/

dependency-hygiene

Cursor Rule

Proactive dependency guidance when editing package manifests. Suggests security checks before adding or updating dependencies.

AI-powered dependency intelligence. Check vulnerabilities, find safer versions, and make better dependency decisions using Sonatype's component data.

Created by SonatypeView Source

dependency-hygieneProactive dependency guidance when editing package manifests. Suggests security checks before adding or updating dependencies.

security-first-depsSecurity-focused dependency selection guidance. Prioritizes secure, well-maintained packages with compatible licenses.

dependency-advisorSpecialized agent for dependency decisions. Use when evaluating multiple dependency options, comparing alternatives, planning upgrades, or investigating supply chain security issues.

audit-dependenciesComprehensive security audit of all project dependencies. Scans package manifests and reports vulnerabilities, license issues, and quality concerns prioritized by severity.

check-dependencyAnalyze a dependency for vulnerabilities, license issues, and quality metrics using Sonatype Guide. Use when evaluating a specific package before adding it to your project or when investigating a known dependency.

find-safer-versionFind recommended replacement versions for a dependency ranked by Developer Trust Score. Use when upgrading dependencies or looking for more secure alternatives.