staticaland avatar

dependencies

v0.8.0

by staticaland

Hold new dependency releases for a cooldown, configure Renovate, freeze install commands to their lock files, and deny install-time script execution

What dependencies does, in the publisher's words

Hold new dependency releases for a cooldown, configure Renovate, freeze install commands to their lock files, and deny install-time script execution.

From the project README, punctuation lightly normalized · Open the README on GitHub

Skills
4
MCP servers
0
Stars
4
License
n/a
Repo created
2026-01-29
Last pushed
2026-10-07
Publisher type
User
Version
0.8.0

Links

Skills · 4

dependency-cooldown
frozen-install
install-scripts
renovate-setup
Add or extend Renovate with a seven-day minimum release age and immutable updates: lock files and integrity hashes, GitHub Action SHAs, and container digests. Use when adopting Renovate, replacing another update bot, covering missing manifests, or updating tools, images, actions, or custom files.

Descriptions come from the frontmatter of each SKILL.md, punctuation lightly normalized.

Category

Security & Compliance. Assigned by this directory. Agent Plugins 1.0.0 has no category field, so no manifest declares one.

Related by publisher and keywords

  • browserstaticaland

    Drive Chrome, web apps, and Electron apps from the command line with the agent-browser CLI

  • flashcardsstaticaland

    Turn text, notes, code, or images into Anki flashcards built on Andy Matuschak's prompt-writing principles

  • fresh-eyesstaticaland

    Look at a module with fresh eyes and keep the simplest redesigns that survive its constraints

  • github-actionsstaticaland

    Run GitHub Actions workflow steps in parallel, replace repeated workflow configuration with YAML anchors, name every workflow, job, and step, and pin every action reference to a commit SHA on workflow edits

  • grillingstaticaland

    Grill a plan until its design tree holds, and write the outcome up as domain terms and architecture decisions

  • no-org-internalsstaticaland

    Keep organization-internal names, hosts, tickets, and people out of a public repository by telling the agent at session start that everything it writes is world-readable

Add the verified badge to your README[![Verified by AgentPluginsDirectory.com against Schema 1.0.0](https://agentpluginsdirectory.com/badge.svg)](https://agentpluginsdirectory.com/plugins/dependencies)

✓ Verified . We fetched the manifest from GitHub and checked it against the official Agent Plugins 1.0.0 schema at agent-plugins.org.