mm-deps

Audit npm, pnpm, pip, and cargo dependencies for vulnerabilities and outdated packages.

1|Updated Apr 6, 2026
One-click install
npx skills add https://github.com/mikkeymoo/claude-solo --skill mm-deps
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: mm-deps
Source: https://github.com/mikkeymoo/claude-solo/tree/main/mm-skills/mm-deps
Command: npx skills add https://github.com/mikkeymoo/claude-solo --skill mm-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps you manage and maintain the dependencies of your code, ensuring security, performance, and maintainability.

Core Features & Use Cases

  • Security Vulnerability Detection: Identifies and flags potential security vulnerabilities in dependencies.
  • Dependency Upgrade: Provides a guide to upgrading dependencies safely.
  • Unused Dependencies Removal: Identifies and removes unused dependencies to optimize code size and performance.
  • Why Dependency is Installed: Explains the reasons a specific package is present in the project.

Quick Start

Use the /mm-deps command to automatically analyze and clean up dependencies.

Frequently Asked Questions about mm-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit dependencies for security vulnerabilities across npm, pip, and cargo?

To audit dependencies for security vulnerabilities, you can use this Skill to automatically check npm, pnpm, pip, and cargo projects. It flags known security issues and outdated packages to help maintain codebase safety.

What is the best way to find and remove unused dependencies in my codebase?

Finding and removing unused dependencies is done by scanning your project to identify packages that are no longer imported. This Skill optimizes code size and performance by safely targeting those unused imports for cleanup.

How do I safely upgrade outdated packages in a continuous integration environment?

To safely upgrade outdated packages in continuous integration, this Skill analyzes your dependency tree and provides a guide for secure upgrades. It ensures your codebase remains up-to-date without breaking existing functionality.

Does this dependency management tool support both Python and Rust projects?

Yes, this dependency management tool supports Python and Rust projects by auditing pip and cargo package managers. It also works with JavaScript ecosystems using npm and pnpm.

Why is a specific package installed in my project and how can I find its reason?

Finding why a specific package is installed is possible because this Skill explains the reasons a dependency is present in your project. This helps clarify complex dependency trees and justify retained packages.

What are the limitations of automating dependency cleanup with a script?

Automating dependency cleanup with a script requires understanding that it identifies unused imports and vulnerabilities but manual review is needed before removal. It currently supports npm, pnpm, pip, and cargo environments.