Prevent JavaScript/TypeScript projects from supply-chain attacks across package managers like npm, pnpm, yarn, bun, and deno. Use whenever planning, installing, updating packages or configuring package managers.
Install and run DepsGuard, a zero-dependency CLI that scans and fixes package manager configs (npm, pnpm, yarn, bun, uv) for supply chain security best practices.
A security review of project dependencies managed by npm, Yarn, or pnpm. It can inspect a local project directory or a remote Git repository for known dependency risks.
A frontend code-review workflow based on guidelines for readable, predictable code with clear relationships between parts. Frontend code is the code that runs in a web browser or app interface.
A required workflow for frontend work based on Jira tasks, Figma designs, photos, and other evidence. It covers creating or checking a Jira task, writing a specification, implementing the work, improving it, and verifying the result.
A maintenance workflow for checking whether a set of coding-agent skills is still complete and up to date. It looks for missing verification coverage, outdated references, and missing checks.