dependency-management

To audit dependencies for security and license compliance, evaluate third-party packages to reduce attack surface and supply chain risk. This skill provides a decision framework to assess maintainers, licenses, and maintenance health across your dependency graph.

To add and lock dependencies with uv, use its reproducible, auditable workflow to manage packages. This skill guides you through using uv to add, lock, upgrade, and review dependencies while enforcing policy checks for risk controls.

Evaluating whether to add a new dependency requires assessing standard library coverage, maintainers, licenses, and project scope. This skill provides a decision framework to govern third-party packages and reduce external coupling and maintenance burden.

Yes, you can use uv to enforce maintenance health checks across the dependency lifecycle. This skill enables routine health checks, security considerations, license compliance, and risk mitigation when using uv to manage and review dependencies.

You need to govern dependencies to reduce supply chain risk when evaluating new packages or auditing existing ones. This skill helps identify and govern third-party dependencies to reduce attack surface, maintenance burden, and external coupling across projects.