package-json-maintenance

Audit and update JavaScript/Node.js dependencies across isolated git worktrees.

2|Updated Feb 3, 2026
One-click install
npx skills add https://github.com/WhatIfWeDigDeeper/agent-skills --skill package-json-maintenance
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: package-json-maintenance
Source: https://github.com/WhatIfWeDigDeeper/agent-skills/tree/main/skills/package-json-maintenance
Command: npx skills add https://github.com/WhatIfWeDigDeeper/agent-skills --skill package-json-maintenance

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Maintain JavaScript/Node.js packages through security audits or dependency updates in an isolated git worktree. Supports npm, yarn, pnpm, and bun. Use for: (1) Security requests - audit, CVE, vulnerabilities, fix security issues, check for vulnerable dependencies; (2) Update requests - update dependencies, upgrade packages, get latest versions, modernize dependencies.

Core Features & Use Cases

  • Detects project package managers and runs appropriate audit and update workflows.
  • Performs security audits and dependency updates across multiple directories in an isolated worktree.
  • Recommends and applies fixes, with validation steps and rollback support.

Quick Start

Run this skill to audit dependencies and apply updates across your repositories in an isolated worktree.

Frequently Asked Questions about package-json-maintenance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit and update Node.js dependencies across multiple directories?

To audit and update Node.js dependencies across multiple directories, this skill uses an isolated git worktree workflow. It detects the project's package manager, identifies vulnerable or outdated packages, and applies updates with validation checks.

Can I run a security audit for npm, yarn, pnpm, and bun in the same workflow?

Yes, you can run a security audit for npm, yarn, pnpm, and bun in the same workflow. The process detects your project's package manager and runs the appropriate audit commands to identify and fix vulnerable dependencies.

What is the best way to safely upgrade outdated JavaScript packages without breaking my main branch?

The best way to safely upgrade outdated JavaScript packages is using an isolated git worktree. This workflow applies dependency updates and runs validation checks outside your main branch, providing rollback options if updates fail.

Does updating dependencies in an isolated worktree support rollback options?

Yes, updating dependencies in an isolated worktree supports rollback options. If applied package updates fail their validation checks, the workflow allows you to roll back the changes safely within the isolated environment.

When do I need to use an isolated worktree for Node.js package management?

You need an isolated worktree for Node.js package management when performing security audits or dependency updates across multiple directories. It prevents conflicts in your main branch by applying and validating package changes separately.