Which package managers does this skill support?

This skill provides comprehensive support for npm, pnpm, and bun, including their respective lockfile and installation protocols.

How does it handle lockfiles during CI/CD?

The skill includes specific commands for frozen lockfile installations (such as 'npm ci' or 'pnpm install --frozen-lockfile') to ensure consistent builds in automated environments.

Can I use this skill to manually edit package.json?

No, this skill follows a strict protocol that requires using CLI commands (like 'npm install' or 'bun add') to ensure that lockfiles and dependency trees remain synchronized.

Does it handle security vulnerabilities?

Yes, the skill includes tools for running security audits and applying fixes for identified vulnerabilities using the specific audit tools of your chosen package manager.

Node.js Dependency Manager

Name: Node.js Dependency Manager
Author: Git-Fg

byGit-Fg

•

开发者工具

Manages npm, pnpm, and bun dependencies using strict CLI protocols to ensure lockfile integrity and security.

关于

The Node.js Dependency Manager skill provides a standardized framework for managing JavaScript packages across npm, pnpm, and bun environments. It enforces a 'CLI-first' approach, preventing manual edits to package.json to maintain perfectly synced lockfiles and stable build environments. Beyond simple installations, this skill automates security audits, vulnerability patching, and interactive updates, making it an essential tool for maintaining healthy, production-ready Node.js projects.

主要功能

1 GitHub stars
Automated security vulnerability auditing and fixing
Multi-runtime support for npm, pnpm, and bun
CLI-driven dependency installation and removal
Strict lockfile hygiene and CI-ready installation protocols
Quality gates to verify dependency health and safety

使用场景

Standardizing package management workflows across different JavaScript runtimes
Installing and updating packages while maintaining lockfile consistency
Identifying and fixing high-priority security vulnerabilities in project dependencies

关于

主要功能

1 GitHub stars
Automated security vulnerability auditing and fixing
Multi-runtime support for npm, pnpm, and bun
CLI-driven dependency installation and removal
Strict lockfile hygiene and CI-ready installation protocols
Quality gates to verify dependency health and safety

使用场景

Standardizing package management workflows across different JavaScript runtimes
Installing and updating packages while maintaining lockfile consistency
Identifying and fixing high-priority security vulnerabilities in project dependencies