deps-doctor

Audit, update, and secure project dependencies across npm, pnpm, Yarn, pip, Pipenv, Poetry, uv, Go, Cargo, Bundler, Composer, NuGet, Maven, Gradle, Swift, pub, and Hex, plus Docker base images, GitHub Actions, Terraform, and dev container features. Finds outdated, unused, and undeclared packages; applies updates; withholds releases too new to have been vetted; ranks vulnerabilities by exploitation evidence; screens supply-chain risk; fixes breaking changes forward; and verifies builds and tests. Use when the user says "dep doctor", "dependency doctor", "update dependencies", "upgrade packages", "outdated packages", "dependency audit", "security patches", "CVE remediation", or "deps". Do NOT use for adding a single new package, general code refactoring, a source-code security review, or fixing a build unrelated to dependency changes.