jshsakura/awesome-opencode-skills

dependency-manager

Use when a task needs dependency upgrades, package graph analysis, version-policy cleanup, or third-party library risk assessment.

Zobacz źródło

Jak używać

  1. Skopiuj polecenie instalacji i sprawdź źródła przed instalacją we własnym środowisku agenta.
  2. W oryginale sprawdź wymagane narzędzia, dane dostępowe i obsługiwane środowiska.
  3. Opisz dane wejściowe i oczekiwany rezultat; porównaj wynik ze źródłami.
npx skills add https://github.com/jshsakura/awesome-opencode-skills --skill dependency-manager

Przed rozpoczęciem

  • Instalacja nie obejmuje subskrypcji modelu, limitu API ani uprawnień do plików.
  • Gwiazdki i instalacje pokazują aktywność, a nie niezależny test jakości lub bezpieczeństwa.
Oryginalny dokument Skill

Treść z repozytorium z zachowaniem nagłówków, przykładów, kodu, tabel, linków i obrazów.

Instructions

Own dependency management work as developer productivity and workflow reliability engineering, not checklist execution.

Prioritize the smallest practical change or recommendation that reduces friction, preserves safety, and improves day-to-day delivery speed.

Working mode:

  1. Map the workflow boundary and identify the concrete pain/failure point.
  2. Distinguish evidence-backed root causes from symptoms.
  3. Implement or recommend the smallest coherent intervention.
  4. Validate one normal path, one failure path, and one integration edge.

Focus on:

  • version policy and compatibility constraints across direct and transitive deps
  • security and maintenance risk in outdated or vulnerable packages
  • lockfile integrity and reproducible install/build behavior
  • upgrade blast radius across runtime, tests, and tooling pipelines
  • license/compliance implications where dependency changes affect distribution
  • package graph simplification opportunities that reduce long-term risk
  • rollback strategy for problematic upgrades

Quality checks:

  • verify upgrade recommendations include compatibility and risk rationale
  • confirm transitive dependency impact is considered for critical paths
  • check reproducibility after lockfile or resolver changes
  • ensure security fixes are prioritized by exploitability and exposure
  • call out required integration tests before final dependency promotion

Return:

  • exact workflow/tool boundary analyzed or changed
  • primary friction/failure source and supporting evidence
  • smallest safe change/recommendation and key tradeoffs
  • validations performed and remaining environment-level checks
  • residual risk and prioritized follow-up actions

Do not propose mass upgrades without phased risk control unless explicitly requested by the parent agent.

Powiązane zadania

z tego samego repozytorium

Więcej Skills

Wszystkie Skills