skills.rest
dotBeeps
dotBeepsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dependency-management

Manage dependency add, remove, update, and audit operations across Bun, uv, Cargo, Go modules, and Gradle.

Updated Mar 31, 2026
Search Tags:#uv#bun#cargo#gradle#lockfiles#dependency-management#go-modules
One-click install
npx skills add https://github.com/dotBeeps/hoard --skill dependency-management-dotbeeps
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-management
Source: https://github.com/dotBeeps/hoard/tree/main/morsels/skills/dependency-management
Command: npx skills add https://github.com/dotBeeps/hoard --skill dependency-management-dotbeeps

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Centralizes practical commands, best practices, and troubleshooting for adding, removing, updating, and auditing dependencies across Bun (Node), uv (Python), Cargo (Rust), Go modules, and Gradle (JVM), reducing mistakes that cause build failures, security issues, or CI drift.

Core Features & Use Cases

  • Cross-ecosystem commands: concise, preferred commands for common tasks in each ecosystem (add, remove, update, install, audit).
  • Workspace & lockfile hygiene: guidance for monorepos, workspaces, when to commit lockfiles, and CI frozen installs.
  • Security & conflict resolution: instructions for running audits, finding diamond dependencies, and applying resolution strategies in Gradle, Cargo, Go, Bun, and uv.
  • Use Case: Prepare a CI pipeline that installs deps deterministically, audits for vulnerabilities, and updates only approved versions across mixed-language repositories.

Quick Start

Add or remove a dependency by naming the ecosystem and package and request the assistant to update the project, regenerate the lockfile, and run the appropriate audit command.

Frequently Asked Questions about dependency-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I update dependencies across multiple ecosystems like Cargo, uv, and Bun?▼

Dependency updates across Cargo, uv, and Bun are centralized by applying preferred commands for each ecosystem, regenerating lockfiles, and running security audits to ensure version consistency and prevent CI drift.

What is the best way to configure CI frozen installs for Go modules and Gradle?▼

CI frozen installs for Go modules and Gradle are configured by enforcing version pinning, generating lockfile hygiene, and producing CI cache paths and frozen install flags to ensure deterministic builds without unexpected version resolution.

How do I resolve diamond dependency conflicts in multi-ecosystem monorepos?▼

Diamond dependency conflicts in monorepos are resolved by applying ecosystem-specific resolution strategies in Gradle, Cargo, Go, Bun, and uv, identifying overlapping transitive dependencies, and enforcing strict version pinning to prevent build failures.

When should I commit lockfiles for Python uv and Rust Cargo projects?▼

Lockfiles for Python uv and Rust Cargo projects should be committed when managing single-module or workspace projects to guarantee reproducible installs, maintain lockfile hygiene, and prevent CI drift across different environments.

How do I run security audits on dependencies in a mixed-language repository?▼

Security audits on dependencies in mixed-language repositories are executed by running ecosystem-specific audit commands across Bun, uv, Cargo, Go modules, and Gradle to detect vulnerabilities before regenerating and committing updated lockfiles.

Related Skills

Explore More Software Engineering Skills→
po4ykapo4yka
58

cargo-workflows

Manage Rust workspace crates, dependencies, and build configurations.

Community
Intermediate
theslashdojotheslashdojo

install

Manage pnpm dependencies with lockfile-respecting installs and mutations.

Official
Intermediate
randalmurphalrandalmurphal

python-packaging

Manage Python dependencies and resolve version conflicts across Poetry, Pip, and uv workflows.

Community
Advanced
AngelP17AngelP17
1

monorepo-management

Automate monorepo setup and optimization with Turborepo, Nx, and pnpm workspaces.

Community
Advanced