sap-dependency-security

# SAP Dependency Security ## Related Skills - **sap-hana-cli**: For dependency-aware database tooling workflows and upgrade guidance - **sap-cap-capire**: For CAP dependency-safe runtime and service configuration guidance - **sap-fiori-tools**: For secure UI5/Fiori dependency strategy when tooling touches frontend packages - **sapui5**: For SAPUI5/OpenUI5 frontend dependency and MCP tooling review - **sap-datasphere**: For tenant-connected Datasphere MCP and CLI dependency review - **sap-sac-scripting**: For source-pinned SAC MCP setup and local install records Manage SAP dependency security and upgrades with supply chain protection, compatibility analysis, staged rollout, and comprehensive testing across all major package managers. ## When to Use This Skill - Upgrading major framework or library versions - Configuring supply chain attack prevention (cooldown, script blocking, lockfile hardening) - Setting up secure package manager configuration - Resolving dependency conflicts or peer dependency issues - Planning incremental upgrade paths with testing - Automating dependency updates with Renovate, Dependabot, or Snyk - Auditing dependencies for vulnerabilities - Setting up CI/CD dependency security workflows - Pinning or reviewing SAP MCP servers in `.mcp.json` - Reviewing SAP CAP, UI5/Fiori, HANA, Datasphere, SAC, SAP Cloud SDK, BTP/CF/mbt, or ABAP/gCTS dependency workflows ## Common Issues | Issue | Recommended response | |-------|----------------------| | Floating ...