How does it handle transitive dependencies?

The skill maps the complete dependency tree from lockfiles, identifying vulnerabilities and license issues hidden deep within indirect or nested dependencies.

Which programming languages does the Dependency Auditor support?

It supports a wide range of ecosystems including Node.js (JavaScript), Python, Go, Rust, Ruby, Java (Maven/Gradle), PHP, and .NET by parsing various manifest and lockfile formats.

Can this skill help reduce my application's bundle size?

Yes, it includes a bloat analysis feature that identifies unused dependencies and suggests opportunities for package consolidation or removal of redundant libraries.

Does it detect license conflicts?

Absolutely. It classifies licenses into categories like Permissive or Copyleft and warns about incompatible combinations that could pose legal risks for your project distribution.

Can I integrate this into my CI/CD pipeline?

Yes, the skill is designed to provide JSON and human-readable output that can be used for security gates and automated policy enforcement during the build process.

Dependency Auditor

Name: Dependency Auditor
Author: zhangzhang-111-i

byzhangzhang-111-i

0•

セキュリティとテスト

Audits and manages project dependencies across multiple languages to ensure security, license compliance, and optimal software maintenance.

The Dependency Auditor skill provides a comprehensive suite of tools for deep visibility into your project's dependency ecosystem. It automates vulnerability scanning against CVE databases, assesses legal risks through license classification, identifies bloated or unused packages, and generates safe upgrade paths. By mapping the entire dependency tree and verifying supply chain integrity, it helps developers and security teams proactively manage technical debt and security posture in complex, multi-language environments.

主な機能

01Dependency bloat and unused package identification to reduce bundle size

02Automated license compliance auditing and legal risk assessment

03Outdated dependency detection with semantic versioning and upgrade path planning

04Multi-language vulnerability scanning with CVE matching and CVSS scoring

05Supply chain security verification including package provenance and lockfile integrity

060 GitHub stars

ユースケース

01Legal due diligence for software distribution to ensure open-source license compliance

02Quarterly dependency hygiene reviews to eliminate bloat and plan major version migrations

03Automated security gates in CI/CD pipelines to block vulnerable dependencies before deployment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add zhangzhang-111-i/claude-skills111 dependency-auditor

For use in Claude.ai and ChatGPT

主な機能

01Dependency bloat and unused package identification to reduce bundle size

02Automated license compliance auditing and legal risk assessment

03Outdated dependency detection with semantic versioning and upgrade path planning

04Multi-language vulnerability scanning with CVE matching and CVSS scoring

05Supply chain security verification including package provenance and lockfile integrity

060 GitHub stars

ユースケース

01Legal due diligence for software distribution to ensure open-source license compliance

02Quarterly dependency hygiene reviews to eliminate bloat and plan major version migrations

03Automated security gates in CI/CD pipelines to block vulnerable dependencies before deployment

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add zhangzhang-111-i/claude-skills111 dependency-auditor

For use in Claude.ai and ChatGPT