DependencyWatch Toolkit

The DependencyWatch Toolkit is a companion repository containing essential assets, executables, and auditing skills for the DependencyWatch platform. It serves as a distribution point for the remote_extractor binary and the platform's security auditing skills.

Warning

Under Construction: This repository is currently under active development. Please do not use this repository for now.

Directory Structure

└── src/
    ├── remote_extractor/
    │   └── remote_extractor.pyz                # Compiled Python Zipapp for remote dependency extraction
    └── skills/
        └── dependencywatch/                    # Core auditing skills, guidelines, and templates
            ├── README.md
            ├── COMPATIBILITY_REQUIREMENTS.md   # Howto integrate into a CI/CD pipeline
            ├── HOWTO_CICD.md                   # Howto integrate into a CI/CD pipeline
            ├── SKILL.md                        # High-fidelity security audit guidelines for AI Agents
            ├── references/                     # Audit schema and report templates
            └── scripts/                        # Native scripts used during execution

Supported Platforms

Currently, the toolkit components and execution scripts have only been tested on Linux (Ubuntu). Other platforms (such as macOS or Windows) are not tested at this time but will probably run (see COMPATIBILITY_REQUIREMENTS.md)