pnpm · Dependency management

Work on the pnpm Rust engine (@pnpm/napi, the pacquet crates) that bit install runs through.

teambit/bit

A skill your agent uses when: retrieving, exporting, triaging, or remediating Azure DevOps Component Governance alerts for this repository, including CG report URLs, vulnerable pnpm dependencies…

OfficeDev/microsoft-365-agents-toolkit

Safely plan and execute dependency maintenance for JavaScript/TypeScript (npm, pnpm) and GitHub Actions, including npm lockfiles, pnpm workspaces, catalogs, overrides, SHA-pinned action versions…

Consensys-Incorporated/linea-attestation-registry

Check if package.json files are in sync with pnpm-lock.yaml.

Hyk260/PureChat

Applies safer package manager defaults and dependency vetting to JavaScript and TypeScript projects to reduce supply-chain attack risk.

bodadotsh/npm-security-best-practices

A skill your agent uses when running a compatibility/parity AUDIT — enumerating where nub diverges from a reference it claims parity with (pnpm CLI grammar, a lockfile format, a Node behavior, a…

nubjs/nub

Review, apply, verify, or merge gocron dependency updates from Dependabot or manual requests.

gocronx-team/gocron

Sets one monorepo's rules for toolchain pins, pnpm package operations, the shared dependency catalog and moon tasks, so the agent adds versions and scripts the right way.

pierrecomputer/pierre

Read every open Dependabot PR for an application-code dependency (Python pip/uv and JS npm/yarn/pnpm) and carry each version bump over to the local dependency files (requirements.txt…

ossf/oss-crs

Fix a PR that is failing due to security or vulnerability issues — npm/pnpm/yarn/bun audit failures, CVE alerts, Dependabot merge conflicts, Snyk failures, or GitHub security advisory blocks.

unional/typescript-blackbook

Conventions for adding packages and apps to a TypeScript monorepo: project references, moon tasks, workspace dependencies and published package exports.

pierrecomputer/pierre

Automated triage and fixing of Dependabot security vulnerabilities (IN-1189).

linuxfoundation/insights

Moves a Node.js, npm, Yarn, pnpm or Bun project to Deno in reversible steps, starting with Deno as the package manager and changing no code unless needed.

denoland/skills

Updates the biome package across a monorepo with pnpm, renames and realigns biome.jsonc schema versions, then runs lint fixes.

prisma/orm

Upgrade pnpm workspace dependencies to target/latest versions: direct/transitive bumps, release-age checks, temporary overrides, minimumReleaseAgeExclude, lockfile/dedupe verification.

langfuse/langfuse

Find all open Dependabot alerts for this repo and create a plan to resolve them using the appropriate package manager overrides (pnpm, bun, npm, cargo).

macro-inc/macro

Supply-chain security controls for the @cipherstash/stack monorepo.

cipherstash/stack

Audit all outdated dependencies with detailed research on changelogs, breaking changes, bug fixes, and deprecations.

viclafouch/meme-studio

Dependency upgrades: outdated/vulnerable deps planned into semver waves (patch/minor batched, majors gated and changelog-read), applied incrementally with lockfiles regenerated and tests green after…

maddhruv/absolute

Respond to blocked package installs and manage the Interlinked supply-chain allowlist.

QuentinCody/interlinked-cli

Master uv package manager for Python: project setup, dependency management, virtual environments, lockfiles, CI/CD integration, Docker builds, and migration from pip/poetry.

Aedelon/claude-code-blueprint

Scans deps for known CVEs via native audit (npm, pip, composer, cargo, go, bundler, dart).

softspark/ai-toolkit

Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response.

c0x12c/ai-toolkit

A skill your agent uses when the user says 'dependency audit', 'npm audit', 'pip audit', 'cargo audit', 'security vulnerabilities', 'outdated packages', 'supply chain', or needs to scan project…

cwinvestments/memstack

Audit and reduce JavaScript package dependency footprint across npm, pnpm, Yarn, and Bun projects.

Asymmetric-al/core

Bun package manager commands (install, add, remove, update), workspaces, lockfiles, npm/yarn/pnpm migration.

secondsky/claude-skills

Resolve a dependency or version conflict (npm, pip, yarn, pnpm, Maven, Go modules) step by step.

mohitagw15856/pm-claude-skills

Reduces JavaScript dependency footprint with pnpm while preserving lockfile, workspace layout, and dependency range style.

grafana/skills