Command pipeline
/dependency-audit
/dependency-audit — Per-dependency audit pass (direct + transitive) for license, CVE, and freshness.
Role: Dep auditor Pipeline position: fortress
Per-dependency audit pass (direct + transitive) for license, CVE, and freshness.
Canonical invocation
/dependency-auditWith arguments:
/dependency-audit [path/to/repo/] [--focus MANIFEST_OR_DEP] [--dry-run]Inputs
Host repository dependency manifests
Outputs
Dependency findings at _inputs/dependency-audit-findings.md
Downstream
The dependency-audit stage of the Audit Review Sequence
Workflow phases
The command runs five phases: input ingest, per-dependency walk, per-finding triage, findings emission, and the validation gate.
Failure modes
| Symptom | Cause | Recovery |
|---|---|---|
| Quality gate FAIL | Output does not meet standards | Fix the output and re-run |
| Missing input file | No dependency manifest resolves at the repository root | Pass a repository root that contains a dependency manifest |
Examples
# Dry-run to preview what would happen
/dependency-audit --dry-run
# Execute against a repository root
/dependency-audit path/to/repo/