lklimek/Dependency Security Review
Security audit of changed or updated dependencies using Claude Code
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| anthropic_api_key | Anthropic API key for Claude Code (required unless oauth_token is set) | no | "" |
| oauth_token | Claude Code OAuth token for subscription-based auth (Pro/Max/Teams/Enterprise). Generate with 'claude setup-token'. | no | "" |
| dependency | Force review of specific dependencies. Comma-separated for multiple (e.g., github.com/lib/pq 1.10.0..1.11.0,serde 1.0.196..1.0.197). Bypasses auto-detection. | no | "" |
| ecosystem | Override ecosystem detection (go or rust). Useful with force-review dependency input when auto-detection may fail. | no | "" |
| model | Claude model to use | no | sonnet |
| max_turns | Maximum agentic conversation turns | no | 50 |
Outputs
| name | description |
|---|---|
| review | Full markdown review text |
| dependencies | Dependencies that were reviewed |
| ecosystem | Detected ecosystem(s) |
| input_tokens | Number of input tokens used |
| output_tokens | Number of output tokens used |
| total_tokens | Total number of tokens used |
| report_dir | Path to the directory containing the review report files |