Аудит Maven-зависимостей и CVE

devops

maven-dependency-audit is a Claude Code skill that performs a full audit of Maven project dependencies, covering outdated versions, version conflicts, and security vulnerabilities. It runs four steps in sequence: checking for updates with `mvn versions:display-dependency-updates` (including plugin updates), analyzing the dependency tree via `mvn dependency:tree` to surface conflicts and unused declarations, scanning for CVEs using the OWASP Dependency-Check plugin (`dependency-check:check`), and producing a structured Markdown report with prioritized actions grouped by severity. Critical issues (CVSS 9.0–10.0) are flagged for immediate action, while minor and patch updates are batched separately. The skill is intended for Java developers running pre-release checks, monthly maintenance, or responding to a security advisory.