maintain

Updates dependencies, applies security patches, and manages package versions on a recurring cadence.

4|Updated Mar 14, 2026
One-click install
npx skills add https://github.com/VoxTechnologies/transmute-framework --skill maintain-voxtechnologies
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: maintain
Source: https://github.com/VoxTechnologies/transmute-framework/tree/main/skills/maintain
Command: npx skills add https://github.com/VoxTechnologies/transmute-framework --skill maintain-voxtechnologies

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Outdated dependencies accumulate security vulnerabilities, miss performance improvements, and eventually create painful migration cliffs. This Skill automates recurring dependency maintenance so your codebase stays healthy without manual audit-and-update cycles. ## Core Features & Use Cases - Tiered Update Batching: Categorizes updates into security patches, patch, minor, and major versions, then applies them sequentially through dedicated agent teammates to isolate breaking changes. - Security Vulnerability Remediation: Runs audits with npm audit, audit-ci, or Snyk, sub-classifies findings by CVSS severity, and fast-tracks critical patches. - Verification and Reporting: Records a test baseline, runs full verification (typecheck, lint, test, E2E, build) after each batch, and produces a dated maintenance report with a PASS/CONDITIONAL PASS/FAIL gate decision. - Use Case: Run monthly maintenance on a Next.js project: the Skill creates a maintenance branch, patches vulnerabilities, upgrades minor and major versions one at a time, re-runs backend codegen (Convex, Prisma), and merges only after all tests pass. ## Quick Start Ask the agent to run dependency maintenance and check for outdated packages and security vulnerabilities in this project.

Frequently Asked Questions about maintain

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I update outdated npm dependencies safely?

Update dependencies in tiered batches: security patches first, then patch, minor, and major versions. Run typecheck, lint, tests, and build after each batch, and commit to a dedicated branch so failures can be reverted granularly.

How to check for security vulnerabilities in project dependencies?

Run npm audit for package-lock.json projects, pnpm audit for pnpm-lock.yaml, or bunx audit-ci and npx snyk test for Bun projects. Sub-classify findings by CVSS severity and patch critical vulnerabilities immediately.

Does this work with Bun, pnpm, and monorepos?

Yes, the package manager is inferred from lock files: bun.lockb, package-lock.json, or pnpm-lock.yaml. For monorepos, update the root package.json first, then shared workspace packages, then consumers, verifying with npm list.

Why do tests fail after a backend SDK update?

Backend SDK updates require re-running code generation before tests, such as bunx convex codegen or npx prisma generate. Generated files and runtime SDK versions must stay in sync, otherwise tests fail with type mismatches.

What happens when a major version update breaks the build?

Apply major updates one at a time following the official migration guide. If an update is too complex to resolve, revert it, document the reason and retry conditions in the deferred updates report, and continue with remaining updates.