dependency-observation

Reproducible dependency installs require lockfile integrity verification. This Skill identifies misalignment between declared lockfiles and installed dependencies, validating fixed versions across Node.js, Python, Go, Rust, and Ruby to prevent non-reproducible builds in local, CI, and deployment environments.

Dependency drift occurs when lockfile specifications diverge from actual installed versions, often during environment setup or cross-platform deployments. This Skill detects that misalignment by observing dependency graphs and enforcing lockfile integrity through cache-free clean builds.

Yes. This Skill integrates lockfile verification into CI workflows, running minimal integration smoke tests and cache-free builds to validate fixed versions before deployment. It logs startup dependency versions and outputs dependency graphs for visibility.

Dependency observation detects breaks by performing cache-free clean builds and running minimal integration smoke tests after updates. The Skill identifies version misalignments and logs dependency changes, surfacing reproducibility issues before they reach production.

This Skill observes dependency graph changes across Node.js, Python, Go, Rust, and Ruby, applicable during dependency addition, updates, and cross-environment deployments. It validates fixed versions regardless of project structure or lockfile configuration.

Lockfile verification enforces that declared versions match installed packages; smoke testing validates that dependencies actually function together. This Skill combines both, verifying integrity and running minimal integration tests to ensure full reproducibility.