Made by@slashclonePin dependencies safely
@slashclone/pin-dependencies-safely
Before adding or upgrading a package: confirm the version exists, is the latest stable release, and is at least 14 days old, then pin it exactly and commit the lockfile. A simple guard against typosquats and freshly compromised releases.
SkillDevOpsv0.1.0 (latest)
- Activity
- New: be the first to try it
- Installs
- 0 installs
- Likes
- 0 likes
- Clones
- 0 clones
- 1{
- 2 "name": "pin-dependencies-safely",
- 3 "owner": "slashclone",
- 4 "version": "0.1.0",
- 5 "type": "skill",
- 6 "description": "Before adding or upgrading a package: confirm the version exists, is the latest stable release, and is at least 14 days old, then pin it exactly and commit the lockfile. A simple guard against typosquats and freshly compromised releases.",
- 7 "category": "devops",
- 8 "license": "MIT",
- 9 "compat": ["claude-code"],
- 10 "permissions": {
- 11 "files": {
- 12 "read": ["package.json", "**/package.json", "pnpm-lock.yaml", "package-lock.json"],
- 13 "write": ["package.json", "**/package.json", "pnpm-lock.yaml", "package-lock.json"]
- 14 },
- 15 "shell": ["npm view", "pnpm add"],
- 16 "network": ["registry.npmjs.org"]
- 17 }
- 18}