dev-dependency-management
Installation
SKILL.md
Dependency Management
Use this skill for package-manager choice, lockfile policy, update strategy, supply-chain controls, and dependency hygiene across common ecosystems. It owns reproducibility and security defaults, not framework-specific app architecture.
Quick Reference
| Task | Use |
|---|---|
| Ecosystem defaults and package-manager choice | references/ecosystem-guides.md |
| Lockfiles and CI install policy | references/lockfile-management.md |
| Security scanning, SBOMs, and provenance | references/security-scanning.md, assets/automation/template-supply-chain-security.md, assets/automation/template-sbom-vuln-triage-checklist.md |
| Monorepos and workspace policy | references/monorepo-patterns.md, assets/nodejs/pnpm-workspace-template.yaml |
| Update strategy and rollback | references/update-strategies.md, assets/automation/template-dependency-upgrade-playbook.md |
| Add-or-avoid dependency decision | references/dependency-selection-guide.md, references/transitive-dependencies.md |
| Audit script | python3 scripts/dep_auditor.py --help |