npx claudepluginhub andrew/managing-dependencies --plugin managing-dependenciesA skill for evaluating packages and managing dependencies securely.
Works with Claude Code, Codex CLI, and other agents supporting the Agent Skills format.
/plugin marketplace add andrew/managing-dependencies
/plugin install managing-dependencies@managing-dependencies
Or copy SKILL.md to your skills directory manually:
# Claude Code
mkdir -p ~/.claude/skills/managing-dependencies
cp skills/managing-dependencies/SKILL.md ~/.claude/skills/managing-dependencies/
# Codex CLI
mkdir -p ~/.codex/skills/managing-dependencies
cp skills/managing-dependencies/SKILL.md ~/.codex/skills/managing-dependencies/
# Project-specific (Claude Code)
mkdir -p .claude/skills/managing-dependencies
cp skills/managing-dependencies/SKILL.md .claude/skills/managing-dependencies/
# Project-specific (Codex CLI)
mkdir -p .codex/skills/managing-dependencies
cp skills/managing-dependencies/SKILL.md .codex/skills/managing-dependencies/
Provides guidance for:
The skill activates automatically when you ask Claude Code about dependencies, packages, or supply chain security. Examples:
CC0 1.0 - Public domain
Share bugs, ideas, or general feedback.
Audit, update, and manage project dependencies with safety checks
Secure dependency upgrades with supply chain protection, cooldown periods, post-install script hardening, lockfile validation, and staged rollout across npm, Bun, pnpm, and Yarn. Use when upgrading dependencies, configuring security policies, or preventing supply chain attacks.
Audit supply-chain threat landscape of project dependencies for exploitation or takeover risk
Comprehensive dependency health auditing for JavaScript/TypeScript projects. Run npm audit, detect outdated packages, check for security advisories, and verify license compliance. Prioritises vulnerabilities by severity and provides actionable fix recommendations. Use when: auditing project dependencies, checking for vulnerabilities, updating packages, preparing for release, or investigating npm audit warnings.
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.