speedwave-review-deps

To review Dependabot PRs for security vulnerabilities, provide a GitHub PR URL to trigger an automated risk assessment that analyzes supply chain, authenticity, breaking changes, and CVEs for each updated dependency.

Supply chain risk analysis for dependency updates identifies ecosystem types, version deltas, and potential breaking changes by fetching registry metadata and orchestrating parallel security research to produce a structured vulnerability report.

Yes, you can analyze npm, Cargo, GitHub Actions, and Docker dependency updates in the same PR by extracting affected manifests and performing ecosystem-sensitive risk classification across all detected dependencies.

Automated dependency vulnerability analysis evaluates changelog relevance by fetching registry or API metadata per dependency, assessing version deltas, and coordinating parallel background checks to aggregate structured risk findings.

The best way to automate security checks for dependency version deltas is to run parallel background research across ecosystems, fetch API metadata, and assess supply chain risks alongside breaking changes and CVEs to generate a structured report.