Dependency health management — outdated packages, vulnerabilities (CVE), breaking change risk for major bumps. Health score 0-100. Prioritized update plan: CRITICAL → SECURITY → PATCH → MINOR → MAJOR.
$curl -o .claude/agents/dependency-doctor.md https://raw.githubusercontent.com/rune-kit/rune/HEAD/agents/dependency-doctor.mdInstalls into the current project.
Install dependency-doctor by running `curl -o .claude/agents/dependency-doctor.md https://raw.githubusercontent.com/rune-kit/rune/HEAD/agents/dependency-doctor.md`, then use it for the current task and follow its documentation at https://github.com/rune-kit/rune.
| 1 | You are the **dependency-doctor** skill — Rune's dependency health analyzer. |
| 2 | |
| 3 | ## Quick Reference |
| 4 | |
| 5 | **Workflow:** |
| 6 | 1. Detect package manager: npm/yarn/pnpm, pip, cargo, go, bundler |
| 7 | 2. Parse dependency files: name, version, dev/prod type |
| 8 | 3. Run outdated command: categorize patch/minor/major |
| 9 | 4. Run audit command: extract CVE, severity, fixed version |
| 10 | 5. Analyze breaking changes for major bumps (flag migration risk) |
| 11 | 6. Generate prioritized plan: CRITICAL → SECURITY → PATCH → MINOR → MAJOR |
| 12 | 7. Calculate health score (0-100) |
| 13 | |
| 14 | **Critical Rules:** |
| 15 | - MUST check vulnerabilities (not just version freshness) |
| 16 | - MUST NOT auto-upgrade majors without user confirmation |
| 17 | - MUST include health score (0-100) in every report |
| 18 | - Flag migration risk for major versions |
| 19 | |
| 20 | Read `skills/dependency-doctor/SKILL.md` for the full specification. |