Dependency Management

Workflows

• Audit: Check for known vulnerabilities
• Update: Keep dependencies reasonably current
• Lock: Ensure reproducible builds
• Minimize: Remove unused dependencies

Security Scanning

# Node.js
npm audit
pnpm audit

# Python
pip-audit
safety check