Skip to the rows

agentsclimarketplace

Dependency updater

Skill 7ucg/baron-forge/plugins/baron-forge/skills/dependency-updater

Operator-grade full-stack coder, debugger and reverse-engineering rig: smali/java/kotlin/dart/flutter/react/.so/native, rust/c/node, ws/stanza/xmpp/protobuf/graphql, libsignal & messaging-protocol analysis (WhatsApp/Signal), media/VoIP, plus persistent cross-session memory.

Install

npx -y skills add 7ucg/baron-forge --skill dependency-updater

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Smart dependency management for any language. Auto-detects project type, applies safe updates automatically, prompts for major versions, diagnoses and fixes dependency issues.

The file declares its own license as MIT. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

3.5 KB, 888 tokens by cl100k_base, as published. Nobody here has run it

Dependency Updater

Supported languages

Language	Package file	Update tool	Audit
Node.js	package.json	`taze`	`npm audit`
Python	requirements.txt / pyproject.toml	`pip-review`	`pip-audit`
Go	go.mod	`go get -u`	`govulncheck`
Rust	Cargo.toml	`cargo update`	`cargo audit`
Ruby	Gemfile	`bundle update`	`bundle audit`
Java	pom.xml / build.gradle	`mvn versions:*`	`mvn dependency-check:check`
.NET	*.csproj	`dotnet outdated`	`dotnet list package --vulnerable`

Update policy

Type	Range change	Action
PATCH	`x.y.z → x.y.Z`	Auto-apply
MINOR	`x.y.z → x.Y.0`	Auto-apply
MAJOR	`x.y.z → X.0.0`	Prompt user individually
Fixed (no `^`/`~`)	—	Skip (intentionally pinned)

Workflow

Detect — scan for package files; identify package manager
Prerequisites — verify tools are installed; suggest install if missing
Scan — run language-specific outdated check; categorize MAJOR/MINOR/PATCH/Fixed
Auto-apply — apply MINOR + PATCH; report what changed
Prompt — AskUserQuestion for each MAJOR individually (current → new)
Apply approved majors
Finalize — run install command + security audit

Commands by language

Node.js

taze                              # scan
taze minor --write                # apply minor+patch
taze major --write --include pkg  # apply approved majors
npm audit && npm audit fix        # security
taze -r                           # monorepo

Python

pip list --outdated
pip install --upgrade <pkg>
pip-audit

Go

go list -m -u all
go get -u ./...
go mod tidy
govulncheck ./...

Rust

cargo outdated
cargo update
cargo audit

Ruby

bundle outdated
bundle update
bundle audit

Java (Maven)

mvn versions:display-dependency-updates
mvn versions:use-latest-releases
mvn dependency-check:check

.NET

dotnet list package --outdated
dotnet add package <PackageName>
dotnet list package --vulnerable

Diagnosis

Issue	Symptoms	Fix
Version conflict	"Cannot resolve dependency tree"	Clean install; use overrides/resolutions
Peer dependency	"Peer dependency not satisfied"	Install required peer version
Security vuln	`npm audit` shows issues	`npm audit fix` or manual update
Unused deps	Bloated bundle	`depcheck` (Node) or equivalent
Duplicate deps	Multiple versions	`npm dedupe` or equivalent

Emergency reset (Node): rm -rf node_modules package-lock.json && npm cache clean --force && npm install

Security severity response

Severity	Action
Critical	Fix immediately
High	Fix within 24h
Moderate	Fix within 1 week
Low	Fix in next release

Anti-patterns

Don't update fixed versions (intentionally pinned — skip them)
Don't auto-apply MAJOR (breaking changes — prompt individually)
Don't skip lock files (irreproducible builds)
Don't ignore security alerts

Scripts

Script	Purpose
`scripts/check-tool.sh`	Verify tool is installed
`scripts/run-taze.sh`	Run taze with proper flags

Keep looking

Skills are one crate of 328,083. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.