Dependency Auditor

Audit package manifests for outdated dependencies, known vulnerability patterns, license risks, and bloat. Works with package.json, requirements.txt, Gemfile, go.mod, and Cargo.toml.