Skip to content
SlashClone
DiscoverUse in ClaudeSubmit a link
Sign in

@slashclone/pin-dependencies-safely · v0.1.0

Install this kit

This kit reads package.json, **/package.json, pnpm-lock.yaml, package-lock.json, writes to package.json, **/package.json, pnpm-lock.yaml, package-lock.json, connects to registry.npmjs.org and runs npm view, pnpm add. Install it?

1. Run this

slashclone add @slashclone/pin-dependencies-safely --agent cursor

In your project folder. Add --scope user to install for every project.

2. Check what it will do

Your terminal shows the same list and asks before anything is written.

Not enforced

Cursor does not enforce the permissions this kit declares. Nothing stops the kit from doing more than it says; Cursor's own approval settings decide what it asks you about.

Not marked for Cursor

The author has not marked this kit as working with Cursor (compat: claude-code).

  • Command

    Runs the command: npm view (with any arguments, without asking)

  • Command

    Runs the command: pnpm add (with any arguments, without asking)

  • Network

    Connects to registry.npmjs.org

  • Reads

    Reads files in ./package.json

  • Reads

    Reads files in ./**/package.json

  • Reads

    Reads files in ./pnpm-lock.yaml

  • Reads

    Reads files in ./package-lock.json

  • Writes

    Writes files in ./package.json

  • Writes

    Writes files in ./**/package.json

  • Writes

    Writes files in ./pnpm-lock.yaml

  • Writes

    Writes files in ./package-lock.json

Safety

  • Scan passed
  • Not reviewed yet
  • No tests

The CLI verifies the sha256 b7c44e5735aa… and the platform signature (10aff36bedd43e66) before writing a file.

3. Then

  1. Approve in your terminal. Nothing is written until you do.
  2. Ask Claude for the job the kit does. It picks the kit up on its own.
  3. Change your mind with slashclone remove @slashclone/pin-dependencies-safely.

I installed it