AreteDriver Deps Skill
Check project dependencies for updates and security issues.
Usage
/deps # Check all dependencies
/deps --outdated # Show outdated only
/deps --security # Security audit
/deps --update # Update to latest
Process
Check outdated packages
source .venv/bin/activate pip list --outdated --format=columnsSecurity audit
# Install pip-audit if needed pip install pip-audit # Run audit pip-auditShow dependency tree
pip install pipdeptree pipdeptree
Quick Commands
# List outdated
pip list --outdated
# Update all (careful!)
pip list --outdated --format=freeze | cut -d= -f1 | xargs pip install --upgrade
# Update specific package
pip install --upgrade requests
# Check for conflicts
pip check
# Export current versions
pip freeze > requirements.lock
Security Audit
# Using pip-audit
pip-audit
# Using safety (alternative)
pip install safety
safety check
# Check specific requirements file
pip-audit -r requirements.txt
Output Format
Outdated Packages:
Package Current Latest
--------- ------- ------
requests 2.28.0 2.31.0
pytest 7.2.0 7.4.0
Security Issues:
Found 1 vulnerability:
- requests 2.28.0: CVE-2023-XXXXX (upgrade to 2.31.0)
Dependency Tree:
my-package==1.0.0
├── requests==2.31.0
│ ├── certifi>=2017.4.17
│ └── urllib3>=1.21.1
└── PyQt6==6.6.0
Updating Dependencies
# Update pyproject.toml deps
# Then reinstall
pip install -e . --upgrade
# Or update lock file
pip-compile pyproject.toml -o requirements.lock
pip install -r requirements.lock
Tips
- Check deps weekly for security updates
- Pin major versions in pyproject.toml
- Use requirements.lock for reproducible builds
- Test after updates:
pytest