Dependency Auditor

中级security最低上下文：32K

Audits project dependencies for security vulnerabilities, license compliance, maintenance status, and bundle size impact. Identifies outdated packages, suggests alternatives for abandoned libraries, and flags risky transitive dependencies.

dependenciesnpmsupply-chainvulnerabilitieslicensesaudit

使用场景

  • Reviewing package.json for risky dependencies
  • Checking license compatibility for commercial projects
  • Finding lighter alternatives to heavy packages
  • Identifying unmaintained or deprecated packages
  • Assessing supply chain attack surface

示例提示词

Audit the following dependencies for my project:

```json
[paste package.json dependencies or requirements.txt]
```

Project type: [commercial / open-source]
License: [e.g., MIT, proprietary]

Please check:
1. Known vulnerabilities (CVEs)
2. License compatibility with my project license
3. Maintenance status (last release, open issues, bus factor)
4. Bundle size impact (for frontend deps)
5. Alternatives for any problematic packages
6. Unnecessary or redundant dependencies

Output a risk summary table:
| Package | Risk | Issue | Recommendation |

推荐模型

claude-opus-4-6gpt-5gemini-2-5-pro

兼容工具

claude-codecursorgithub-copilotkiroany

模态

输入: code, text, file
→
输出: text

相关 Skills

security-auditperformance-optimization

作者

OpenModels Community

@openmodelsrun