JavaScript · Dependency management

Work on the pnpm Rust engine (@pnpm/napi, the pacquet crates) that bit install runs through.

teambit/bit

Safely plan and execute dependency maintenance for JavaScript/TypeScript (npm, pnpm) and GitHub Actions, including npm lockfiles, pnpm workspaces, catalogs, overrides, SHA-pinned action versions…

Consensys-Incorporated/linea-attestation-registry

Applies safer package manager defaults and dependency vetting to JavaScript and TypeScript projects to reduce supply-chain attack risk.

bodadotsh/npm-security-best-practices

Quick reference for using Bun to run TypeScript and JavaScript, install packages, bundle code, run tests and serve HTTP, with the key files and commands.

mweinbach/agent-coworker

Scans a repository, its lockfiles and node_modules for known malicious npm package versions and install-time indicators, using a read-only Python scanner.

majiayu000/spellbook

Bumps an existing Python dependency in getsentry/sentry through the repository's self-serve GitHub Actions workflow.

getsentry/sentry

Dependabot and security analysis skill for HASTE. An agent skill from microsoft/haste.

microsoft/haste

Update eslint-plugin-es-x Node.js support in its own dedicated PR.

eslint-community/eslint-plugin-es-x

Audit and reduce JavaScript package dependency footprint across npm, pnpm, Yarn, and Bun projects.

Asymmetric-al/core

Reduces JavaScript dependency footprint with pnpm while preserving lockfile, workspace layout, and dependency range style.

grafana/skills