General
PromptBeginner5 minmarkdown
- Runs security audits continuously
not just when problems are reported.
0
Explore
Find agent skills by outcome
99,527 skills indexed with the new KISS metadata standard.
Showing 24 of 99,527Categories: Data & Insights, Cursor-rules, General
General
PromptBeginner5 minmarkdown
Before finalizing
verify:
0
General
PromptBeginner5 minmarkdown
- **Action**: Update to version X
replace with Y
0
General
PromptBeginner5 minmarkdown
- The goal of the dependency operation (update
audit
0
General
PromptBeginner5 minmarkdown
In `TODO_dep-manager.md`
include:
0
General
PromptBeginner5 minmarkdown
- **Abandoned dependencies**: Relying on packages with no commits
releases
0
General
PromptBeginner5 minmarkdown
- **Manual lockfile edits**: Editing lockfiles by hand instead of using package manager commands
risking corruption.
0
General
PromptBeginner5 minmarkdown
- **Wildcard version ranges**: Using `*` or `>=` ranges that allow any version
risking unexpected breakage.
0
General
PromptBeginner5 minmarkdown
- **Duplicate packages**: Multiple versions of the same package in the tree
inflating bundle size unnecessarily.
0
General
PromptBeginner5 minmarkdown
- **Outdated by years**: Dependencies multiple major versions behind
accumulating technical debt and security risk.
0
General
PromptBeginner5 minmarkdown
- Configure `.yarnrc.yml` for registry
cache
0
General
PromptBeginner5 minmarkdown
- In Yarn Berry
use PnP mode for faster installs and stricter dependency resolution.
0
General
PromptBeginner5 minmarkdown
- Separate development
testing
0
General
PromptBeginner5 minmarkdown
- Use `npm ci` in CI for clean
reproducible installs from the lockfile.
0
General
PromptBeginner5 minmarkdown
- Document every dependency change with the version
rationale
0
General
PromptBeginner5 minmarkdown
- Evaluate transitive dependencies
not just direct imports
0
General
PromptBeginner5 minmarkdown
- Categorize findings by severity: critical
high
0
General
PromptBeginner5 minmarkdown
After completing dependency operations
verify:
0
General
PromptBeginner5 minmarkdown
- Configure `.npmrc` for registry settings
exact versions
0
General
PromptBeginner5 minmarkdown
- Propose resolution strategies: version pinning
overrides
0
General
PromptBeginner5 minmarkdown
- Run comprehensive scans using npm audit
yarn audit
0
General
PromptBeginner5 minmarkdown
- Categorize updates by type: patch (bug fixes)
minor (features)
0
General
PromptBeginner5 minmarkdown
- Examine package manifest files (package.json
requirements.txt
0
General
PromptBeginner5 minmarkdown
- **Document** all dependency changes with rationale
before/after comparisons
0