Dependency Health and Security Checker FAQs

Question 1

Which programming languages and package managers does Dep Check support?

Accepted Answer

Dep Check supports TypeScript and JavaScript (npm/yarn/pnpm), Python (pip/poetry), Go (go mod), and Rust (cargo).

Question 2

Does it work with lock files?

Accepted Answer

While it prioritizes manifest files for rule enforcement, it encourages the use of lock files and exact pinning (DEP-5) to ensure reproducible builds and environment parity.

Question 3

Can Dep Check automatically fix dependency issues?

Accepted Answer

Yes, for certain rules like DEP-3 (unused dependencies) and DEP-4 (misclassified dev dependencies), it can apply fixes. However, for major version upgrades (DEP-2), it provides documentation and migration paths rather than auto-upgrading to prevent breaking changes.

Question 4

What is the 'version lag' threshold in this skill?

Accepted Answer

Under rule DEP-2, the skill triggers a warning if a dependency is two or more major versions behind the current stable release, helping to prevent the accumulation of technical debt.

Question 5

How does Dep Check handle security vulnerabilities?

Accepted Answer

It implements the DEP-1 rule, which automatically blocks work if HIGH or CRITICAL severity vulnerabilities are detected in production dependencies, requiring a patch or mitigation before proceeding.

Dependency Health and Security Checker

Key Features

Use Cases

Dependency Health and Security Checker

Key Features

Use Cases