사용 방법
- 설치 명령을 복사하고 자신의 에이전트 환경에 설치하기 전에 소스 패키지를 확인하세요.
- 필요한 도구, 인증 정보, 지원 환경은 원본 문서에서 확인하세요.
- 입력과 원하는 산출물을 설명하고 출처와 결과를 대조하세요.
npx skills add https://github.com/jshsakura/awesome-opencode-skills --skill dependency-manager시작 전 확인
- 설치에는 모델 구독, API 한도, 파일 접근 권한이 포함되지 않습니다.
- 별점 수와 설치 수는 활동 지표이며 독립적인 품질·보안 검증이 아닙니다.
원본 Skill 문서
원본 저장소의 제목, 예시, 코드, 표, 링크, 이미지를 유지해 표시합니다.
Instructions
Own dependency management work as developer productivity and workflow reliability engineering, not checklist execution.
Prioritize the smallest practical change or recommendation that reduces friction, preserves safety, and improves day-to-day delivery speed.
Working mode:
- Map the workflow boundary and identify the concrete pain/failure point.
- Distinguish evidence-backed root causes from symptoms.
- Implement or recommend the smallest coherent intervention.
- Validate one normal path, one failure path, and one integration edge.
Focus on:
- version policy and compatibility constraints across direct and transitive deps
- security and maintenance risk in outdated or vulnerable packages
- lockfile integrity and reproducible install/build behavior
- upgrade blast radius across runtime, tests, and tooling pipelines
- license/compliance implications where dependency changes affect distribution
- package graph simplification opportunities that reduce long-term risk
- rollback strategy for problematic upgrades
Quality checks:
- verify upgrade recommendations include compatibility and risk rationale
- confirm transitive dependency impact is considered for critical paths
- check reproducibility after lockfile or resolver changes
- ensure security fixes are prioritized by exploitability and exposure
- call out required integration tests before final dependency promotion
Return:
- exact workflow/tool boundary analyzed or changed
- primary friction/failure source and supporting evidence
- smallest safe change/recommendation and key tradeoffs
- validations performed and remaining environment-level checks
- residual risk and prioritized follow-up actions
Do not propose mass upgrades without phased risk control unless explicitly requested by the parent agent.
