skills.rest
microsoft
microsoftOFFICIAL
Explore all skills by this author →
Website𝕏@OpenAtMicrosoftGitHub

fix-dependencies

Automate npm dependency vulnerability remediation on the current branch.

298|70|Updated Nov 4, 2020
Search Tags:#security#npm#dependencies#audit#vulnerabilities#package.json#lockfile
One-click install
npx skills add https://github.com/microsoft/powerplatform-build-tools --skill fix-dependencies
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fix-dependencies
Source: https://github.com/microsoft/powerplatform-build-tools/tree/main/.claude/skills/fix-dependencies
Command: npx skills add https://github.com/microsoft/powerplatform-build-tools --skill fix-dependencies

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill automates remediation of npm dependency vulnerabilities on the current branch, enabling secure, local fixes without origin or external CI queries.

Core Features & Use Cases

  • Automated auditing: Run npm audit to identify vulnerabilities and generate a prioritized fix list.
  • Deterministic fixes: Apply fixes through overrides, direct dependency bumps, or lockfile patches with clear provenance.
  • Use Case: A developer working on a feature branch can audit and patch dependencies locally without touching remote repositories.

Quick Start

Run npm audit on the current branch and automatically apply the first safe fix using the defined strategies.

Frequently Asked Questions about fix-dependencies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fix npm vulnerabilities locally without pushing to a remote repository?▼

You can fix npm vulnerabilities locally by running an automated audit on your current branch that applies deterministic repair strategies, such as overrides or lockfile patches, without syncing to origin.

What is the best way to patch package.json vulnerabilities found during an npm audit?▼

Patching package.json vulnerabilities is best handled by applying deterministic fixes like direct dependency bumps or overrides, ensuring clear provenance for both development and production dependencies.

Can I resolve npm security issues directly in my feature branch?▼

Yes, you can resolve npm security issues directly in your feature branch using locally scoped fixes that operate without external CI queries or origin synchronization.

How does automated lockfile patching work for production dependencies?▼

Automated lockfile patching works by applying deterministic repairs to your lockfile on the current branch, securely fixing production dependencies without requiring remote repository access.

What happens if a vulnerability cannot be fixed through a dependency bump?▼

If a vulnerability cannot be fixed through a dependency bump, the process enforces risk acceptance with documentation, ensuring the acknowledged vulnerability is properly recorded.

Does fixing npm vulnerabilities with this method affect my development dependencies?▼

Yes, fixing npm vulnerabilities with this method handles both development and production dependencies, applying necessary overrides or patches to secure your entire local branch.

Related Skills

Explore More Software Engineering Skills→
AradotsoAradotso
11

npm-security-best-practices

Harden npm, pnpm, and Bun installs against supply-chain attacks.

Official
Advanced
llama-farmllama-farm
835

commit-push-pr

Stage changes, create conventional commits, push to origin, and open a PR via gh CLI.

Official
Advanced
gkganesh12gkganesh12
1

gk-review

Audit source code against documentation and test suites for architectural drift.

Community
Advanced
AndriiklymiukAndriiklymiuk
35

autopilot

Convert build-ready tickets into draft pull requests in a supervised loop.

Community
Advanced