dependency-audit

# Dependency Audit Comprehensive dependency risk assessment: license compatibility analysis, maintenance health scoring, CVE detection, bloat identification, and transitive dependency risk mapping. Produces an actionable report with prioritized remediation steps organized by urgency (security → license → maintenance → bloat). ## Reference Files | File | Contents | Load When | | ------------------------------------- | -------------------------------------------------------------------------- | ------------------------ | | `references/license-compatibility.md` | License compatibility matrix, copyleft detection, commercial-safe licenses | Always | | `references/health-metrics.md` | Maintenance health indicators, scoring criteria, abandonment detection | Always | | `references/bloat-detection.md` | Identifying unused deps, duplicate functionality, heavy transitive trees | Bloat analysis requested | | `references/cve-sources.md` | CVE databases, advisory sources, vulnerability severity interpretation | Security audit requested | ## Prerequisites - Access to the project's dependency files (`pyproject.toml`, `requirements.txt`, `package.json`, `Cargo.toml`, `go.mod`) - Lock file (for exact versions and transitive dependencies) - Project license (to determine compatibility requirements) ## Workfl...