skills.rest
mikebronner
mikebronnerCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dependency-manager

Audit project dependencies for vulnerabilities, license risks, and version conflicts.

Updated Aug 23, 2026
Search Tags:#automation#security#lockfiles#dependency#license-compliance#ecosystems#version-conflicts
One-click install
npx skills add https://github.com/mikebronner/development-settings --skill dependency-manager
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dependency-manager
Source: https://github.com/mikebronner/development-settings/tree/main/.ai/skills/dependency-manager
Command: npx skills add https://github.com/mikebronner/development-settings --skill dependency-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Consolidates and hardens dependency management across multi-language ecosystems, reducing risk from outdated or vulnerable libraries and ensuring compliant, reproducible builds.

Core Features & Use Cases

  • Dependency tree analysis and visualization
  • Security vulnerability scanning, license compliance checks, and policy-driven remediation
  • Version conflict resolution with automated updates and rollback planning
  • SBOM generation and cross-ecosystem dependency governance for large repositories

Quick Start

Provide your project manifests and I will audit dependencies and propose fixes.

Frequently Asked Questions about dependency-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit project dependencies for security vulnerabilities and license compliance?▼

To audit project dependencies for vulnerabilities and license compliance, provide your project manifests and lockfiles. The system analyzes the dependency tree, identifies risks, and proposes policy-driven remediation fixes to harden your build.

What is the best way to resolve version conflicts across multi-language ecosystems?▼

Resolving version conflicts across multi-language ecosystems requires cross-ecosystem dependency governance. The system analyzes manifests and build tools to detect conflicts, applying automated updates and rollback planning to optimize stability.

How do I generate an SBOM from project lockfiles and manifests?▼

Generating an SBOM from project lockfiles and manifests involves semantic validation of your dependency tree. The system processes your build tools to output a comprehensive Software Bill of Materials for large repositories.

Can I automate dependency updates and rollback planning for large repositories?▼

Yes, you can automate dependency updates and rollback planning for large repositories. The system applies policy-driven rules to manifests and lockfiles, enabling automated remediation and version conflict resolution across multi-language ecosystems.

Does dependency management work with multi-language ecosystems and various build tools?▼

Dependency management works across multi-language ecosystems by handling various manifests, lockfiles, and build tools. It consolidates governance, ensuring compliant and reproducible builds regardless of the language or framework in use.

Related Skills

Explore More Software Engineering Skills→
ldilovldilov
3

dependency-upgrade-safety

Assess dependency upgrade compatibility risks and generate rollback plans.

Community
Advanced
AgentSecOpsAgentSecOps
183

sca-trivy

Scan container images, dependencies, and IaC files for vulnerabilities and misconfigurations.

Official
Advanced
yalehyaleh
21

Dependency Health

Audit and prioritize software dependencies for security vulnerabilities across ecosystems.

Community
Advanced
santosomarsantosomar
1

dependency-resolver

Diagnose and resolve package dependency conflicts across npm, pip, Maven, Gradle, Cargo, and Go.

Community
Advanced