processes to block deployments containing high-severity (CVSS ≥ 7.0) vulnerabilities.
SBOM Generation: Supports the creation of Software Bill of Materials for compliance and transparency.
Use Case: Automatically fail a CI build if a new dependency introduces a critical security vulnerability, preventing insecure code from reaching production.

Quick Start

Ensure all dependencies in the project are version-pinned and do not contain critical vulnerabilities.

Frequently Asked Questions about dependency-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I block CI builds with vulnerable dependencies?▼

How do I enforce version pinning for npm and pip packages?

How do I enforce version pinning for npm and pip packages?▼

Can I generate an SBOM for Maven and Gradle projects?

Can I generate an SBOM for Maven and Gradle projects?▼

What is the CVSS threshold for failing a build during vulnerability scanning?

What is the CVSS threshold for failing a build during vulnerability scanning?▼

Does dependency management support NuGet package managers?

Does dependency management support NuGet package managers?▼

Yes, dependency management supports NuGet alongside Maven, Gradle, npm, and pip. It enforces vulnerability standards and version pinning across these multiple package managers.