Back to Skills

dependency-management

KubrickCode
Updated Yesterday
145 views
1
1
View on GitHub
Metaaidesign

About

This Claude Skill enforces fixed version dependency installation across all package managers to ensure reproducible builds, supply chain security, and stability. It provides guidance for installing packages, updating dependencies, and working with configuration files like package.json and requirements.txt. Use it when reviewing dependency configurations or configuring CI/CD pipelines to maintain consistent dependency management practices.

Quick Install

Claude Code

Recommended
Plugin CommandRecommended
/plugin add https://github.com/KubrickCode/ai-config-toolkit
Git CloneAlternative
git clone https://github.com/KubrickCode/ai-config-toolkit.git ~/.claude/skills/dependency-management

Copy and paste this command in Claude Code to install this skill

Documentation

Dependency Management

Basic Principles

Always Use Exact Versions

  • Use exact versions only: [email protected]
  • Forbid: ^1.2.3, ~1.2.3, latest, *, version ranges
  • Exception: Library peerDependencies only

Lock Files Are Mandatory

  • Always commit to version control
  • Forbid manual editing
  • CI/CD must use frozen/locked mode

Security Audit First

  • Check vulnerabilities before installation
  • Automate regular audits

Installation Commands

# Node.js
npm install --save-exact [email protected]
pnpm add --save-exact [email protected]
yarn add --exact [email protected]

# Python
pip install package==1.2.3
poetry add [email protected]

# Go
go get [email protected]

# Rust
cargo add package@=1.2.3

# PHP
composer require vendor/package:1.2.3

# Ruby (Gemfile)
gem 'package', '1.2.3'

# Java/Kotlin
implementation("group:artifact:1.2.3")  # Gradle
<version>1.2.3</version>                # Maven

# .NET
dotnet add package PackageName --version 1.2.3

CI/CD Commands

npm ci                          # npm
pnpm install --frozen-lockfile  # pnpm
yarn install --frozen-lockfile  # yarn
poetry install --no-update      # poetry
go mod verify                   # go
cargo build --locked            # rust
composer install --no-update    # php
bundle install --frozen         # ruby
dotnet restore --locked-mode    # .NET

Common Mistakes

❌ Wrong✅ Correct
npm install (CI)npm ci
package@latest[email protected]
package@^1.2.3[email protected]
Lock file in .gitignoreCommit lock file
Manual lock file editingRegenerate via package manager

GitHub Repository

KubrickCode/ai-config-toolkit
Path: .claude/skills/dependency-management

Related Skills

sglang

Meta

SGLang is a high-performance LLM serving framework that specializes in fast, structured generation for JSON, regex, and agentic workflows using its RadixAttention prefix caching. It delivers significantly faster inference, especially for tasks with repeated prefixes, making it ideal for complex, structured outputs and multi-turn conversations. Choose SGLang over alternatives like vLLM when you need constrained decoding or are building applications with extensive prefix sharing.

View skill

evaluating-llms-harness

Testing

This Claude Skill runs the lm-evaluation-harness to benchmark LLMs across 60+ standardized academic tasks like MMLU and GSM8K. It's designed for developers to compare model quality, track training progress, or report academic results. The tool supports various backends including HuggingFace and vLLM models.

View skill

llamaguard

Other

LlamaGuard is Meta's 7-8B parameter model for moderating LLM inputs and outputs across six safety categories like violence and hate speech. It offers 94-95% accuracy and can be deployed using vLLM, Hugging Face, or Amazon SageMaker. Use this skill to easily integrate content filtering and safety guardrails into your AI applications.

View skill

content-collections

Meta

This skill provides a production-tested setup for Content Collections, a TypeScript-first tool that transforms Markdown/MDX files into type-safe data collections with Zod validation. Use it when building blogs, documentation sites, or content-heavy Vite + React applications to ensure type safety and automatic content validation. It covers everything from Vite plugin configuration and MDX compilation to deployment optimization and schema validation.

View skill