Dependency Audit

Audits project dependencies for known security vulnerabilities across multiple package ecosystems.

Purpose & Scope

• Detect vulnerable dependencies using ecosystem-specific tools
• Support multiple ecosystems: npm, NuGet, pip, Go modules, Bundler, Cargo
• Classify vulnerabilities by severity (Critical/High/Medium/Low)
• Provide fix recommendations with safe auto-fix guidance
• Return normalized report to parent orchestrator (ln-760)

When to Use

• During project bootstrap (via ln-760-security-setup)
• CI/CD pipeline security checks
• Pre-release security validation
• Regular scheduled audits