dependency-awareness

Solid

Per-language dependency vulnerability audit tool reference (cargo audit/deny, pip-audit, npm/pnpm audit, govulncheck, bundler-audit, composer audit, OWASP dependency-check, dotnet vulnerable, mix_audit). Load when adding, updating, or auditing project dependencies, wiring up CI supply-chain checks, or triaging CVEs in a lock file.

Data & Documents 144 stars 14 forks Updated today MIT

Install

View on GitHub

Quality Score: 84/100

Stars 20%

Recency 20%

100

Frontmatter 20%

Documentation 15%

Issue Health 10%

License 10%

100

Description 5%

100

Skill Content

Audit dependencies before adding them. Prefer well-maintained, widely-used packages with active maintenance. Pin versions and commit lock files. Use language-specific audit tools in CI: - Rust: `cargo audit`, `cargo deny` (license + advisory policies) - Python: `pip-audit`, `bandit` (SAST) - JavaScript/TypeScript: `npm audit`, `pnpm audit` - Go: `govulncheck` - Ruby: `bundler-audit` - PHP: `composer audit` - Java: OWASP `dependency-check` Maven/Gradle plugin - C#: `dotnet list package --vulnerable` - Elixir: `mix_audit` Zero tolerance for critical/high CVEs. Automate dependency update PRs where possible.

Details

Author: Goldziher
Repository: Goldziher/ai-rulez
Created: 1 years ago
Last Updated: today
Language: Go
License: MIT

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Listed

dependency-audit

Audit dependencies for known vulnerabilities, malicious packages, and supply-chain risk. Use when adding or upgrading a dependency, reviewing package.json, requirements.txt, go.mod, or Cargo.toml, or before merging a PR that touches dependency files.

22 Updated 1 months ago

ShieldNet-360

Data & Documents Listed

dependency-audit

Audits project dependencies across package.json, requirements.txt, go.mod, Cargo.toml, Gemfile, composer.json, and .NET projects for unpinned versions, deprecated packages, missing lockfiles, and known CVEs.

1 Updated yesterday

RealDougEubanks

AI & Automation Listed

dependency-auditor

Audit and manage dependencies across multi-language projects. Identifies vulnerabilities, license conflicts, transitive dependency risks, and safe-upgrade paths. Use when auditing third-party packages before release, investigating a CVE, planning a major version bump, or running a license-compliance review. Examples: 'audit our npm dependencies', 'do we have GPL contamination', 'plan the upgrade to React 19'.

1 Updated today

novahiz