dependency-audit Weapon

Procedural arsenal for dependency-audit-guardian, the supply-chain security specialist of the Guild Guild. This weapon encodes the 2026-current toolchain decision matrix, vulnerability triage workflow, SBOM generation pipeline, lockfile discipline checklist, and provenance verification guide for npm, PyPI, and Cargo ecosystems.

First action when this weapon is loaded: Read guides/00-scanner-decision-matrix.md to orient to the toolchain landscape before doing anything else. Every other guide assumes you have read that decision matrix.

When this weapon applies

Load this weapon when dependency-audit-guardian is invoked. Typical triggers: