연결

Dependency Auditor

ramsny1-opsbyramsny1-ops
0•
보안 및 테스팅

Audits project dependencies to evaluate purpose, security risks, package duplication, and version constraints without altering repository state.

Dependency Auditor is a read-only analysis skill designed to review project dependencies, assess third-party risks, flag duplicate libraries, and evaluate version constraint health. Operating under a strict read and search permission model, it inspects manifest and lock files without performing package installations or removals, ensuring safe, repeatable dependency audits and clear scoping reports for software maintenance and compliance.

주요 기능

01Generates structured audit reports with actionable scope recommendations
02Evaluates dependency necessity, usage, and version constraints
030 GitHub stars
04Restricts actions to read-only inspection to prevent unintended modifications
05Identifies third-party security risks and outdated package versions
06Detects redundant or duplicate packages across the dependency tree

사용 사례

01Identifying duplicate or conflicting dependencies during monorepo migrations
02Conducting periodic dependency hygiene reviews before production releases
03Auditing repository packages for licensing and supply-chain security risks