What problem does it solve? Updating npm dependencies often mixes unrelated changes, breaks builds, or applies risky major upgrades without review. This Skill runs a controlled maintenance workflow that protects existing work, scopes updates, applies safe audit fixes, validates the repository, and optionally creates a conventional commit. ## Core Features & Use Cases - Scoped dependency updates: Applies patch and minor updates by default with npm-check-updates, and requires explicit approval before major upgrades. - Safe audit remediation: Runs npm audit with dry-run inspection, applies only non-breaking fixes, and reports remaining vulnerabilities with recommended actions. - Worktree protection and validation: Detects pre-existing changes, stashes unrelated work when authorized, synchronizes with upstream via fast-forward only, and runs the repository's test, lint, typecheck, and build scripts before committing. - Use Case: Ask the assistant to update outdated packages in an npm workspaces monorepo; it refreshes the root lockfile, fixes safe audit findings, runs validation, and commits with a build(deps) Conventional Commit. ## Quick Start Use the dependency-maintenance skill to inspect outdated packages, apply safe updates, fix audit findings, and validate this repository.
