mcpField
D
dependency-check

dependency-check

github.com/ruvnetSecurity80.0k748 installsUpdated today
Repository

About dependency-check

dependency-check is a skill for reviewing dependencies for CVEs and outdated packages. It provides severity-based remediation guidance and an auto-fix command, with an MCP hook for dispatching audits.

Key features

  1. 01List CVEs by severity
  2. 02Check outdated packages
  3. 03Scan dependencies
  4. 04Auto-fix dependency findings
  5. 05Severity-based remediation guidance
  6. 06Dispatch audits through MCP

Use cases

  1. 01Assess dependency CVEs before deployment
  2. 02Identify packages needing updates
  3. 03Run a dependency audit continuously

MCP support

An MCP worker-dispatch hook can trigger continuous dependency audits.

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/ruvnet/ruflo --skill dependency-check

After installing, type/dependency-checkin Claude Code to confirm it loaded.

Details

From the project README

Check dependencies for CVEs and outdated packages:

npx @claude-flow/cli@latest security cve --list
npx @claude-flow/cli@latest security cve --severity critical
npx @claude-flow/cli@latest security scan --type deps --depth deep
npm audit --json
SeverityAction
criticalBlock deployment, fix immediately
highFix before next release
moderateSchedule fix within sprint
lowTrack in backlog

Auto-fix via the scan command: npx @claude-flow/cli@latest security scan --type deps --fix

For continuous monitoring, dispatch via MCP: mcp__plugin_ruflo-core_ruflo__hooks_worker-dispatch({ trigger: "audit" })

Comments

Markdown supported