Skip to content
SlashClone
DiscoverUse in ClaudeSubmit a link
Sign in

@slashclone/pin-dependencies-safely · v0.1.0

Install this kit

This kit reads package.json, **/package.json, pnpm-lock.yaml, package-lock.json, writes to package.json, **/package.json, pnpm-lock.yaml, package-lock.json, connects to registry.npmjs.org and runs npm view, pnpm add. Install it?

1. Run this

/kit add @slashclone/pin-dependencies-safely

In Claude Code, with the plugin installed. The plugin calls the CLI for you.

2. Check what it will do

Your terminal shows the same list and asks before anything is written.

  • Command

    Runs the command: npm view (with any arguments, without asking)

  • Command

    Runs the command: pnpm add (with any arguments, without asking)

  • Network

    Connects to registry.npmjs.org

  • Reads

    Reads files in ./package.json

  • Reads

    Reads files in ./**/package.json

  • Reads

    Reads files in ./pnpm-lock.yaml

  • Reads

    Reads files in ./package-lock.json

  • Writes

    Writes files in ./package.json

  • Writes

    Writes files in ./**/package.json

  • Writes

    Writes files in ./pnpm-lock.yaml

  • Writes

    Writes files in ./package-lock.json

Commands, files, and domains it is allowed to use without asking are allowed for everything Claude does in this project, not only for this kit.

Safety

  • Scan passed
  • Not reviewed yet
  • No tests

The CLI verifies the sha256 b7c44e5735aa… and the platform signature (10aff36bedd43e66) before writing a file.

3. Then

  1. Approve in your terminal. Nothing is written until you do.
  2. Ask Claude for the job the kit does. It picks the kit up on its own.
  3. Change your mind with slashclone remove @slashclone/pin-dependencies-safely.

I installed it