Use to upgrade dependencies or toolchains — changelogs, batching, semver checks, bots, rollback.
Vet an npm package before proposing its installation. Produces a go/no-go recommendation based on Socket score, publisher, age, maintainer count, transitive dependencies, and…
Für Depatisnet: Verhandlung, Vergleich und Eskalation: entwickelt Ziel, Vergleich und Eskalation; Ergebnis: Verhandlungs- oder Eskalationslinie.
Documentation site for dependabit Use when: You need to plug in a custom or self-hosted language model as the....
Documentation site for dependabit Use when: Making authenticated GitHub API calls from the monitor or action packages....
Documentation site for dependabit Use when: Loading an existing manifest to pass to the monitor or detector..
Documentation site for dependabit Use when: Polling a set of tracked dependencies for state changes on a schedule..
Documentation site for dependabit Use when: Tracking libraries whose documentation is indexed by Context7 (e.g., React,....
Documentation site for dependabit Use when: Managing a set of plugins across the lifetime of an application..
Operational skill for Dependabot: dependabot.yml ecosystems, schedules, grouping, ignore rules, and safe auto-merge policies.
Bulk-process open dependabot PRs: audit each dependency, comment findings, merge if CI green, request rebase on conflicts or CI failures.
Handle Dependabot pull requests for dependency updates. Use when merging multiple Dependabot PRs, resolving conflicts between dependency update PRs, or when asked to review and…
Use when there are multiple open Dependabot PRs to resolve, dependency update PRs piling up, or user asks to handle/merge/triage dependabot PRs
Review and manage Dependabot PRs. Categorizes by risk, checks CI status, auto-merges safe updates, and reports issues.
Decide como declarar uma gem no Gemfile e como conduzir uma atualização de dependências. Use ao adicionar gem, mexer em restrição de versão, avaliar se um pin ainda se justifica,…
Use when reviewing dependency concerns: lockfile health, version pinning, immutable references, maintenance signals, transitive audit gates, monorepo version skew, reviewable…
Mandates the usage of UV when installing dependencies to ensure consistency and efficiency across all environments.
Map and visualize feature dependencies. Use when analyzing dependencies, identifying blockers, or creating dependency graphs.
Dependency graph visualization, circular dependency detection, CVE scanning, and license compliance
Break dependencies in legacy code to make it testable and changeable. Use when code cannot be tested or modified because of tight coupling to databases, file systems, network…
Check for required dependencies (Chrome DevTools MCP, OpenRouter API) before running commands that need them.
Use to audit and remove unused or redundant third-party dependencies from package manifests.
Use when the user asks "do I have conflicting dependency versions", "is there a diamond dependency problem", "which libraries resolve to more than one version", "check for version…
Pattern for deprecating external dependencies while maintaining backward compatibility. Trigger: removing Java/FIJI/MATLAB, deprecating optional deps
The "no invaders" gate for Synthex. The ship already carries everything it needs. NEVER add a new npm dependency, external SaaS, framework, datastore, or auth system to solve a…
Extract dependencies from package.json, requirements.txt, and pyproject.toml. Use when analyzing repo tech stacks, building dependency graphs, or matching projects by technology.
Generate dependency graphs showing import relationships between modules or plugins
Organize DI registrations using IServiceCollection extension methods. Group related services into composable Add* methods for clean Program.cs and reusable configuration — from…
Dependency injection best practices - constructor injection, composition root, lifetime management, testability, circular dependency prevention, framework independence
Add new services to DIContainer, create protocol-based implementations, set up singletons or factories for Leavn app dependency injection
Guide installation of project dependencies and toolchains. Use when a junior developer is stuck setting up the environment.
Use when when setting up HiC-Pro or similar multi-tool pipelines where tool availability and version constraints are prerequisites for downstream analysis.
Use when the user asks "what license does this library use", "is this dependency GPL", "check the license of X before I add it", "what's the SPDX id for this artifact", or wants…
Use when reviewing dependencies, package additions, transitive licenses, or release readiness for MIT compatibility and license-risk mitigation.
Version catalog strategy, dependency management, BOMs, and version constraints for Java/Gradle projects.
Manage Node.js dependencies including adding, updating, auditing, and resolving conflicts. Use when updating dependencies or resolving version conflicts.
Manage Rust and Node.js dependencies including adding, updating, auditing, and resolving conflicts. Use when updating dependencies or resolving version conflicts.
Cross-team dependency tracking with critical path analysis and Mermaid dependency graphs for program coordination.
Identifies dependencies between GitHub issues and creates appropriate cross-references. Use when you need to map issue relationships, find blockers, or organize work order based…
Scan codebase to identify opportunities to replace custom implementations with well-maintained open source libraries.
Summarize open dependency update pull requests with repo diffs, chart/package changes, rendered impact, and upstream application release impact.
Use when before running HiC-Pro or similar multi-stage pipelines on a new system or environment, especially when dependency installation is not automated (e.g., not in a conda…
Review dependency provenance and reproducibility without modifying them. Use when manifests, lockfiles, vendor state, generated dependency state, registries, fetched tools, or…
Triage dependency alerts by version, reachability and verified upgrade impact instead of blindly updating everything.
Comprehensive dependency scanning, inventory generation, and SBOM creation for migration readiness assessment
Detect new imports in modified files and auto-install missing dependencies. Works with npm, uv, pip, cargo, go mod, and other package managers.
Map, track, and manage project dependencies across teams, systems, and organizations. Identify critical path items and prevent blocking issues through proactive dependency…
Safely update dependencies with version analysis, breaking change detection, and rollback planning
Use when updating dependencies safely with changelog review, small batches, tests, and rollback. Triggers:
Smart dependency update checker with changelog summaries and breaking change detection.
Smart dependency management for any language. Auto-detects project type, applies safe updates automatically, prompts for major versions, diagnoses and fixes dependency issues.
Expert guide for dependency upgrades, breaking change migrations, codemod automation, and package audit remediation / Panduan ahli untuk upgrade dependensi, migrasi breaking…
Plan safe dependency upgrades with risk notes. Use when a mid-level developer is tasked with upgrading libraries.
Verifies a package exists before install, defending against hallucination and slopsquatting. Use when adding, recommending, or installing a package.
Graph generation rules, Mermaid syntax, critical path algorithms, and visualization best practices
DeployBot integration. Manage data, records, and automate workflows. Use when the user wants to interact with DeployBot data.
DeployHQ integration. Manage Projects, Users, Teams. Use when the user wants to interact with DeployHQ data.
Deploys deception-based honeytokens in Active Directory including fake privileged accounts with AdminCount=1,
Deploys standalone Azure Function Apps on Flex Consumption (FC1) for workloads SWA managed functions can't handle — timer triggers, queue triggers, AI workloads, long-running…
Monitor use when deploying monitoring stacks including Prometheus, Grafana, and Datadog. Trigger with phrases like "deploy monitoring stack", "setup prometheus", "configu — from…