dependency-management

Analyze, optimize, and audit project dependencies for security and conflicts.

4|Updated Jan 15, 2026
One-click install
npx skills add https://github.com/mgd34msu/goodvibes-gemini --skill dependency-management-mgd34msu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dependency-management
Source: https://github.com/mgd34msu/goodvibes-gemini/tree/main/skills/dependency-management
Command: npx skills add https://github.com/mgd34msu/goodvibes-gemini --skill dependency-management-mgd34msu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires depcheck, madge, license-checker, pip-audit, govulncheck, cargo-audit, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of managing project dependencies, ensuring they are clean, up-to-date, secure, and optimized for performance.

Core Features & Use Cases

  • Dependency Cleanup: Identifies and helps remove unused packages.
  • Security Auditing: Scans for known vulnerabilities and license compliance issues.
  • Version Management: Detects outdated packages and helps manage version conflicts.
  • Bundle Optimization: Analyzes dependency impact on bundle size.
  • Use Case: Before deploying to production, run a full dependency health check to identify and fix security vulnerabilities, remove unused packages, and ensure all dependencies are up-to-date with compatible versions.

Quick Start

Run a complete dependency health check for this project.

Frequently Asked Questions about dependency-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run a full dependency health check before deploying to production?

Run a complete dependency health check to identify and fix security vulnerabilities, remove unused packages, and ensure all dependencies are up-to-date with compatible versions before production deployment.

Does dependency auditing support Python and Go projects or just npm?

Dependency auditing supports JavaScript/TypeScript, Python, Go, and Rust projects, utilizing tools like npm audit, pip-audit, govulncheck, and cargo audit to scan for known vulnerabilities.

What is the best way to find and remove unused npm packages?

Dependency cleanup identifies and helps remove unused packages by analyzing your project structure, streamlining the process of ensuring your dependencies remain clean, optimized, and secure.

How do I detect circular dependencies and version conflicts in my project?

Version management detects outdated packages and helps manage version conflicts, while tools like madge analyze circular detection to optimize dependency impact on bundle size and overall performance.

Can I check license compliance issues alongside security vulnerabilities?

Security auditing scans for known vulnerabilities and license compliance issues simultaneously, ensuring your project dependencies are secure, legally compliant, and optimized for performance before release.