managing-dependencies - Manage dependency review and installation policy
Guides dependency admission, review records, installation verification, version selection, cooldowns, peer constraints, and supply-chain settings.
Tags
Updated: 2026-09-28Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Assess dependency eligibility
- Record runtime dependency review
- Verify installs and builds
- Check peer and lifecycle failures
- Evaluate SemVer ranges and pins
- Review supply-chain settings
- Handle release-age exceptions
Inputs
- Dependency change proposal
- package.json
- pnpm-lock.yaml
- pnpm-workspace.yaml
- .mcp.json
- Package registry metadata
- Repository Node and TypeScript settings
- Pull request context
Outputs
- Dependency review record
- Dependency change guidance
- Install and verification results
- pnpm-lock.yaml update
- Peer or lifecycle failure diagnosis
- Release-age exception decision
Requirements
- Repository file access
- pnpm package manager
- Supported Node.js runtime
- Package registry access
- Permission to update dependency files