skills.rest
derHaken
derHakenCOMMUNITY
Explore all skills by this author →
GitHub

dependency-management

Evaluate dependency additions, updates, and removals with structured criteria.

437|13|Updated Feb 25, 2026
Search Tags:#versioning#security#dependencies#audit#package-management#dependency
One-click install
npx skills add https://github.com/derHaken/SuperAntigravity --skill dependency-management-derhaken
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-management
Source: https://github.com/derHaken/SuperAntigravity/tree/main/skills/dependency-management
Command: npx skills add https://github.com/derHaken/SuperAntigravity --skill dependency-management-derhaken

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dependency decisions are risky and time-consuming; this skill guides when to add, update, audit, or replace dependencies to minimize risk and maintenance burden.

Core Features & Use Cases

  • Provide a structured evaluation framework for dependency decisions across necessity, maintenance, community, license, size, security, and alternatives.
  • Offer an update strategy and risk assessment for patch, minor, and major versions.
  • Help with removing dependencies safely and aligning with project constraints.

Quick Start

Run a dependency decision session to determine whether to add, update, audit, or remove a package.

Frequently Asked Questions about dependency-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I evaluate whether to add a new package dependency to my project?▼

To evaluate a new package dependency, assess it across seven criteria: necessity, maintenance, community, license, size, security, and alternatives. This structured framework minimizes risk and maintenance burden during package onboarding.

What is the best way to manage patch, minor, and major version updates for dependencies?▼

The best way to manage version updates is applying a targeted patch, minor, and major update strategy. This approach provides specific risk assessments for each version increment to guide safe upgrades and resolve lockfile conflicts.

How do I safely remove a library from my project dependencies?▼

To safely remove a library from your project dependencies, follow structured removal workflows with built-in safety checks. This ensures the extraction aligns with project constraints without breaking existing functionality.

How does a dependency security audit work during package onboarding?▼

A dependency security audit works by evaluating package risks across maintenance, community, license, and known vulnerabilities. This governance process identifies threats before integration and guides version upgrade decisions.

When do I need a structured framework for dependency governance?▼

You need a structured framework for dependency governance when facing risky package onboarding, security audits, lockfile conflicts, or version upgrades. It guides maintenance burden assessment and ensures safe library replacement.

Related Skills

Explore More Software Engineering Skills→
VulnetixVulnetix
9

package-search

Identify risky dependencies by matching repository ecosystems against Vulnetix VDB vulnerability data.

Official
Intermediate
yash-gargyash-garg

dart-resolve-package-conflicts

Resolve Dart package dependency conflicts blocking pub get and builds.

Community
Intermediate
GoldenWing-360GoldenWing-360
15

dependency-supply-chain

Audit dependencies and enforce lockfile hygiene to detect supply chain threats.

Official
Intermediate
SymbionicNigelSymbionicNigel

update-packages

Evaluate software package updates for safety and necessity.

Community
Advanced