Audit npm, yarn, and pnpm dependencies for security risks and outdated packages.
npx skills add https://github.com/howells/arc --skill deps-howells
Please help me install this Agent Skill. Skill: deps Source: https://github.com/howells/arc/tree/main/skills/deps Command: npx skills add https://github.com/howells/arc --skill deps-howells
This Skill helps teams manage dependency risk by auditing a project's dependencies for security issues, outdated packages, deprecations, and modern alternatives. It generates a prioritized report and can walk through pre-computed upgrade batches with rollback support.
Run the deps skill in your project to generate a prioritized dependency audit report, review the upgrade batches, and optionally apply them with tests and rollback.
High-intent search queries and answers about installing and using this skill.
To audit project dependencies, this skill scans package.json files using Node.js tooling to generate a prioritized report identifying CVEs, outdated packages, deprecations, and modern alternatives.
Yes, you can apply precomputed dependency upgrade batches with automated test verification, triggering an automatic rollback on failure to ensure safe updates.
The dependency audit works with npm, yarn, and pnpm projects, requiring Node.js tooling and access to package.json to generate the report and rollback plan.
A precomputed upgrade batch groups dependency updates into prioritized steps, allowing you to walk through safe upgrades with test verification and manual or automated application.
To check for modern alternatives to deprecated npm packages, run the dependency audit to generate a comprehensive risk view highlighting deprecations and suggesting replacements.
n4igmeIdentify known CVEs, dependency confusion risks, and outdated packages in project dependencies.
rshadeUpgrade dependencies sequentially with test verification and rollback on failure.
OutlineDrivenOrchestrates dependency upgrades by inventorying manifests, scanning outdated or CVE-driven candidates, executing batched patches with validated tests.
RHEcosystemAppEngValidate CVE remediation by checking Lightspeed vulnerability status, updated packages, and service health.
