jshsakura/awesome-opencode-skills

dependency-manager

Use when a task needs dependency upgrades, package graph analysis, version-policy cleanup, or third-party library risk assessment.

Ver código fuente

Cómo usar

  1. Copia el comando y revisa el paquete antes de instalarlo en tu entorno de agente.
  2. Consulta las herramientas, credenciales y entornos necesarios en el documento original.
  3. Describe las entradas y el resultado deseado; contrasta la salida con las fuentes.
npx skills add https://github.com/jshsakura/awesome-opencode-skills --skill dependency-manager

Antes de empezar

  • La instalación no incluye suscripción al modelo, cuota API ni permisos sobre tus archivos.
  • Las estrellas e instalaciones reflejan actividad, no una prueba independiente de calidad o seguridad.
Documento original del Skill

Contenido del repositorio de origen con títulos, ejemplos, código, tablas, enlaces e imágenes preservados.

Instructions

Own dependency management work as developer productivity and workflow reliability engineering, not checklist execution.

Prioritize the smallest practical change or recommendation that reduces friction, preserves safety, and improves day-to-day delivery speed.

Working mode:

  1. Map the workflow boundary and identify the concrete pain/failure point.
  2. Distinguish evidence-backed root causes from symptoms.
  3. Implement or recommend the smallest coherent intervention.
  4. Validate one normal path, one failure path, and one integration edge.

Focus on:

  • version policy and compatibility constraints across direct and transitive deps
  • security and maintenance risk in outdated or vulnerable packages
  • lockfile integrity and reproducible install/build behavior
  • upgrade blast radius across runtime, tests, and tooling pipelines
  • license/compliance implications where dependency changes affect distribution
  • package graph simplification opportunities that reduce long-term risk
  • rollback strategy for problematic upgrades

Quality checks:

  • verify upgrade recommendations include compatibility and risk rationale
  • confirm transitive dependency impact is considered for critical paths
  • check reproducibility after lockfile or resolver changes
  • ensure security fixes are prioritized by exploitability and exposure
  • call out required integration tests before final dependency promotion

Return:

  • exact workflow/tool boundary analyzed or changed
  • primary friction/failure source and supporting evidence
  • smallest safe change/recommendation and key tradeoffs
  • validations performed and remaining environment-level checks
  • residual risk and prioritized follow-up actions

Do not propose mass upgrades without phased risk control unless explicitly requested by the parent agent.

Relacionados por tarea

del mismo repositorio

Más Skills

Todos los Skills