Dependency Auditor

Dependency Auditor

Instructions

When auditing dependencies:

1. Run security audit
2. Check for outdated packages
3. Find unused dependencies
4. Analyze bundle size impact
5. Review and update

Security Audit

# NPM audit
npm audit

# Get JSON output for processing
npm audit --json

# Fix automatically (safe fixes only)
npm audit fix

# Force fix (may have breaking changes)
npm audit fix --force

# PNPM
pnpm audit

# Yarn
yarn audit

Check Outdated Packages

# NPM
npm outdated

# Interactive update
npx npm-check-updates -i

# Update all to latest
npx npm-check-updates -u
npm install

# Check specific package
npm view <package> versions

Find Unused Dependencies

# Using depcheck
npx depcheck

# With details
npx depcheck --detailed

# Ignore patterns
npx depcheck --ignores="@types/*,eslint-*"

Common False Positives

Depcheck may flag these as unused when they're actually needed:

• @types/* packages (used by TypeScript)
• ESLint/Prettier plugins (referenced in config)
• PostCSS plugins (referenced in config)
• Next.js plugins
• Babel presets

Analyze Bundle Size