dependency-management

Analyze project dependencies for currency, security, licensing, and usage.

9|5|Updated Aug 8, 2025
One-click install
npx skills add https://github.com/AnExiledDev/CodeForge --skill dependency-management-anexileddev
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dependency-management
Source: https://github.com/AnExiledDev/CodeForge/tree/main/.devcontainer/plugins/devs-marketplace/plugins/code-directive/skills/dependency-management
Command: npx skills add https://github.com/AnExiledDev/CodeForge --skill dependency-management-anexileddev

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Keeps software projects healthy by continuously auditing dependencies for currency, security, licensing, and unused packages.

Core Features & Use Cases

  • Ecosystem detection across Node.js, Python, Rust, and Go projects.
  • Phase-based analysis: outdated, security, unused, conflicts, and license checks.
  • Actionable remediation guidance for upgrades, licensing, and overall governance.

Quick Start

To begin, run a dependency health check on your repository and review the generated report.

Frequently Asked Questions about dependency-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit dependencies for security vulnerabilities and outdated packages?

To audit dependencies for security vulnerabilities and outdated packages, this Skill implements a phase-based workflow that detects ecosystems, parses manifests, and reports vulnerabilities with actionable remediation guidance. It monitors currency and security across Node.js, Python, Rust, and Go projects.

What is dependency governance and how does license risk assessment work?

Dependency governance involves auditing package licenses to ensure compliance and assess risk. This Skill analyzes project dependencies to evaluate licensing across software ecosystems, providing actionable remediation guidance to maintain overall project health.

Can I check for unused dependencies in a multi-ecosystem monorepo?

Yes, you can check for unused dependencies in a multi-ecosystem monorepo. The Skill detects ecosystems across Node.js, Python, Rust, and Go, parses project manifests, and identifies unused packages during its phase-based analysis workflow.

Does dependency auditing work with Python and Rust projects?

Yes, dependency auditing works with Python and Rust projects. The Skill features automatic ecosystem detection and manifest parsing for Node.js, Python, Rust, and Go repositories, including monorepos and multi-ecosystem setups.

What's the best way to resolve package conflicts during a dependency upgrade?

The best way to resolve package conflicts during a dependency upgrade is to use a phase-based analysis workflow. This Skill identifies conflicts, checks for outdated packages, and provides actionable remediation guidance to optimize your upgrades.