Dependency Audit Skill

Comprehensive npm dependency security and health check.

Security Audit

1. Run npm audit:

   bashCopy

   npm audit
   

2. For detailed JSON output:

   bashCopy

   npm audit --json
   

3. Fix automatically if safe:

   bashCopy

   npm audit fix
   

4. For breaking changes (be careful):

   bashCopy

   npm audit fix --force
   

Outdated Packages

1. Check for outdated:

   bashCopy

   npm outdated
   

2. Update specific package:

   bashCopy

   npm update <package-name>
   

3. Update to latest (major versions):

   bashCopy

   npx npm-check-updates -u
   npm install
   

License Check

1. List all licenses:

   bashCopy

   npx license-checker --summary
   

2. Check for problematic licenses:

   bashCopy

   npx license-checker --onlyAllow "MIT;Apache-2.0;BSD-2-Clause;BSD-3-Clause;ISC"
   

Bundle Analysis

1. Analyze bundle size:

   bashCopy

   npx source-map-explorer dist/**/*.js
   

2. Find duplicate dependencies:

   bashCopy

   npx npm-dedupe
   

Output Report

## Dependency Audit Report

### Security

- Critical: X
- High: X
- Medium: X
- Low: X

### Outdated Packages

| Package | Current | Wanted | Latest |
| ------- | ------- | ------ | ------ |
| ...     | ...     | ...    | ...    |

### Actions Required

1. [Action with priority]
2. [Action with priority]