git-pkgs
01Plugin Claude Code
Plugin marketplace listing 1 plugin: git-pkgs.
Plugin Claude Code
Plugin marketplace listing 1 plugin: git-pkgs.
Plugin Claude Code
Dependency and repository management skills powered by git-pkgs, brief, forge, pin, and capcheck. Track dependency history, scan for vulnerabilities, evaluate packages, generate SBOMs, work across git forges, and more.
Skill Claude CodeCodex
Scan dependencies for known vulnerabilities using OSV, check provenance attestations, and find deprecated or yanked versions. Use when checking for CVEs, reviewing security posture, or investigating who introduced or fixed a vulnerable dependency.
Skill Claude CodeCodex
Detect a project's toolchain, languages, package managers, test runners, linters, and conventions. Use when starting work on a project, onboarding to a codebase, or checking what tools are configured. Also detects tooling gaps, threat categories, dangerous sink functions, and packs source trees for LLM context.
Skill Claude CodeCodex
Fail the build when Go code or a dependency gains a new privileged capability (spawn a process, open a socket, call cgo, write files). Use in Go projects when reviewing dependency updates for supply-chain risk, setting up capability baselines, or investigating why CI is reporting a capability drift.
Skill Claude CodeCodex
Compare dependencies between commits, branches, or the working tree. Use when reviewing what dependencies changed in a PR, between releases, or since a specific commit.
Skill Claude CodeCodex
Evaluate a package before adding it as a dependency. Checks registry metadata, adoption, maintenance, security posture, and license. Use when assessing whether a package is trustworthy, comparing alternatives, or reviewing a new dependency.
Skill Claude CodeCodex
Interact with GitHub, GitLab, Gitea, Forgejo, Codeberg, Bitbucket, Gerrit, and Tangled repositories through one CLI. Use instead of gh or glab when the git remote is not github.com, when working against a self-hosted forge, or when the same workflow needs to run unchanged across forges. Covers pull/merge requests…
Skill Claude CodeCodex
Track dependency change history, find who added each dependency, and understand why packages were introduced. Use when investigating when a dependency was added or changed, who introduced it, or which commits modified dependencies.
Skill Claude CodeCodex
Initialize, reindex, or manage the git-pkgs dependency database. Use when setting up git-pkgs in a repository for the first time, updating the database after pulling new commits, or checking database status.
Skill Claude CodeCodex
Show license information for all project dependencies, enforce allow/deny policies, and detect license drift between installed and latest versions. Use when checking license compliance, reviewing license compatibility, or auditing for copyleft or missing licenses.
Skill Claude CodeCodex
List, search, and locate dependencies in the current project. Use when exploring what packages are installed, finding where a dependency is declared, searching for packages by name pattern, or viewing the dependency tree.
Skill Claude CodeCodex
Add, remove, update, install, replace, or vendor dependencies using the project's detected package manager. Use when the user wants to modify their dependencies.
Skill Claude CodeCodex
Find dependencies with newer versions available, that haven't been updated in a long time, or whose installed version has been deprecated or yanked. Use when checking for available updates, finding stale packages, or planning a dependency update cycle.
Skill Claude CodeCodex
Vendor browser assets (htmx, CSS kits, icon sets) from npm packages or GitHub releases without npm, nodemodules, or install scripts. Use when a server-rendered project needs a handful of frontend files, when adding or updating a pinned asset, or when verifying vendored files against their lockfile.
Skill Claude CodeCodex
Generate a Software Bill of Materials in CycloneDX or SPDX format. Use when producing SBOMs for compliance, supply chain transparency, or software composition analysis.