Audit Dependencies
Periodic workflow for reviewing dependency health and security
CLAUDE.md
When auditing project dependencies:
- Run the security audit tool:
npm audit,pip audit,cargo audit, or equivalent. - Fix or update packages with critical or high vulnerabilities immediately.
- Check for deprecated packages. Find maintained alternatives.
- Check for unused dependencies. Remove any that aren’t imported anywhere.
- Check for outdated dependencies. Note which are more than 2 major versions behind.
- Create issues or PRs for each upgrade needed, prioritized by security risk.
- Run the full test suite after each update to verify compatibility.
Copy this workflow into your CLAUDE.md or agent config file so your agent follows this process automatically.