dependency-management

Analyze and audit project dependencies across JavaScript, Python, Go, and Rust.

Updated Apr 12, 2026

Search Tags:#security #audit #analysis #license #bundle #dependency-management

Ready to run

npx skills add https://github.com/gil00pita/lanify --skill dependency-management-gil00pita

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-management
Source: https://github.com/gil00pita/lanify/tree/main/.agents/skills/dependency-management
Command: npx skills add https://github.com/gil00pita/lanify --skill dependency-management-gil00pita

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Dependency management often leads to bloated, insecure, and hard-to-maintain projects. This skill analyzes, optimizes, and audits dependencies across languages to reduce waste, prevent license and security risks, and improve build performance.

Core Features & Use Cases

Dependency Cleanup: identify and remove unused packages to shrink the install surface.
Circular Dependency Detection: uncover and resolve import cycles that complicate maintenance.
Version Management & Upgrade Planning: propose safe upgrades and resolve conflicts across ecosystems.
Bundle & License Auditing: assess bundle impact and verify licenses for compliance.
Real-World Use Case: large JS monorepos or polyglot codebases benefit from a quarterly health check.

Quick Start

Start by running the analyzer on your project to identify unused dependencies and risky upgrades.

Frequently Asked Questions about dependency-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit project dependencies for security and license risks?▼

To audit project dependencies for security and license risks, this skill applies language-specific checks like npm audit and pip-audit to assess bundle impact and verify compliance, outputting a structured health report.

How do I detect unused dependencies and circular imports in my codebase?▼

Detecting unused dependencies and circular imports is done by analyzing project dependencies across JavaScript, Python, Go, and Rust to identify unnecessary packages and resolve import cycles that complicate maintenance.

Does dependency analysis work for both JavaScript monorepos and polyglot codebases?▼

Dependency analysis works for JavaScript monorepos and polyglot codebases by applying ecosystem-specific checks across multiple languages to detect version conflicts, unused packages, and risky upgrades.

What is the best way to plan safe dependency upgrades across different ecosystems?▼

The best way to plan safe dependency upgrades is to analyze project dependencies across ecosystems to resolve version conflicts and propose safe upgrades, reducing bloat and improving build performance.

How does a project dependency health check report look?▼

A project dependency health check report is outputted in JSON or Markdown format, containing structured findings on unused dependencies, circular imports, version conflicts, and license risks.

Can I run go mod tidy and cargo-audit through an automated dependency cleanup process?▼

You can run go mod tidy and cargo-audit as part of an automated dependency cleanup process that analyzes project dependencies to shrink the install surface and prevent security risks.