dependency-management

Audit npm, yarn, and pnpm dependencies for CVEs and license compliance.

3|Updated May 5, 2026

Search Tags:#dependency management #supply chain security #license compliance #package health #CVE detection

Ready to run

npx skills add https://github.com/bryanvillamilpragma/power-Pragma --skill dependency-management-bryanvillamilpragma

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-management
Source: https://github.com/bryanvillamilpragma/power-Pragma/tree/main/skills-registry/dependency-management
Command: npx skills add https://github.com/bryanvillamilpragma/power-Pragma --skill dependency-management-bryanvillamilpragma

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

Dependency management, security, and auditing for npm, yarn, and pnpm ecosystems. This skill addresses the challenges of auditing dependencies, checking for CVEs, updating packages, and ensuring license compliance.

Core Features & Use Cases

Supply Chain Risk Mitigation: Identifies and mitigates supply chain risks associated with package dependencies.
CVE Detection & Resolution: Scans for and resolves Common Vulnerabilities and Exposures (CVEs) in packages.
License Compliance: Audits packages for license compliance, helping to avoid legal issues.
Package Health Evaluation: Evaluates the health of packages based on age, downloads, maintainers, and more.
Version Strategy: Advises on effective version management strategies to maintain package health.
Monorepo Dependency Management: Manages dependencies in monorepo environments.

Quick Start

Run the 'dependency-management' skill to automatically audit your project's dependencies for security vulnerabilities, license compliance, and health issues.

Frequently Asked Questions about dependency-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit npm dependencies for CVEs and license compliance?▼

To audit npm dependencies for CVEs and license compliance, run a dependency management scan to identify vulnerabilities, resolve Common Vulnerabilities and Exposures, and verify package health automatically.

Can I manage dependencies in a monorepo using yarn or pnpm?▼

Yes, you can manage dependencies in a monorepo using yarn or pnpm. The skill evaluates monorepo package health, detects CVEs, and advises on version strategies across the workspace.

What is supply chain risk mitigation for frontend packages?▼

Supply chain risk mitigation for frontend packages identifies and reduces security vulnerabilities within your package dependencies to prevent unauthorized access or malicious code execution in your project.

How do I evaluate package health and maintain version strategies?▼

You evaluate package health and maintain version strategies by auditing package age, downloads, and maintainers, then applying advised version management practices to sustain long-term package viability.

Does this dependency management tool work with pnpm ecosystems?▼

Yes, this dependency management tool works with pnpm ecosystems. It directly supports frontend dependency auditing, security scanning, and compliance checks across npm, yarn, and pnpm environments.

Why should I check license compliance when updating npm packages?▼

You should check license compliance when updating npm packages to avoid legal issues. Auditing packages ensures all dependencies adhere to acceptable license types before integration into your project.