frontend-review-deps

Audit frontend dependencies for outdated packages, CVEs, and deprecated libraries.

320|3|Updated Apr 24, 2026
One-click install
npx skills add https://github.com/mizchi/skills --skill frontend-review-deps
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: frontend-review-deps
Source: https://github.com/mizchi/skills/tree/main/frontend/review-deps
Command: npx skills add https://github.com/mizchi/skills --skill frontend-review-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Auditors check dependency health of a frontend project, focusing on freshness, CVE triage, and trend watch to reduce risk and maintenance burden.

Core Features & Use Cases

  • Freshness checks for outdated packages and breaking update procedures.
  • CVE triage with attack-vector weighting to prioritize remediation.
  • Trend watch for deprecated or abandoned libraries to plan migrations.

Quick Start

Run scripts/audit-deps.sh --repo <client-repo> and scripts/audit-trend-watch.sh --repo <client-repo> to begin.

Frequently Asked Questions about frontend-review-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit frontend dependencies for outdated packages and CVEs?

To audit frontend dependencies for outdated packages and CVEs, execute scripts/audit-deps.sh against your client repository. The tool reads raw/deps.json to identify outdated packages and triage vulnerabilities with attack-vector weighting.

What is the best way to plan migrations for deprecated frontend libraries?

Planning migrations for deprecated frontend libraries requires trend watching. Run scripts/audit-trend-watch.sh to read raw/trend-watch.json, which identifies abandoned or deprecated libraries to help structure your migration priorities.

How does CVE triage prioritize vulnerability remediation in client web apps?

CVE triage prioritizes vulnerability remediation in client web apps by applying attack-vector weighting. It evaluates identified CVEs to determine remediation priority and recommended actions, reducing overall security risk and maintenance burden.

Can I use this dependency audit on both client web apps and frontend libraries?

Yes, you can apply this dependency audit on both client web apps and frontend libraries. It is designed for environments where dependency health, vulnerability triage, and migration planning are required to reduce maintenance burden.

When do I need to run trend watch alongside a frontend dependency audit?

You need to run trend watch alongside a frontend dependency audit when checking for deprecated or abandoned libraries. While the main audit checks freshness and CVEs, trend watch specifically identifies libraries needing migration planning.