dependency-auditor

name	dependency-auditor
description	Audit project dependencies from package.json or requirements.txt — counts packages, classifies version specifiers, and flags unpinned or risky dependencies
version	1.0.0

Usage

Run node skills/dependency-auditor/audit.js <file> via the shell tool.

Supported file types:

• package.json — analyzes npm dependencies (prod + dev), classifies version specifiers
• requirements.txt — analyzes Python packages, flags unpinned (no ==) entries

Version specifier classifications (npm):

• exact — no prefix, e.g. 4.17.23
• caret — ^ prefix, e.g. ^4.18.2 (compatible patch/minor updates)
• tilde — ~ prefix, e.g. ~1.13.5 (compatible patch updates only)
• gt/range — >, >=, <, <=, or - range
• wildcard — * or empty (unpinned, highest risk)

Examples

node skills/dependency-auditor/audit.js sample_data/package.json
node skills/dependency-auditor/audit.js sample_data/requirements.txt