Assess whether a dependency is necessary, trustworthy, compatible, reproducible, maintained, licensed, and safe to install. Use before adding or upgrading packages, during security review, or before release.
