How does the skill identify security vulnerabilities?

It utilizes the dependency-checker plugin to scan your project's dependencies against global vulnerability databases (CVEs) and known security threats to provide a risk report.

When is the best time to use the /depcheck trigger?

It is best practice to run a dependency check regularly, specifically before deploying code to production or when onboarding a new open-source library.

Can I use this skill to check for outdated packages?

Yes, the skill identifies packages that have newer versions available and provides a detailed report highlighting major, minor, and patch updates.

Which package managers does this skill support?

This skill supports projects using npm, pip, composer, gem, and go modules by automatically detecting manifest files like package.json, requirements.txt, or composer.json.

Is it possible to check for license compliance?

Absolutely. The skill audits the licenses of your project's dependencies to ensure they align with your project’s legal requirements and organizational policies.

Dependency Security & License Checker

Name: Dependency Security & License Checker
Author: jeremylongshore

byjeremylongshore

•

883

安全与测试

Analyzes project dependencies for security vulnerabilities, outdated packages, and license compliance across multiple programming languages.

关于

The Dependency Security & License Checker is a specialized skill for Claude Code that automates the audit of project manifests to identify critical software risks. By scanning against known vulnerability databases (CVEs) and checking for license compatibility, it helps developers maintain secure and compliant codebases. Whether you are working with npm, pip, composer, gem, or go modules, this skill provides actionable reports and remediation guidance to prevent security breaches and legal issues before they reach production.

主要功能

Identification of outdated packages with recommended update paths
883 GitHub stars
Multi-language support for npm, pip, composer, gem, and go modules
Comprehensive license compliance auditing to mitigate legal risks
Automated security vulnerability scanning using known CVE databases
Seamless integration with deployment workflows for pre-release checks

使用场景

Performing security audits before deploying code to production environments
Automating the identification of outdated dependencies and patch requirements
Verifying third-party library licenses to ensure organizational compliance

关于

主要功能

Identification of outdated packages with recommended update paths
883 GitHub stars
Multi-language support for npm, pip, composer, gem, and go modules
Comprehensive license compliance auditing to mitigate legal risks
Automated security vulnerability scanning using known CVE databases
Seamless integration with deployment workflows for pre-release checks

使用场景

Performing security audits before deploying code to production environments
Automating the identification of outdated dependencies and patch requirements
Verifying third-party library licenses to ensure organizational compliance