review-dependencies
Installation
SKILL.md
Review Dependencies
Detect package managers and discover outdated or vulnerable dependencies. Analysis only. Does not upgrade.
Step 1: Detect Package Managers
Identify which package managers are in use by searching for config files:
| Config file | Package manager | Lockfile | Ecosystem |
|---|---|---|---|
package.json |
npm / yarn / pnpm | package-lock.json / yarn.lock / pnpm-lock.yaml |
Node.js |
Package.swift, *.xcodeproj |
Swift Package Manager | Package.resolved |
Swift |
pyproject.toml, requirements.txt, setup.py |
pip / poetry / uv | poetry.lock, uv.lock |
Python |
Cargo.toml |
cargo | Cargo.lock |
Rust |
go.mod |
Go modules | go.sum |
Go |
Gemfile |
Bundler | Gemfile.lock |
Ruby |
pom.xml |
Maven | — | Java |
build.gradle, build.gradle.kts |
Gradle | gradle.lockfile |
Java/Kotlin |