deps

Audit Go and JavaScript dependencies for vulnerabilities, outdated packages, and license issues.

5|2|Updated Dec 11, 2025

Search Tags:#security #dependencies #audit #Obsidian #JavaScript #Go #licenses

Ready to run

npx skills add https://github.com/thoreinstein/opencode-config --skill deps-thoreinstein

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: deps
Source: https://github.com/thoreinstein/opencode-config/tree/main/skill/deps
Command: npx skills add https://github.com/thoreinstein/opencode-config --skill deps-thoreinstein

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Dependency management is error-prone and time-consuming when auditing security gaps, outdated libraries, and license compliance across Go and JavaScript projects. This Skill automates the detection and reporting process, enabling teams to enforce security, compliance, and maintainability.

Core Features & Use Cases

Security analysis: identify known vulnerabilities using govulncheck and npm audit.
Update analysis: discover outdated libraries and assess upgrade effort and risk.
License compliance: verify licenses and highlight potential issues.
Obsidian reporting: generate structured audit reports stored in the vault for audit trails and remediation planning.

Quick Start

Run a full audit of your project dependencies. The tool will scan, categorize findings, and produce an Obsidian-ready report in the Dependencies folder.

Frequently Asked Questions about deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit dependencies for security vulnerabilities in Go and JavaScript projects?▼

To audit dependencies for security vulnerabilities, you can run a scan using govulncheck for Go projects and npm audit for JavaScript projects. This identifies known security issues and exports the findings into an Obsidian report.

How do I check outdated dependencies and license liabilities across my project?▼

Checking outdated dependencies and license liabilities involves scanning your project libraries to flag outdated versions and verify their license compliance. The tool categorizes these findings and generates an Obsidian-ready report in the Dependencies folder.

Can I run a security-only audit without checking for outdated libraries?▼

Yes, you can run a security-only audit without checking for outdated libraries. The tool supports full audits, security-only checks, updates-only checks, or licenses-only checks, allowing you to isolate vulnerability detection using govulncheck and npm audit.

Does dependency auditing work with both Go and JavaScript codebases?▼

Dependency auditing works with both Go and JavaScript codebases. It automatically applies the appropriate scanning tools, such as govulncheck for Go and npm audit for JavaScript, to detect vulnerabilities and license issues across both environments.

What is the best way to generate an audit trail for dependency remediation?▼

The best way to generate an audit trail for dependency remediation is to run a full audit that exports structured results to an Obsidian vault. This creates a categorized report of vulnerabilities, updates, and licenses for planning.

How does an automated dependency audit handle license compliance verification?▼

An automated dependency audit handles license compliance verification by scanning your project's libraries and highlighting potential license issues. It structures these findings alongside security and update checks within an Obsidian-ready report.