deps-audit

Name: deps-audit
Availability: InStock
Author: Optave

Audit npm dependencies for vulnerabilities, staleness, and license risks.

86|20|Updated Feb 21, 2026

Search Tags:#security #npm #dependencies #audit #license #health #node

Ready to run

npx skills add https://github.com/optave/ops-codegraph-tool --skill deps-audit-optave

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: deps-audit
Source: https://github.com/optave/ops-codegraph-tool/tree/main/.claude/skills/deps-audit
Command: npx skills add https://github.com/optave/ops-codegraph-tool --skill deps-audit-optave

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dependency health is critical for secure, maintainable software. This Skill audits a project’s dependencies for security vulnerabilities, staleness, unused declarations, and license risks, delivering a structured health report with actionable fixes.

Core Features & Use Cases

Phase-based analysis across npm manifests to identify vulnerabilities, outdated packages, and licensing concerns.
Generates a comprehensive health report with remediation guidance and an assessment of direct vs transitive dependencies.
Optional auto-fix workflow to apply safe updates while preserving local changes via stash when requested.

Quick Start

Run the deps-audit command at the repository root to generate the health report and optionally apply safe updates.

Frequently Asked Questions about deps-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit npm dependencies for security vulnerabilities and license risks?▼

The audit identifies unused npm dependencies by analyzing your project's manifests and code paths. It generates a health report that distinguishes between direct and transitive dependencies, flagging unused declarations and providing actionable remediation guidance.

What is the best way to check for outdated or stale Node packages in my project?▼

The best way to check for stale Node packages is running a dependency audit in the repository root. It evaluates npm manifests to identify outdated packages and generates a comprehensive health report with remediation guidance for your Node project.

Does the npm dependency audit automatically apply safe updates to vulnerable packages?▼

Yes, the npm dependency audit includes an optional auto-fix workflow to apply safe updates. When requested, it applies updates while preserving local changes via stash, ensuring your workspace remains clean during the vulnerability remediation process.

Do I need Node 20 to run a dependency health report in my repository?▼

Yes, you need Node 20 or higher to run the dependency health report. The audit must be executed in the repository root with Node 20+ to properly analyze npm manifests and capture output reports in the generated directory.