Agent skill · software engineering · aj-geddes
dependency-management
Manage project dependencies across languages including npm install, package versioning, dependency conflicts, security scanning, and lock files. Use when dealing with dependencies, version pinning, semantic versioning, or resolving conflicts.
Why this skill is useful
Provides domain-specific knowledge on managing dependencies across multiple programming languages, including security auditing and version control practices.
What it needs
Requires npm installed locally. About 2k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Dependency Management Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Comprehensive dependency management across JavaScript/Node.js, Python, Ruby, Java, and other ecosystems. Covers version control, conflict resolution, security auditing, and best practices for maintaining healthy dependencies. When to Use Installing or updating project dependencies Resolving version conflicts Auditing security vulnerabilities Managing lock files (package-lock.json, Gemfile.lock, etc.) Implementing semantic versioning Setting up monorepo dependencies Optimizing dependency trees Managing peer dependencies Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Package Manager Basics Package Manager Basics Semantic Versioning (SemVer) Semantic Versioning (SemVer) Dependency Lock Files Dependency Lock Files Resolving Dependency Conflicts Resolving Dependency Conflicts Security Vulnerability Management Security Vulnerability Management Monorepo Dependency Management Monorepo Dependency Management Peer Dependencies Peer Dependencies Performance Optimization Performance Optimization CI/CD Best Practices CI/CD Best Practices Dependency Update Strategies Dependency Update Strategies Best Practices ✅ DO Commit lock files to version control Use npm ci or equivalent in CI/CD pipelines Regular dependency audits (weekly/monthly) Keep dependencies up-to-date (automate with Dependabot) Use exact versions for critical dependencies Document why specific versions are pinned Test after updating dependencies Use semantic versioning correctly Minimize dependency count Review dependency licenses ❌ DON'T Manually edit lock files Mix package managers (npm + yarn in same project) Use npm install in CI/CD (use npm ci) Ignore security vulnerabilities Use wildcards (\) for versions Install packages globally when local install is possible Commit nodemodules to git Use latest tag in production …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/dependency-management