dependency-management

To audit project dependencies for security and license risks, this skill applies language-specific checks like npm audit and pip-audit to assess bundle impact and verify compliance, outputting a structured health report.

Detecting unused dependencies and circular imports is done by analyzing project dependencies across JavaScript, Python, Go, and Rust to identify unnecessary packages and resolve import cycles that complicate maintenance.

Dependency analysis works for JavaScript monorepos and polyglot codebases by applying ecosystem-specific checks across multiple languages to detect version conflicts, unused packages, and risky upgrades.

The best way to plan safe dependency upgrades is to analyze project dependencies across ecosystems to resolve version conflicts and propose safe upgrades, reducing bloat and improving build performance.

A project dependency health check report is outputted in JSON or Markdown format, containing structured findings on unused dependencies, circular imports, version conflicts, and license risks.

You can run go mod tidy and cargo-audit as part of an automated dependency cleanup process that analyzes project dependencies to shrink the install surface and prevent security risks.