Управление зависимостями и аудит безопасности

★ 6.8 · general

dependency-management is a Claude Code skill that covers the full lifecycle of third-party dependencies — selecting, pinning, auditing, updating, and removing them with production-grade discipline. It runs `npm audit`, `pip audit`, and Snyk scans, configures automated update workflows via Renovate and Dependabot, checks license compatibility (MIT/Apache/GPL), generates Software Bills of Materials (SBOM), and manages lockfiles. The skill also helps detect typosquatting and dependency confusion attacks, respond to CVEs and security advisories, and resolve peer dependency conflicts using npm overrides. Use it when evaluating whether to add a new package, hardening your software supply chain, or setting up CI pipelines with lockfile validation. Not intended for internal monorepo package management or publishing your own packages to npm or PyPI.