graph-dependency

Audit dependencies, generate SBOMs, and check license compliance for software projects.

Updated Apr 26, 2026
One-click install
npx skills add https://github.com/luissimon96/orchestration-devops-agents --skill graph-dependency
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: graph-dependency
Source: https://github.com/luissimon96/orchestration-devops-agents/tree/main/.agents/skills/graph-dependency
Command: npx skills add https://github.com/luissimon96/orchestration-devops-agents --skill graph-dependency

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates dependency management, ensuring security, compliance, and freshness scoring for all project dependencies.

Core Features & Use Cases

  • SBOM Generation: Automatically generates SBOMs for supply chain transparency.
  • License Compliance: Checks for license compatibility and OSI-approved licenses.
  • Freshness Scoring: Evaluates the freshness of dependencies based on version differences.
  • Supply Chain Analysis: Identifies supply chain risks and potential vulnerabilities.
  • Update Plan: Prioritizes updates based on risk assessment and test coverage.
  • Dependency Report: Generates comprehensive audit reports with scores and recommendations.

Quick Start

Run the graph-dependency skill to perform a full dependency audit on your project.

Frequently Asked Questions about graph-dependency

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate dependency audit and SBOM generation for my npm project?

Yes, this skill performs license compliance checks by verifying license compatibility and identifying OSI-approved licenses across your project dependencies, ensuring your software meets supply chain security requirements.

Can I generate an SBOM for supply chain transparency automatically?

Yes, this skill automatically generates an SBOM to ensure supply chain transparency. It also identifies supply chain risks and potential vulnerabilities during the dependency audit process.

What is the best way to prioritize dependency updates based on security risk?

Yes, this skill evaluates the freshness of dependencies by calculating freshness scores based on version differences, helping you identify outdated packages and maintain a secure software supply chain.

Do I need npm installed to perform a full dependency audit and compliance check?

Yes, you need npm installed along with various required tools to perform audit and compliance checks. This skill relies on npm to execute vulnerability scanning, license verification, and supply chain analysis.