dependency-analysis-patterns
Dependency graph visualization, circular dependency detection, CVE scanning, and license compliance
Profile →npx skills add vibeeval/vibecosystem --skill dependency-analysis-patterns --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Dependency Analysis Patterns ## Dependency Graph Visualization ```bash # npm npx depcruise --output-type dot src/ | dot -T svg > deps.svg # Python pipdeptree --graph-output svg > deps.svg # Go go mod graph | modgraphviz | dot -T svg > deps.svg ``` ## Circular Dependency Detection ```bash # JavaScript/TypeScript npx madge --circular src/ npx dpdm --circular src/index.ts # Python pydeps --cluster --no-show src/ ``` ### Fix Strategies | Circular Tip | Çözüm | |-------------|-------| | A → B → A | Interface/port ile inversion | | A → B → C → A | Shared module extract et | | Barrel file circular | Direct import kullan | ## CVE Scanning ```bash # npm npm audit --json | jq '.vulnerabilities | to_entries[] | select(.value.severity == "critical")' # pip pip-audit --format json --desc # Go govulncheck ./... # Multi-tool trivy fs --severity CRITICAL,HIGH . ``` ### CVE Prioritization | CVSS | Severity | Aksiyon | SLA | |------|----------|---------|-----| | 9.0+ | Critical | Hotfix | 24h | | 7.0-8.9 | High | Sprint fix | 1 hafta | | 4.0-6.9 | Medium | Backlog | 1 ay | | <4.0 | Low | Track | Fırsatçı | ## License Compliance ```bash # npm npx license-checker --production --json --failOn "GPL-3.
- Dependency Graph Visualization
- Circular Dependency Detection
- Fix Strategies
- CVE Scanning
- CVE Prioritization
- License Compliance
- Update Impact Analysis
- Checklist
- Anti-Patterns
npm npx depcruise --output-type dot src/ | dot -T svg > deps.svg Python pipdeptree --graph-output svg > deps.svg Go go mod graph | modgraphviz | dot -T svg > deps.svg JavaScript/TypeScript npx madge --circular src/ npx dpdm --circular src/index.ts pydeps --cluster --no-show src/
What does the dependency-analysis-patterns skill do?
Dependency graph visualization, circular dependency detection, CVE scanning, and license compliance
How do I install it?
Run `npx skills add vibeeval/vibecosystem --skill dependency-analysis-patterns --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From vibeeval/vibecosystem, a repository with 521 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.