dependency-management

Vulnerability scanning analyzes your dependency manifests across npm, pip, Maven, Gradle, and other package managers to identify known security issues. The Skill extracts dependencies, cross-references them against vulnerability databases, and outputs structured JSON reports highlighting at-risk packages and remediation steps.

License compliance validation checks all declared dependencies against your project policy, flagging incompatible or restricted licenses. The Skill processes manifests from multiple ecosystems and generates compliance reports suitable for legal review and automated CI/CD enforcement.

Safe dependency updates involve analyzing compatibility constraints, running tests after each change, and pruning unused packages to minimize breaking changes. The Skill optimizes your dependency tree across languages, recommending updates that maintain stability while addressing vulnerabilities and licensing concerns.

Dependency analysis identifies unused packages by parsing manifests and cross-referencing against your codebase. The Skill reports conflicts, redundancies, and optimization opportunities, enabling you to remove bloat and reduce attack surface across npm, pip, Maven, Gradle, and equivalent package managers.

Yes. The Skill handles npm, pip, Maven, Gradle, and other package managers simultaneously, making it suitable for polyglot and monorepo structures. It parses heterogeneous dependency manifests and outputs unified JSON reports for centralized governance across your entire codebase.