reviewing-dependencies

Detect unused, outdated, and vulnerable dependencies in npm projects.

Updated Nov 21, 2025
One-click install
npx skills add https://github.com/djankies/claude-configs --skill reviewing-dependencies
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: reviewing-dependencies
Source: https://github.com/djankies/claude-configs/tree/main/review/skills/reviewing-dependencies
Command: npx skills add https://github.com/djankies/claude-configs --skill reviewing-dependencies

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Unused, outdated, or vulnerable dependencies bloat bundle sizes, introduce security risks, and increase maintenance overhead. This Skill provides automated tools and patterns to identify and address these issues.

Core Features & Use Cases

  • Unused Dependencies Detection: Identifies packages that are installed but not actively used in the codebase.
  • Security Audit: Runs npm audit to detect known vulnerabilities in your project's dependencies.
  • Outdated Dependencies: Lists dependencies with available patch, minor, or major version upgrades.
  • Duplicate Functionality Detection: Flags multiple packages serving the same purpose (e.g., multiple date libraries, HTTP clients).
  • Use Case: Perform a comprehensive dependency review of your project, identifying unused packages, outdated versions, and potential security vulnerabilities, then suggest replacements for large, lightly used libraries.

Quick Start

Run bash ~/.claude/plugins/cache/review/scripts/review-unused-deps.sh to find unused dependencies in the current project.

Frequently Asked Questions about reviewing-dependencies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find unused dependencies in my npm project?

Unused dependencies detection identifies packages installed but not actively used in your codebase. Run the automated detection script to scan your project's package manifest and imports, then remove flagged packages to reduce bundle size and maintenance overhead.

What security vulnerabilities should I check for in my dependencies?

Security audit scanning detects known vulnerabilities in your project's dependencies using npm audit. The Skill runs this check automatically to identify vulnerable packages, then recommends updates or replacements to eliminate security risks.

Can I detect outdated packages and duplicate dependencies in one workflow?

Yes. The Skill analyzes package manifests to list dependencies with available upgrades and flags duplicate functionality—multiple packages serving the same purpose like date libraries or HTTP clients—so you can consolidate and modernize your stack.

How do I optimize my bundle size by reviewing dependencies?

Bundle analysis and duplicate detection identify large, lightly used libraries and overlapping functionality. Combined with unused dependency detection, this produces actionable findings to remove bloat, suggest leaner replacements, and reduce your final bundle size.

Does dependency analysis work with projects of any size?

Dependency analysis applies to npm-based projects of any size. The Skill uses automated detection commands and manual inspection patterns with Bash, grep, and glob matching to scale from small modules to large monorepos.

What technical debt can dependency review expose?

Technical debt detection surfaces unused packages, missing dependencies, dead code, and deprecated packages. A comprehensive review identifies all these issues at once, giving you a complete picture of maintenance overhead and modernization priorities.