node-dependency-vulns

To audit JavaScript dependencies for security vulnerabilities, this Skill detects your package manager and lockfile type, then runs the appropriate audit command across npm, pnpm, or Yarn to identify vulnerable packages in your project.

Yes, you can fix npm vulnerabilities in a monorepo or complex project environment. The Skill assists in managing dependency upgrades specifically tailored for these diverse development setups while focusing on minimizing breaking changes.

The best way to fix vulnerable packages without breaking changes is to recommend and apply dependency updates that focus on minimizing disruptions, automatically upgrading your TypeScript or JavaScript codebase to a secure state.

Yes, the vulnerability scanner works with Yarn and pnpm lockfiles. It automatically detects the package manager and lockfile type in your project to tailor the security scanning and run the correct audit commands.

TypeScript dependency vulnerabilities are remediated by analyzing the project dependencies, identifying vulnerable packages, and applying recommended fixes or updates to ensure a safer codebase.