dependency-audit
⚠Review·Scanned 2/18/2026
This skill audits JavaScript/TypeScript dependencies and produces prioritized fix recommendations. It instructs running commands like npm audit --json and ls package-lock.json, which run shell commands and perform network access (e.g., via package registries) and may read/write package.json.
Scanned from main at 10a1f16 · Transparency log ↗
$ vett add jezweb/claude-skills/dependency-auditReview findings below
Dependency Audit
Comprehensive dependency health auditing for JavaScript/TypeScript projects.
Keywords
dependency audit, npm audit, pnpm audit, yarn audit, security vulnerabilities, CVE, GHSA, outdated packages, license compliance, dependency health, vulnerable dependencies, security advisory, package updates, npm outdated, supply chain security
When to Use
- Running security audits before release
- Checking for vulnerabilities after
npm install - Updating dependencies safely
- Investigating npm audit warnings
- Checking license compliance for commercial projects
- Maintaining dependency hygiene
Features
- Security vulnerability scanning (npm audit)
- Outdated package detection
- License compliance checking
- Prioritised fix recommendations
- Auto-fix for safe updates
- CI integration guidance