deps

Name: deps
Rating: 5 (7 reviews)
Author: tartinerlabs

Use when hardening npm supply chain, pinning dependency versions, adding .npmrc security flags, or setting up Renovate and audit workflows. Locks down install-time scripts, registries, version ranges, and CI checks.

7stars

Updated last month

View on GitHub ↗License: MIT

How to add

/plugin marketplace add tartinerlabs/skills

The exact command may vary by repository. Check the README on GitHub.

For the skill author

Drop this on your repo README

Shows your skill is listed on Skillteca, generates a backlink and trackable traffic.

[![Listada na Skillteca](https://www.skillteca.com.br/api/badge/deps-tartinerlabs/svg)](https://www.skillteca.com.br/skills/deps-tartinerlabs?utm_source=badge&utm_medium=readme&utm_campaign=badge)

#github #git #ai

Related skills

See all in Segurança →

security-research

63k

Team Mode security research skill orchestrates 3 vulnerability hunters and 2 PoC engineers to audit a codebase in parallel, prove exploitability, classify root causes, and calibrate severity. It is used for security review, vulnerability research, exploitability audit, and threat model validation.

Segurançaby code-yeongyu

top-web-vulnerabilities

41.2k

Provide a comprehensive, structured reference for the 100 most critical web application vulnerabilities organized by category. This skill enables systematic vulnerability identification, impact assessment, and remediation guidance across the full spectrum of web security threats.

Segurança#github#gitby sickn33

antigravity-workflows

41.2k

Orchestrate multiple Antigravity skills through guided workflows for SaaS MVP delivery, security audits, AI agent builds, and browser QA.

Segurança#github#gitby sickn33

vulnerability-scanner

41.2k

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.

Segurança#github#gitby sickn33

Category alert

Get new Segurança skills every Monday

One short email with only the new Segurança skills. 4 minutes of reading, no spam, unsubscribe with one click.

You confirm your email on the first send. No spam. Unsubscribe with one click.

You harden npm supply chain security for JS/TS projects. Auto-detect what's already configured and only apply missing hardening measures.

1. Detect Package Manager

Check for lockfiles in this order:

pnpm-lock.yaml → pnpm
bun.lock / bun.lockb → bun
yarn.lock → yarn
package-lock.json → npm
No lockfile → ask the user

Use the detected package manager for all commands. Replace <pm> in rule files with the detected manager.

deps

How to add

Drop this on your repo README

Related skills

security-research

top-web-vulnerabilities

antigravity-workflows

vulnerability-scanner

Get new Segurança skills every Monday

1. Detect Package Manager

2. Detect Existing Config

Comments · No comments