deps

Audit outdated dependencies, check vulnerabilities, and perform safe upgrades across package managers.

23|4|Updated Sep 5, 2013

Search Tags:#security #package management #dependencies #audit #vulnerabilities #upgrade

Ready to run

npx skills add https://github.com/drn/dots --skill deps-drn

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: deps
Source: https://github.com/drn/dots/tree/main/agents/skills/deps
Command: npx skills add https://github.com/drn/dots --skill deps-drn

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the process of identifying outdated software dependencies, checking for security vulnerabilities, and safely upgrading them while ensuring that existing tests still pass.

Core Features & Use Cases

Dependency Auditing: Detects outdated packages across various languages (Go, Ruby, Node.js, Rust, Python).
Vulnerability Scanning: Checks for known security issues in dependencies.
Safe Upgrades: Upgrades dependencies incrementally (patch, minor, major) and automatically reverts if tests fail.
Use Case: Maintain the security and up-to-dateness of your project's dependencies by running a regular audit and upgrade cycle.

Quick Start

Run a full dependency audit and upgrade for the current project.

Frequently Asked Questions about deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I safely upgrade dependencies across multiple package managers?▼

To safely upgrade dependencies, this process audits outdated packages, applies incremental upgrades, and automatically reverts changes if project tests fail. It supports package managers like npm, Cargo, pip, Bundler, and Go modules.

Can I check my project for vulnerable dependencies automatically?▼

Yes, you can check for vulnerable dependencies automatically. The dependency audit scans your project for known security vulnerabilities and identifies outdated packages across supported languages like Node.js, Rust, Python, Ruby, and Go.

Does dependency auditing work with both npm and Cargo?▼

Yes, dependency auditing works with npm and Cargo, alongside Yarn, pnpm, pip, Poetry, uv, Bundler, and Go modules. It detects outdated packages and security vulnerabilities across these distinct language ecosystems.

What is the best way to upgrade major package versions without breaking tests?▼

The best way to upgrade packages without breaking tests is to perform incremental upgrades and verify them by running your project test suite. If tests fail, the system automatically reverts the failed dependency changes.

What happens if a dependency upgrade causes my test suite to fail?▼

If a dependency upgrade causes your test suite to fail, the system automatically reverts the failed changes. This ensures safe upgrades by verifying patch, minor, and major version bumps against your existing tests.