Skip to content
SlashClone
DiscoverUse in ClaudeSubmit a link
Sign in
Made by@slashclone

Pin dependencies safely

@slashclone/pin-dependencies-safely

Before adding or upgrading a package: confirm the version exists, is the latest stable release, and is at least 14 days old, then pin it exactly and commit the lockfile. A simple guard against typosquats and freshly compromised releases.

SkillDevOpsv0.1.0 (latest)
Use in Claude Save Like Clone Comment
Activity
New: be the first to try it

What this kit declares, in the same words the CLI shows before you install. On Claude Code the CLI turns these into permission rules, so the agent stops anything undeclared.

  • Command

    Runs the command: npm view (with any arguments, without asking)

  • Command

    Runs the command: pnpm add (with any arguments, without asking)

  • Network

    Connects to registry.npmjs.org

  • Reads

    Reads files in ./package.json

  • Reads

    Reads files in ./**/package.json

  • Reads

    Reads files in ./pnpm-lock.yaml

  • Reads

    Reads files in ./package-lock.json

  • Writes

    Writes files in ./package.json

  • Writes

    Writes files in ./**/package.json

  • Writes

    Writes files in ./pnpm-lock.yaml

  • Writes

    Writes files in ./package-lock.json

Works with
claude-code
License
MIT