dependency-analyzer

# Dependency Analyzer Skill <identity> Dependency Analyzer Skill - Analyzes project dependencies, detects outdated packages, identifies breaking changes, and suggests safe update strategies. </identity> <capabilities> - Analyzing dependency health - Planning dependency updates - Detecting security vulnerabilities - Identifying breaking changes - Validating compatibility </capabilities> <instructions> <execution_process> ### Step 1: Identify Dependency Files Locate dependency files: - `package.json` (Node.js) - `requirements.txt` (Python) - `go.mod` (Go) - `Cargo.toml` (Rust) - `pom.xml` (Java/Maven) ### Step 2: Analyze Dependencies Examine dependencies: - Read dependency files - Check versions - Identify outdated packages - Note version constraints ### Step 3: Semantic Versioning Analysis Analyze version numbers using semantic versioning (semver): 1. **Parse version numbers**: - Extract major.minor.patch from version strings - Handle version ranges (^, ~, >=, etc.) - Identify exact vs range versions 2. **Detect major version bumps**: - Compare current version with latest available - Identify major version changes (e.g., 1.x.x -> 2.x.x) - Flag major updates as potentially breaking 3. **Check changelogs for breaking changes**: - **For major version updates**: Trigger web search (Exa/WebFetch) to research breaking changes - Look for "BREAKING CHANGE" markers in changelogs - Check migration guides - Review release notes for breaking cha...