dependency-audit
Automatically scan your project to detect and eliminate unused dependencies, cutting down bloat and simplifying maintenance workflows. This skill integrates with Claude's multi-agent ecosystem to provide intelligent dependency analysis across Python, TypeScript, JavaScript, and other modern tech stacks.
dependency-audit scans your codebase to identify unused packages, security vulnerabilities, and outdated libraries across Python, TypeScript, JavaScript, and other modern tech stacks. The skill automatically analyzes your dependency tree and provides actionable recommendations to eliminate bloat and simplify maintenance workflows.
AI-generated summary based on this skill's SKILL.md
Install
bobmatnyc/claude-mpm-skills/dependency-audit · repository language: Python
git clone https://github.com/bobmatnyc/claude-mpm-skills
cp -r claude-mpm-skills/toolchains/universal/dependency/dependency-audit ~/.claude/skills/dependency-auditFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How do I audit dependencies in my project?
dependency-audit scans your codebase to identify unused packages, security vulnerabilities, and outdated libraries across Python, TypeScript, JavaScript, and other modern tech stacks. The skill automatically analyzes your dependency tree and provides actionable recommendations to eliminate bloat and simplify maintenance workflows.
How can I find unused npm packages in my JavaScript project?
dependency-audit detects unused dependencies by analyzing your project's import statements and package declarations. The skill identifies packages that are installed but never referenced in your code, allowing you to remove them and reduce bundle size without breaking functionality.
What does dependency-audit do for npm security vulnerability scanning?
dependency-audit scans your project for known security vulnerabilities and CVEs in your dependencies, then provides guidance on patching and updating affected packages. The skill helps you maintain a secure supply chain by identifying risky packages and suggesting safer alternatives or updated versions.
How can I update outdated dependencies safely with dependency-audit?
dependency-audit analyzes your outdated packages and recommends update strategies that maintain stability while avoiding breaking changes. The skill integrates with Claude's multi-agent ecosystem to help you plan major version migrations, test compatibility, and roll out updates systematically.
Can dependency-audit help me check for deprecated packages?
Yes, dependency-audit identifies deprecated or unmaintained libraries in your project and recommends modern replacements. The skill helps you migrate away from end-of-life packages by suggesting compatible alternatives and providing migration guidance to keep your tech stack current and supported.
How do I establish automated dependency maintenance workflows?
dependency-audit enables you to set up automated security and dependency maintenance processes by integrating with tools like GitHub Actions and CI/CD pipelines. The skill helps you configure regular scans, vulnerability patching, and dependency update workflows to reduce manual overhead and keep your project healthy.
SKILL.md
rendered from the published skill — quoted content, verbatim
Dependency Audit Skill
Summary
Systematic workflow for auditing, updating, and cleaning up project dependencies. Covers security vulnerability scanning, outdated package detection, unused dependency removal, and migration from deprecated libraries.
When to Use
- Weekly/monthly dependency maintenance
- After security advisories (CVE announcements)
- Before major releases
- When bundle size increases unexpectedly
- During code reviews for dependency changes
- Onboarding to legacy projects
Quick Audit Process
1. Check Outdated Packages
```bash
npm
npm outdated
pnpm
pnpm outdated
yarn
yarn
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 3 files
toolchains/universal/dependency/dependency-audit/SKILL.md
toolchains/universal/dependency/dependency-audit/metadata.json
toolchains/universal/dependency/dependency-audit/references/open-source-safety.md