@slashclone/pin-dependencies-safely · v0.1.0
Install this kit
This kit reads package.json, **/package.json, pnpm-lock.yaml, package-lock.json, writes to package.json, **/package.json, pnpm-lock.yaml, package-lock.json, connects to registry.npmjs.org and runs npm view, pnpm add. Install it?
1. Run this
slashclone add @slashclone/pin-dependencies-safelyIn your project folder. Add --scope user to install for every project.
2. Check what it will do
Your terminal shows the same list and asks before anything is written.
Command
Runs the command: npm view (with any arguments, without asking)
Command
Runs the command: pnpm add (with any arguments, without asking)
Network
Connects to registry.npmjs.org
Reads
Reads files in ./package.json
Reads
Reads files in ./**/package.json
Reads
Reads files in ./pnpm-lock.yaml
Reads
Reads files in ./package-lock.json
Writes
Writes files in ./package.json
Writes
Writes files in ./**/package.json
Writes
Writes files in ./pnpm-lock.yaml
Writes
Writes files in ./package-lock.json
Commands, files, and domains it is allowed to use without asking are allowed for everything Claude does in this project, not only for this kit.
Safety
- Scan passed
- Not reviewed yet
- No tests
The CLI verifies the sha256 b7c44e5735aa… and the platform signature (10aff36bedd43e66) before writing a file.
3. Then
- Approve in your terminal. Nothing is written until you do.
- Ask Claude for the job the kit does. It picks the kit up on its own.
- Change your mind with
slashclone remove @slashclone/pin-dependencies-safely.
