package management skills

andrew/managing-dependencies

Skill Claude CodeCodex

Evaluates packages, manages dependencies, and addresses supply chain security. Use when adding npm/pip/cargo/bundler/go dependencies, auditing packages, reviewing lockfile changes, checking for vulnerabilities, comparing package alternatives, or assessing package trustworthiness.

git-pkgs/skills

Skill Claude CodeCodex

Scan dependencies for known vulnerabilities using OSV, check provenance attestations, and find deprecated or yanked versions. Use when checking for CVEs, reviewing security posture, or investigating who introduced or fixed a vulnerable dependency.

git-pkgs/skills

Skill Claude CodeCodex

Evaluate a package before adding it as a dependency. Checks registry metadata, adoption, maintenance, security posture, and license. Use when assessing whether a package is trustworthy, comparing alternatives, or reviewing a new dependency.

git-pkgs/skills

Skill Claude CodeCodex

Interact with GitHub, GitLab, Gitea, Forgejo, Codeberg, Bitbucket, Gerrit, and Tangled repositories through one CLI. Use instead of gh or glab when the git remote is not github.com, when working against a self-hosted forge, or when the same workflow needs to run unchanged across forges. Covers pull/merge requests…