Does this skill perform security checks?

Yes, it includes a dedicated security audit phase using tools like pip-audit or pipenv check to identify and report vulnerabilities before applying updates.

How does the skill handle breaking changes during upgrades?

When a potential breaking change is identified, the skill uses MCP tools to search official documentation and community resources for migration guides, helping to resolve compatibility issues automatically.

Which Python package managers are supported?

The skill supports pip (requirements.txt), Poetry (pyproject.toml), and Pipenv (Pipfile) environments, automatically detecting the correct manager for your project.

Can it verify if the upgrades broke my code?

Yes, the skill includes a verification phase that performs package import tests and runs your existing test suite (e.g., pytest) to ensure project stability.

Python Dependency Upgrader

Name: Python Dependency Upgrader
Author: levnikolaevich

bylevnikolaevich

•

开发者工具

Automates Python package upgrades across pip, poetry, and pipenv while intelligently handling breaking changes and security audits.

关于

The Python Dependency Upgrader is a specialized L3 worker skill designed to streamline the maintenance of Python projects. It manages the entire lifecycle of dependency updates, from detecting the package manager (pip, poetry, or pipenv) and performing security vulnerability scans to identifying outdated packages and applying upgrades. Unlike standard update scripts, it proactively searches for migration guides when breaking changes are detected and validates the stability of the environment using automated import tests and pytest suites, ensuring a secure and functional development workflow.

主要功能

Rigorous post-upgrade verification through imports and unit testing
Automated documentation lookup for migration guides using MCP search tools
38 GitHub stars
Integrated security auditing with automatic blocking of critical vulnerabilities
Comprehensive support for pip, Poetry, and Pipenv workflows
Intelligent breaking change detection for major libraries like Pydantic and SQLAlchemy

使用场景

Standardizing dependency management and reporting across diverse Python environments
Routine maintenance of production Python projects to resolve security vulnerabilities
Automating complex migrations between major library versions with documentation assistance

关于

主要功能

Rigorous post-upgrade verification through imports and unit testing
Automated documentation lookup for migration guides using MCP search tools
38 GitHub stars
Integrated security auditing with automatic blocking of critical vulnerabilities
Comprehensive support for pip, Poetry, and Pipenv workflows
Intelligent breaking change detection for major libraries like Pydantic and SQLAlchemy

使用场景

Standardizing dependency management and reporting across diverse Python environments
Routine maintenance of production Python projects to resolve security vulnerabilities
Automating complex migrations between major library versions with documentation assistance