Dependency management

What a dependency migration must do before it is finished, regardless of how good the code is.

diyanbogdanov/emend

Keeps Ansible install tasks in line with upstream docs by fixing version, install-method and link drift one tool at a time, with a commit for each.

vinta/hal-9000

Moves a Node.js, npm, Yarn, pnpm or Bun project to Deno in reversible steps, starting with Deno as the package manager and changing no code unless needed.

denoland/skills

Updates the biome package across a monorepo with pnpm, renames and realigns biome.jsonc schema versions, then runs lint fixes.

prisma/orm

Upgrade pnpm workspace dependencies to target/latest versions: direct/transitive bumps, release-age checks, temporary overrides, minimumReleaseAgeExclude, lockfile/dedupe verification.

langfuse/langfuse

Guides a consistent bump of the Android or iOS SDK wrapped by the AppsFlyer Unity plugin, keeping both billing library variants and release files in step.

AppsFlyerSDK/appsflyer-unity-plugin

Installs, configures, upgrades and removes KubeSphere extensions through Extension, ExtensionVersion and InstallPlan resources, including dependencies and versions.

kubesphere/kubesphere

Fix open Dependabot and CodeQL/code-scanning alerts directly on the current branch.

cloudposse/atmos

Cut GitHub Actions minutes and wall-clock time without losing coverage — the OS billing multiplier (macOS 10x / Windows 2x / Linux 1x), trigger hygiene that stops push+pullrequest double-firing…

kajisho5/ffmpeg-skill

Find all open Dependabot alerts for this repo and create a plan to resolve them using the appropriate package manager overrides (pnpm, bun, npm, cargo).

macro-inc/macro

Extracts and validates semantic version strings from mixed text, parsing major, minor, patch, prerelease and build components with a fixed regular expression.

maslennikov-ig/claude-code-orchestrator-kit

Manage third-party libraries, runtimes, and SaaS dependencies.

rampstackco/claude-skills

Pushes the agent toward the smallest working solution on coding tasks by climbing a ladder from skipping the work to reuse, standard library, native features and one-liners.

diegosouzapw/OmniRoute

Sets up Python projects with uv for packages and environments, ruff for linting and formatting, and pyright for type checking, with rules for running everything through uv.

XiaomiMiMo/MiMo-Code

Update Python dependencies using UV. An agent skill from letsrevel/revel-backend.

letsrevel/revel-backend

Sweep the open dependency-bot pull requests once - rebase the stale ones, re-trigger infrastructure failures, and merge the green patch and minor updates.

partcad/partcad

The maintenance automation around Circuit Breaker — which bots and scheduled workflows exist (Discord notifications, ledger watch, branch cleanup, Dependabot lockfile sync, the required-checks…

BlkLeg/CircuitBreaker

Fix a Dependabot PR by updating all monorepo instances of the dependency, running bun install, and pushing

remotion-dev/remotion

Reference for APM (Agent Package Manager) — apm.yml syntax, install / uninstall / update commands, target detection, lockfile workflow.

mizchi/skills

Check every dependency in a package.json against live CVE databases and security advisories in real time — specifically targeting vulnerabilities disclosed in the last 48 hours, the window that…

tinyfish-io/tinyfish-cookbook

Ghost Security - Software Composition Analysis (SCA) scanner.

ghostsecurity/skills

Dependabot and security analysis skill for HASTE. An agent skill from microsoft/haste.

microsoft/haste

Supply-chain security controls for the @cipherstash/stack monorepo.

cipherstash/stack

Combine several open Dependabot pull requests into a single branch and PR: enumerate the open Dependabot PRs, cherry-pick them onto fresh main, rewrite commit messages to satisfy…

sillsdev/FieldWorks

Refreshes the code of installed NanoClaw channel and provider skills from their registry branches, with fork-aware remotes and a result that must be fully successful.

nanocoai/nanoclaw

Audit all outdated dependencies with detailed research on changelogs, breaking changes, bug fixes, and deprecations.

viclafouch/meme-studio

Local Cargo documentation reference (latest). An agent skill from olorehq/olore.

olorehq/olore

Guides your agent through Bazel for C/C++ projects: BUILD files, Bzlmod dependencies, toolchain registration, remote execution, dependency queries and sandbox debugging.

mohitmishra786/low-level-dev-skills

Coordinates work across several GitHub repositories: swarm-driven cross-repo operations, package version and documentation sync, and repository structure optimization.

ruvnet/agentic-flow

Update eslint-plugin-es-x Node.js support in its own dedicated PR.

eslint-community/eslint-plugin-es-x

Sets up Python projects and standalone scripts with uv, ruff, ty, pytest and prek, and helps move existing projects off pip, Poetry, mypy and black.

trailofbits/skills

Perform a broad Node/TypeScript repository health sweep — formatting, linting, type errors, dead code, dependency hygiene, and open Renovate PRs.

commercetools/ui-kit

Check whether newer stable versions of Node.js (24.x line), Nx, or Vite are available and, if so, generate a detailed upgrade plan markdown file at the repo root.

PackmindHub/packmind

Sequences safe dependency upgrades: read the changelog, verify the version exists upstream, pin it, and keep major bumps in separate commits behind a full gate run.

dralgorhythm/claude-agentic-framework

GitHub repository automation (CI/CD, issue templates, Dependabot, CodeQL).

secondsky/claude-skills

Dependency upgrades: outdated/vulnerable deps planned into semver waves (patch/minor batched, majors gated and changelog-read), applied incrementally with lockfiles regenerated and tests green after…

maddhruv/absolute

A skill your agent uses when explaining, creating, or changing a Pixi workspace, including manifests, dependencies, platforms, targets, features, environments, tasks, lockfiles, editable Python…

moeru-ai/auv

Guides adding support for a new language, package manager, or lockfile format to cdxgen, covering alias registration, parser placement, the create-Lang-Bom dispatch branch, purl construction…

cdxgen/cdxgen

Respond to blocked package installs and manage the Interlinked supply-chain allowlist.

QuentinCody/interlinked-cli

Master uv package manager for Python: project setup, dependency management, virtual environments, lockfiles, CI/CD integration, Docker builds, and migration from pip/poetry.

Aedelon/claude-code-blueprint

Scans deps for known CVEs via native audit (npm, pip, composer, cargo, go, bundler, dart).

softspark/ai-toolkit

Comprehensive guide for configuring and managing GitHub Dependabot.

github/awesome-copilot

Scan package manifests and lockfiles for outdated and vulnerable dependencies.

cobusgreyling/loop-engineering

Plan dependency upgrades: which packages are behind, which have breaking changes, in what order.

zhuyansen/agent-skills-hub

Diagnose and unblock failed Dependabot pull requests in cloud-provider-azure by closing Kubernetes minor-version dependency bumps, classifying CI failures, syncing Go modules, retesting quota-flaked…

kubernetes-sigs/cloud-provider-azure

Read release notes/changelogs, update a defined dependency scope, handle breaking changes, and verify.

codewhale-hq/Codewhale

Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory…

unxed/f4

Configures GitHub Advanced Security (code scanning with CodeQL, secret scanning, dependency review, and Dependabot alerts) to perform automated static analysis and vulnerability detection across…

mukul975/Anthropic-Cybersecurity-Skills