ourfuturehealth

Resolve dependency vulnerability alerts in package-managed repositories by identifying the vulnerable package and target fixed version, finding every relevant nested lockfile, determining the package manager and matching package.json remediation field, updating overrides or resolutions, regenerating lockfiles one affected directory at a time, and reporting all changed directories. Use when the user mentions a vulnerable npm/package dependency, dependency bump, package-manager override, lockfile update, or security alert remediation.