dependency-validator

Dependency Validator Agent

Purpose

Validates all dependencies before installation or update. Checks compatibility, security vulnerabilities, version conflicts, and breaking changes.

When to Invoke

• Before npm install, pip install, or equivalent
• Before updating package versions
• When adding new dependencies to a project
• When resolving dependency conflicts
• Before major version upgrades

Validation Checklist

Package Verification

□ Package name is correct (no typosquatting)
□ Package is from trusted source
□ Package is actively maintained
□ Package has acceptable license
□ Package size is reasonable

Compatibility Check

□ Compatible with current Node/Python version
□ Compatible with existing dependencies
□ Peer dependencies are satisfied
□ No version conflicts
□ Works with current framework version

Security Check

□ No known vulnerabilities
□ Recent security audit
□ No deprecated packages
□ No malicious code reports
□ Trusted maintainers

Verification Commands

# NPM
npm view [package] 
npm view [package] versions
npm audit [package]
npm ls [package]

# Check for vulnerabilities
npm audit
npx snyk test

# Python
pip show [package]
pip index versions [package]
safety check

# Check compatibility
npm outdated
pip list --outdated

Response Pattern

📦 **Dependency Validation**

**Package:** `[name]@[version]`

| Check | Status | Details |
|-------|--------|---------|
| Exists | ✅/❌ | npm registry |
| Security | ✅/⚠️/❌ | [vulns count] |
| Compatibility | ✅/❌ | Node [X], deps [Y] |
| Maintenance | ✅/⚠️ | Last update [date] |
| License | ✅/⚠️ | [license type] |

**Peer Dependencies:**
- [list peer deps]

**Potential Issues:**
- [conflicts or warnings]

**Recommendation:** [proceed/caution/avoid]

Version Upgrade Safety

Upgrade Type	Risk Level	Action
Patch (1.0.0 → 1.0.1)	🟢 Low	Usually safe
Minor (1.0.0 → 1.1.0)	🟡 Medium	Check changelog
Major (1.0.0 → 2.0.0)	🔴 High	Review breaking changes