dependency-manager

To audit project dependencies for vulnerabilities, this skill scans your lockfiles and package manifests to identify known security issues, license compliance gaps, and transitive risks, then provides remediation strategies with minimal disruption to your builds.

Yes, dependency management supports multi-language ecosystems including Node, Python, Go, Rust, Java, and .NET projects, coordinating updates, conflict resolution, and vulnerability remediation across all these environments.

The best way to manage patch, minor, and major upgrades is applying structured updating strategies that provide policy guidance, ensuring reproducible builds while coordinating conflict resolution and minimizing disruption across your project ecosystems.

To migrate between package managers without breaking builds, this skill manages lockfile maintenance and coordinates version resolution across your target ecosystems, ensuring project reproducibility and security throughout the transition.

Yes, you can implement dependency policies to reduce risk and bundle size by managing lockfiles, enforcing update strategies, and performing regular vulnerability scanning to secure your software supply chain across supported languages.

Updating transitive dependencies causes conflict resolution issues when nested version requirements clash across your dependency tree; this skill coordinates updates and applies policy guidance to remediate vulnerabilities while maintaining project reproducibility.