dependency-inventory

Extract and catalog project dependencies from package manifests and lock files.

Updated May 6, 2026

Search Tags:#project management #package management #dependency analysis #inventory #dependency inventory

Ready to run

npx skills add https://github.com/crgarcia12/compy --skill dependency-inventory-crgarcia12

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-inventory
Source: https://github.com/crgarcia12/compy/tree/main/.github/skills/dependency-inventory
Command: npx skills add https://github.com/crgarcia12/compy --skill dependency-inventory-crgarcia12

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill generates a comprehensive inventory of project dependencies, providing an accurate catalog without the complexity of vulnerability scanning or upgrade recommendations.

Core Features & Use Cases

Complete Dependency Inventory: Extracts all dependencies with versions and relationships.
No CVE Scanning: Focuses on factual cataloging without security assessments.
Use Case: Before a migration, modernization, or audit, use this Skill to ensure you have a complete picture of all dependencies in your project.

Quick Start

Generate a dependency inventory for your project by running the 'dependency-inventory' skill on the project root directory.

Frequently Asked Questions about dependency-inventory

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I extract a complete dependency inventory from package manifests and lock files?▼

To generate a dependency inventory, run the skill on your project root directory to automatically extract and catalog all dependencies, versions, and relationships from your package manifests and lock files.

Can I catalog project dependencies for an audit without running a vulnerability scan?▼

Yes, you can catalog project dependencies for an audit without vulnerability scanning by using this skill to extract factual version and relationship data without performing security assessments or CVE checks.

What is the best way to prepare for a migration by listing all project dependencies?▼

The best way to prepare for a migration is to automate dependency extraction from your lock files, producing a complete catalog of all project dependencies and relationships to ensure nothing is missed.

Do I need lock files to generate a dependency inventory for modernization processes?▼

Yes, you need lock files and access to the project root directory to generate a dependency inventory, as the extraction process relies on these manifests to accurately map all dependency relationships.

Does this dependency inventory tool provide upgrade recommendations or CVE scanning?▼

No, this dependency inventory tool does not provide upgrade recommendations or CVE scanning, focusing strictly on factual cataloging of dependencies and versions without security assessments or modernization advice.