Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →tobihagemann/review-dependencies
Detect package managers and discover outdated or vulnerable dependencies. Returns structured findings without upgrading.
Passed 14 of 20 test cases with the skill, and 10 of 20 without it.
and 7 more in the full report
8 fixed10 passed either way5 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
In a repository containing both `package.json` and `pnpm-lock.yaml`, which package manager variant should be selected, and what default discovery command should be executed?
| Checked | Without skill | With skill |
|---|---|---|
| Identifies pnpm as the package manager variant rather than npm. | Passed | Passed |
| Specifies pnpm outdated or ncu --format group as the discovery command. | Missed | Passed |
The instructions your model reads when the skill loads.
Detect package managers and discover outdated or vulnerable dependencies. Analysis only. Does not upgrade.
Identify which package managers are in use by searching for config files:
| Config file | Package manager | Lockfile | Ecosystem |
|---|---|---|---|
package.json | npm / yarn / pnpm | package-lock.json / yarn.lock / pnpm-lock.yaml | Node.js |
Package.swift, *.xcodeproj | Swift Package Manager | Package.resolved | Swift |
pyproject.toml, requirements.txt, setup.py | pip / poetry / uv | poetry.lock, uv.lock | Python |
Cargo.toml | cargo | Cargo.lock | Rust |
go.mod | Go modules | go.sum | Go |
Gemfile | Bundler | Gemfile.lock | Ruby |
pom.xml | Maven | — | Java |
build.gradle, build.gradle.kts | Gradle | gradle.lockfile | Java/Kotlin |
Swift dependencies can live in Package.swift or be configured directly in the Xcode project file (.xcodeproj/.xcworkspace). For Xcode-managed dependencies, inspect the project's package references.
Detection steps:
yarn.lock → yarn, pnpm-lock.yaml → pnpm)package.json files): use request_user_input to let the user pick one (Codex request_user_input choices are mutually exclusive). For an "all of them" workflow, ask follow-up free-form input or run the review per instance.request_user_input to let the user pick oneRun the appropriate discovery command to find available updates:
| Package manager | Discovery command | Notes |
|---|---|---|
| npm | ncu --format group | Requires npm-check-updates. Suggest npm install -g npm-check-updates if missing. |
| yarn | ncu --format group or yarn upgrade-interactive | |
| pnpm | ncu --format group or pnpm outdated | |
| Swift PM | Check resolved versions in Package.resolved against latest releases via web search | No built-in outdated command. Read Package.swift or inspect the Xcode project to identify dependencies and their current version constraints. |
| pip | pip list --outdated |
test cases passed, vs 10 / 20 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.