dependency-update

Enforce bundle size, license, and maintainer checks for npm dependency updates.

60|8|Updated Feb 15, 2026

Search Tags:#npm #audit #semver #package-management #dependency #license-check

Ready to run

npx skills add https://github.com/albinotonnina/echos --skill dependency-update-albinotonnina

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: dependency-update
Source: https://github.com/albinotonnina/echos/tree/main/.hive/prompts/skills/dependency-update
Command: npx skills add https://github.com/albinotonnina/echos --skill dependency-update-albinotonnina

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a structured process to safely add or update npm dependencies, preventing unsafe choices and ensuring compliance.

Core Features & Use Cases

Bundle impact & licensing checks: evaluate package size, licenses, and maintainer activity before integrating.
Versioning discipline: pin exact versions for CLI tools and use caret ranges for libraries, with clear commit guidelines.
Audit & compliance: run npm install and npm audit, review changelogs, and separate chore commits for dependency updates.

Quick Start

Ask the agent to safely add or update a dependency by following the policy and validation steps.

Frequently Asked Questions about dependency-update

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I safely add or update npm dependencies without introducing bundle bloat?▼

To safely add or update npm dependencies, enforce bundle size and maintainer activity checks before integrating. This structured process evaluates package impact and uses npm audit to prevent unsafe choices and ensure compliance.

What is the best way to audit npm package licenses for compliance?▼

The best way to audit npm package licenses for compliance is to run npm install and npm audit during dependency updates. This process evaluates package licenses and maintainer activity, documenting policy adherence to ensure reproducible builds.

Should I pin exact npm versions or use caret ranges for library updates?▼

You should pin exact npm versions for CLI tools and use caret ranges for libraries when updating dependencies. This versioning discipline ensures reproducible builds while allowing compatible patch updates for standard project libraries.

How do I resolve npm audit vulnerabilities when updating existing packages?▼

To resolve npm audit vulnerabilities when updating existing packages, run npm install and npm audit, then review changelogs. This validates dependency changes, enforces compliance checks, and separates chore commits to document policy adherence.

Does this dependency update process check maintainer activity before integration?▼

Yes, the dependency update process checks maintainer activity before integration. It evaluates package size, licenses, and maintainer activity to safely add or update npm dependencies across projects, ensuring compliance and preventing abandoned packages.