deps-audit

Audit project dependencies and produce a categorized report with a prioritized upgrade plan. Surface vulnerabilities, unused packages, and bundle bloat.

Step 1: Read Package Manifest

Read package.json (or the specified manifest file). Catalog:

• All dependencies and their pinned/range versions
• All devDependencies and their pinned/range versions
• Any peerDependencies or optionalDependencies
• Package manager in use (npm, pnpm, yarn) from lock file presence
• Node/runtime engine constraints if declared

Step 2: Check for Vulnerabilities

Run the appropriate audit command for the detected package manager: