update-deps
Audit and update npm/Bun dependencies with supply chain integrity checks — verifies maintainers, publish age, tarball diffs, and provenance before bumping. Defers risky packages to ~/.supply-chain/notes/.
Why this score
This repo hosts 10 skills, so its 9,522 stars are split between them (about 952 each) for scoring.
Popularity score: 79/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit ab5013a38705, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneupdate-deps backnotprop/plannotator · Skill | 79 | ★ 9.5k | ≈54 always | 16d ago |
| dep-security tinyfish-io/tinyfish-cookbook · Skill Both about dep and dependency | 73 | ★ 2.3k | ≈26 always | 27d ago |
| dep-auditor laolaoshiren/claude-code-skills-zh · Skill Both about dep and package | 69 | ★ 894 | ≈42 always | 16d ago |
| plugin-heavy-dep NanmiCoder/dsh-agent-teams · Skill Both about dep and dependency | 72 | ★ 2.3k | ≈96 always | 17d ago |
| circular-dep-untangler luongnv89/skills · Subagent Both about dep and dependency | 57 | ★ 133 | ≈25 in chat | 16d ago |
| ghost-scan-deps ghostsecurity/skills · Skill Both about dep and dependency | 60 | ★ 413 | ≈107 always | 1mo ago |