Identify outdated JavaScript and TypeScript dependencies and assess upgrade risks.
npx skills add https://github.com/llbbl/upkeep --skill upkeep-deps
Please help me install this Agent Skill. Skill: upkeep-deps Source: https://github.com/llbbl/upkeep/tree/main/skills/upkeep-deps Command: npx skills add https://github.com/llbbl/upkeep --skill upkeep-deps
Upgrading JavaScript and TypeScript dependencies can introduce risk; this Skill orchestrates risk assessment, Dependabot PR handling, and validated upgrades to maintain project health.
Run the upkeep detect, upkeep deps, and upkeep risk steps to identify outdated packages and safely apply approved upgrades.
High-intent search queries and answers about installing and using this skill.
Safely upgrade JavaScript and TypeScript dependencies by identifying outdated packages, assessing upgrade risks, and running impact checks and tests before applying updates. This process uses a branch-based workflow with provenance tracking and rollback safeguards to minimize breakages.
Risk assessment for dependency upgrades evaluates compatibility checks and test impacts across your project to guide safe updates. It scores the risk of each outdated package, enabling validated upgrades while coordinating with testing and rollback safeguards.
Yes, you can integrate and manage existing Dependabot PRs as part of your dependency upgrade workflow. The process merges and handles these PRs alongside automated risk-aware validation to maintain overall project health.
Yes, the dependency upgrade process supports npm, yarn, pnpm, and bun. It automatically selects the appropriate package-manager commands to coordinate upgrades, perform compatibility checks, and enforce a safe branch-based workflow.
The best way to handle outdated TypeScript dependencies is running a coordinated workflow that detects outdated packages, scores upgrade risks, and applies updates using a branch-based workflow with provenance tracking and rollback safeguards.
EvanPluchartAudit project dependencies for vulnerabilities, outdated packages, and license risks.
rezosndExecute configured post-merge scripts and reconcile workflows in .replit-based repositories.
etylsarinEnforce feature-branch pull request workflows and prevent direct commits to main.
remiverdiesenConsolidate Dependabot pull requests into one integration branch and merge request.
