Dependency Audit
Review your project dependencies for security vulnerabilities, licenses, and freshness.
Prompt template
Conduct a comprehensive dependency audit for the following project: **Project Configuration:** ```[FORMAT: package.json/requirements.txt/Cargo.toml/etc.] [INSERT DEPENDENCY FILE HERE] ``` **Please analyze:** 1. **Security:** Known vulnerabilities (CVEs) in used versions 2. **Freshness:** Which dependencies are outdated? How big are the version gaps? 3. **Licenses:** License compatibility of all dependencies with [PROJECT LICENSE] 4. **Bundle Size:** Which dependencies are disproportionately large? 5. **Alternatives:** Are there lighter or better-maintained alternatives? 6. **Redundancy:** Are there overlapping dependencies that can be consolidated? 7. **Transitive Dependencies:** Risks from indirect dependencies **Output Format:** Create a table with: Package | Current Version | Latest Version | Vulnerabilities | License | Recommendation **Update Plan:** Prioritized plan for updates with notes on breaking changes.
Replace placeholders in [square brackets]: [FORMAT: package.json/requirements.txt/Cargo.toml/etc.][INSERT DEPENDENCY FILE HERE][PROJECT LICENSE]
How to use this template
Copy the prompt, replace the placeholders in square brackets with your details and paste it into the AI assistant of your choice. The more precise your details, the better the result.
Tips for better results
- Include your complete dependency file
- Specify your project license for compatibility checking
- Ask for an automated update workflow with Renovate/Dependabot
- Request a lock file analysis for transitive dependencies
Suitable open models
The selection names current open models as a starting point for your own tests. It is not a measurement for this template.
Keywords: #dependencies #security #audit #maintenance