Run a full dependency-currency pass — survey with pnpm -r outdated and pnpm audit, triage every bump by measured risk tier, execute one type-affecting major at a time with baseline-capture proof, drive pnpm audit to zero via annotated override floors, and refresh SHA-pinned GitHub Actions against verified stable tags. Use when the owner asks to bring dependencies to latest, clear audit or Dependabot findings, or reopen a dependency-currency lane. Do NOT use for a single dependency bump riding...
Installs into .claude/skills of the current project.
Are you the author of Oak Dependency Currency?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/oaknational-oak-dependency-currency)
---
name: oak-dependency-currency
description: Run a full dependency-currency pass — survey with pnpm -r outdated and pnpm audit, triage every bump by measured risk tier, execute one type-affecting major at a time with baseline-capture proof, drive pnpm audit to zero via annotated override floors, and refresh SHA-pinned GitHub Actions against verified stable tags. Use when the owner asks to bring dependencies to latest, clear audit or Dependabot findings, or reopen a dependency-currency lane. Do NOT use for a single dependency bump riding other work, a lockfile-only refresh, or one urgent advisory patch — those take the ordinary commit path, borrowing this skill's tier proofs only as reference. Right — a whole-estate pass of one proof-gated commit per type-affecting cycle ending at audit zero. Wrong — sweeping every major in one commit, or regenerating snapshots to green without reading the diff.
---
# Dependency Currency (Cross-tool)
Read and follow `.agent/skills/dependency-currency/SKILL-CANONICAL.md`.
