Dependency Management for Cargo and npm

Manage Cargo and npm dependencies by adding, updating, auditing, and resolving conflicts.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/ShunsukeHayashi/miyabi-mcp-bundle --skill dependency-management-for-cargo-and-npm
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Dependency Management for Cargo and npm
Source: https://github.com/ShunsukeHayashi/miyabi-mcp-bundle/tree/main/claude-plugins/miyabi-full/skills/dependency-management
Command: npx skills add https://github.com/ShunsukeHayashi/miyabi-mcp-bundle --skill dependency-management-for-cargo-and-npm

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires cargo, npm, cargo-udeps, and includes scripts (resource) components.

What problem does it solve?

This Skill automates the complex and often error-prone process of managing dependencies for Rust (Cargo) and Node.js (npm) projects. It helps you add, update, audit, and resolve version conflicts, ensuring your projects remain secure and up-to-date.

Core Features & Use Cases

  • Cross-Platform Dependency Management: Provides commands and strategies for both Cargo and npm, covering adding, updating, and auditing.
  • Version Conflict Resolution: Offers patterns and examples for identifying and resolving common version conflicts and feature incompatibilities.
  • Security Auditing: Integrates cargo audit and npm audit to scan for known vulnerabilities in your dependency tree.
  • Use Case: You've inherited a legacy project with outdated dependencies. Use this Skill to safely update all patch and minor versions, run security audits, and resolve any resulting version conflicts, bringing the project up to modern standards.

Quick Start

Update all dependencies in the current Rust project and run a security audit.

Frequently Asked Questions about Dependency Management for Cargo and npm

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I update dependencies in Rust and Node.js projects safely?

Update dependencies by running `cargo update` for Rust projects and `npm update` for Node.js, then audit for vulnerabilities with `cargo audit` and `npm audit`. This identifies security issues before they reach production.

What's the best way to resolve version conflicts between Cargo and npm dependencies?

Version conflicts arise when transitive dependencies require incompatible versions. Identify conflicts using dependency trees (`cargo tree`, `npm ls`), then pin compatible versions or upgrade packages that support newer semver ranges.

Can I audit Rust and Node.js dependencies for security vulnerabilities in one workflow?

Yes. Run `cargo audit` to scan Rust dependencies and `npm audit` to scan Node.js dependencies, producing security reports listing known vulnerabilities, severity, and remediation steps for each ecosystem.

How do I add new dependencies to Cargo and npm projects?

Add Rust dependencies with `cargo add package-name` and Node.js dependencies with `npm install package-name`. Both update lock files and version specifications automatically.

What tools help identify unused dependencies in Rust projects?

`cargo-udeps` scans Cargo.toml and detects unused dependency declarations, helping reduce bloat and security surface area in Rust workspaces.

Why should I keep dependencies up to date in legacy projects?

Outdated dependencies accumulate security vulnerabilities, lose bug fixes, and create compatibility issues with modern tooling. Regular updates reduce risk and maintain project maintainability.