Can it help reduce build times?

Yes, by identifying and removing unused libraries and 'transitive dependency hell,' the skill helps reduce project bloat and improves build performance.

How does it handle library updates?

It advocates for regular, incremental updates and automated testing in CI/CD pipelines to avoid the risks associated with jumping many versions at once.

How does this skill help with security?

It systematically audits both direct and transitive dependencies against OWASP and CVE databases to identify and prioritize the removal of security vulnerabilities.

Does it support microservice architectures?

Absolutely. It focuses on reducing service coupling through patterns like circuit breakers, fallbacks, and event-driven communication.

Dependency Governance

Name: Dependency Governance
Author: sethdford

bysethdford

•

Deployment & DevOps

Manages and optimizes system dependencies to reduce coupling, track vulnerabilities, and streamline architectural modularity.

The Dependency Governance skill provides a structured framework for managing the lifecycle of libraries, services, and data dependencies within complex systems. It assists developers and architects in mapping dependency graphs, auditing for security risks such as known CVEs, reducing architectural coupling through adapter patterns, and implementing robust deprecation strategies. By grounding its recommendations in industry standards like TOGAF and SWEBOK, this skill helps prevent 'dependency hell' and ensures long-term system maintainability, security, and performance.

Key Features

01Coupling reduction via service adapters and event-driven patterns

02Automated version management and update cycle planning

03Comprehensive dependency graph mapping for direct and transitive relations

04Strategic deprecation paths and migration timeline development

055 GitHub stars

06Security auditing against OWASP and CVE databases

Use Cases

01Decoupling microservices to improve fault tolerance and modularity

02Auditing a legacy project for outdated libraries and security vulnerabilities

03Planning a systematic migration away from deprecated third-party APIs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sethdford/claude-skills dependency-governance

For use in Claude.ai and ChatGPT

Key Features

01Coupling reduction via service adapters and event-driven patterns

02Automated version management and update cycle planning

03Comprehensive dependency graph mapping for direct and transitive relations

04Strategic deprecation paths and migration timeline development

055 GitHub stars

06Security auditing against OWASP and CVE databases

Use Cases

01Decoupling microservices to improve fault tolerance and modularity

02Auditing a legacy project for outdated libraries and security vulnerabilities

03Planning a systematic migration away from deprecated third-party APIs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sethdford/claude-skills dependency-governance

For use in Claude.ai and ChatGPT