Audit, update, and secure Python dependencies using uv and pyproject.toml.
npx skills add https://github.com/karimatayuta/graph-vector-rag --skill deps-karimatayuta
Please help me install this Agent Skill. Skill: deps Source: https://github.com/karimatayuta/graph-vector-rag/tree/main/.claude/skills/deps Command: npx skills add https://github.com/karimatayuta/graph-vector-rag --skill deps-karimatayuta
Dependencies drift and outdated libraries slow development and introduce security risks.
Run the dependency manager to audit, update, and pin dependencies for the project.
High-intent search queries and answers about installing and using this skill.
To audit and update Python dependencies with uv, you can list installed packages, identify outdated versions, and sync lock files. The tool provides commands for check, update, and lock operations to maintain project stability and security.
Securing Python dependencies in a pyproject.toml project involves auditing installed packages for outdated versions and applying safe, batched updates. Locking and verifying the dependency graph ensures reproducible builds and mitigates security risks from library drift.
Yes, you can add or remove Python packages safely. The process includes guardrails that prompt you before upgrades and verify compatibility, ensuring dependency graph integrity and project stability are maintained during batched operations.
Yes, the dependency manager supports safe, batched operations for updating, adding, or removing Python packages. It applies guardrails to prompt before upgrades and ensures compatibility to prevent breaking changes across your pyproject.toml configuration.
Dependency drift introduces security risks because outdated libraries contain known vulnerabilities. Auditing installed packages, identifying outdated versions, and syncing lock files keeps Python dependencies fresh, ensuring reproducible builds and maintaining project stability.
Mahaboob26Automate Python environment setup for Streamlit projects with uv.
yocxy2Automate security audits and threat modeling for software repositories.
paulojalowyjRun linters, type checkers, and security audits for Node.js and Python projects.
efiadmDetect package managers from lock files and install project dependencies.
