Dep Audit

Run a security audit and dependency check on project dependencies. Use when you want to check for vulnerabilities, audit packages, or update outdated dependencies.

justnau1020 eefd601 1.1 KB Updated

File contents

Dependency Audit

Run a security and freshness audit of project dependencies.

Steps

1. Check for known vulnerabilities

For Python projects:

pip-audit

If pip-audit is not installed: pip install pip-audit

For Node.js projects:

npm audit

2. Check for outdated packages

For Python:

pip list --outdated

For Node.js:

npm outdated

3. Report

For each issue found:

  • Vulnerability: Package name, CVE ID, severity, affected version, fixed version
  • Outdated: Package name, current version, latest version, whether upgrade is safe

4. Fix recommendations

  • For vulnerabilities: upgrade to the fixed version immediately
  • For outdated packages: check changelog for breaking changes before upgrading
  • Update dependency config (pyproject.toml, package.json, etc.) with new version constraints
  • Run the full test suite after any dependency change

justnau1020/claude-os/tree/main/skills/code-quality/dep-audit commit eefd6017da

Frequently asked questions

npx skillmds@latest add justnau1020/dep-audit