Agent skill
dependency-analyzer
Analyze and optimize project dependencies. Use when auditing npm packages, checking for vulnerabilities, finding outdated dependencies, analyzing bundle size, or detecting circular imports.
Install this agent skill to your Project
npx add-skill https://github.com/j0KZ/mcp-agents/tree/main/starter-kit/template/.claude/skills/dependency-analyzer
SKILL.md
Dependency Analyzer
Comprehensive dependency analysis and optimization for JavaScript/TypeScript projects
Quick Commands
# Analyze all dependencies
npm run analyze:deps
# Find outdated packages
npm outdated --long
# Check for vulnerabilities
npm audit --audit-level=moderate
# Analyze bundle size impact
npx bundle-phobia-cli package-name
Core Functionality
Key Features
- Dependency Audit: Security vulnerabilities and outdated packages
- Bundle Analysis: Size impact and tree-shaking effectiveness
- Circular Detection: Find and resolve circular dependencies
- License Compliance: Verify license compatibility
- Update Strategy: Safe update recommendations
Detailed Information
For comprehensive details, see:
cat .claude/skills/dependency-analyzer/references/audit-guide.md
cat .claude/skills/dependency-analyzer/references/optimization-strategies.md
cat .claude/skills/dependency-analyzer/references/security-best-practices.md
Usage Examples
Example 1: Full Dependency Audit
import { DependencyAnalyzer } from '@j0kz/dependency-analyzer';
const analyzer = new DependencyAnalyzer();
const report = await analyzer.audit({
checkVulnerabilities: true,
checkOutdated: true,
checkLicenses: true,
checkBundleSize: true
});
console.log(report.summary);
Example 2: Find Circular Dependencies
const circles = await analyzer.findCircularDependencies();
if (circles.length > 0) {
console.log('Circular dependencies found:', circles);
}
Configuration
{
"dependency-analyzer": {
"autoFix": false,
"severity": "moderate",
"ignoreDev": false,
"maxBundleSize": "500kb",
"allowedLicenses": ["MIT", "Apache-2.0", "BSD-3-Clause"]
}
}
Integration with CI/CD
# GitHub Actions example
- name: Dependency Audit
run: |
npm audit --audit-level=moderate
npx @j0kz/dependency-analyzer audit --fail-on-high
Notes
- Integrates with npm, yarn, and pnpm
- Caches results for faster subsequent runs
- Supports monorepo structures
- Can generate SBOM (Software Bill of Materials)
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
debug-detective
Systematic debugging approach for ANY codebase, ANY language, ANY bug type
tool-discovery
Guide for discovering and using @j0kz MCP tools efficiently through search, filtering, and progressive exploration. Use when exploring available capabilities, finding the right tool for a task, or ...
project-standardization
Guides correct usage of @j0kz/mcp-agents standardization and automation scripts including version.json single source of truth, test count automation, URL casing rules, and critical workflow pattern...
api-integration
Master third-party API integration in ANY language with best practices and patterns
documentation-generation
Documentation generation and maintenance patterns including README structure, CHANGELOG management, API documentation, wiki synchronization, and badge updates. Use when creating package docs, updat...
competitive-ads-extractor
Extracts and analyzes competitor ads from ad libraries (Facebook, LinkedIn, TikTok, Google). Use when researching competitor messaging, creative patterns, campaign strategies, or ad inspiration. Ch...
Didn't find tool you were looking for?