{"actions":{"bootstrapAndRun":{"effect":"installs rote if missing, inspects, prepares, and asks before running","href":"https://play.modiqo.ai/install?play=shashankinguva/dependency-vulnerability-audit@0.0.1","method":"GET","rel":"https://rote.dev/rels/bootstrap-and-run","requiresConsent":true,"responseMediaType":"text/x-shellscript"},"inspect":{"command":"rote play inspect https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1","effect":"read-only"},"installCliOnly":{"effect":"installs the rote CLI, nothing else","href":"https://play.modiqo.ai/install","method":"GET","rel":"https://rote.dev/rels/install-cli","requiresConsent":true,"responseMediaType":"text/x-shellscript"},"run":{"command":"rote play run https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1","effect":"executes the play locally after consent","headless":{"approvalAssertion":"--yes","approvalRequiredBeforeInvocation":true,"commandTemplate":"rote play run https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1 <name=value...> --yes","stdinPolicy":"never pipe input to automate the interactive Ready selector"},"requiresConsent":true}},"description":"Scans a repo for outdated/vulnerable npm and pip dependencies, cross-references latest versions (npm registry / PyPI) and known CVEs (OSV.dev), and outputs a prioritized upgrade list — fix now for actual vulnerabilities, plan migration for major-version-behind-but-safe packages.","distribution":{"digest":"sha256:d95f2cb808067e5482cfecf5a9e12983fc7b87b785eb19d95f5748d2c0fdcb17","mediaType":"application/vnd.modiqo.rote-flow","size":6895,"verifiedBy":"rote verifies the downloaded archive against this digest before it runs"},"effects":{"credentialsProvidedBy":"runner","credentialsRemainLocal":true,"declaredWrites":[],"publisherReceivesCredentials":false},"id":"https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1","inputPolicy":{"optionalWithDefault":"show_default_and_accept_override","optionalWithoutDefault":"omit_unless_supplied","required":"ask","secrets":"collect_locally_outside_conversation"},"links":{"docs":"https://rote.dev","page":"https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1","protocol":"https://play.modiqo.ai/.well-known/rote","self":"https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1.json"},"name":"dependency-vulnerability-audit","owner":{"kind":"user","slug":"shashankinguva"},"parameters":[{"default":".","description":"Path to the repo to audit. Relative paths resolve against the play's working directory.","input":{"allowCustom":true,"choices":[],"label":"Repo path"},"name":"repo_path","required":false,"type":"string"},{"default":"80","description":"Maximum number of distinct direct dependencies to check (bounds npm registry/PyPI/OSV.dev calls).","input":{"allowCustom":true,"choices":[],"label":"Max packages"},"name":"max_packages","required":false,"type":"string"}],"preparation":[{"action":{"command":"rote play inspect https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1 --json","effect":"read-only"},"step":1,"type":"inspect_local_readiness"},{"references":["/parameters"],"step":2,"type":"collect_parameters"},{"references":["/parameters","/requirements","/effects"],"step":3,"type":"review"},{"consentBoundary":"the user approves the exact play and parameter values","references":["/parameters","/requirements","/effects"],"step":4,"type":"obtain_run_consent"},{"action":{"command":"rote play run https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1","headlessCommandTemplate":"rote play run https://play.modiqo.ai/shashankinguva/dependency-vulnerability-audit@0.0.1 <name=value...> --yes"},"preservesAcquisitionBoundaries":["adapter_selection","oauth_dcr","google_discovery","static_token_setup","runtime_security_checks"],"requiresConsent":true,"step":5,"type":"run"}],"producedBy":{"roteVersion":"0.78.0"},"publishedAt":"2026-09-03T08:48:10.654295+00:00","reference":"shashankinguva/dependency-vulnerability-audit@0.0.1","requirements":{"adapters":[],"browser":{"dependencies":[],"runtime":false,"signIn":false},"localTools":["python3"],"roteCli":{"minimumVersion":"0.62.0"},"sessions":false},"resolution":"pinned","schema":"rote.play.v1","stats":{"downloads":6,"installs":0},"steps":{"count":1,"names":["audit"]},"title":"dependency-vulnerability-audit","type":"play","version":"0.0.1","visibility":"public"}