1263 个 · 按相关度排序
Python dependency management with Poetry and Rye -- lockfile-driven workflows, dependency groups, monorepo patterns, and migration paths. Covers pyproject.toml-centric packaging for projects not yet on uv.
中文简介正在准备中。当前显示原文说明。
Drain the Pharos Dependency Map coverage-audit queues into evidence-refreshed edges, reviewed target dispositions, or documented deferrals. Use monthly after weekly production dependency audits, after dependency coverage drops, or when reviewing adapter gaps, material unlinked slices, symbol leads, duplicate/split groups, or unverifiable published edges.
中文简介正在准备中。当前显示原文说明。
Use when working with Dependabot — dependabot and Renovate dependency update management. Covers vulnerability alerts, dependency update PRs, auto-merge configuration, version pinning, update scheduling, and security advisory tracking. Use when managing dependency updates, reviewing vulnerability alerts, configuring auto-merge policies, or auditing dependency health.
中文简介正在准备中。当前显示原文说明。
Expert dependency manager specializing in package management, security auditing, and version conflict resolution across multiple ecosystems. Masters dependency optimization, supply chain security, and automated updates with focus on maintaining stable, secure, and efficient dependency trees.
中文简介正在准备中。当前显示原文说明。
Extract a thesis's dependency fingerprint — the external variables its bull case actually rests on (key customers, suppliers/inputs, technology transitions, macro drivers, single points of failure). Use when user says "dependency map", "what does [TICKER] depend on", "dependency fingerprint", or "map exposures for [TICKER]".
中文简介正在准备中。当前显示原文说明。
Periodic dependency update run. Reads what the package manager says is outdated, upgrades what is safe, applies the code changes the new versions need, verifies, and opens one reviewable PR. Supports a read-only dry run that reports what it would do. Use when the user says "dependency update", "/dependency-update", "update deps", "dry run the dep update", or when a scheduled cloud routine fires.
中文简介正在准备中。当前显示原文说明。
检查Java Spring Boot服务的身份认证、访问权限和输入验证等安全措施，涵盖秘密信息管理、日志、API调用频率限制及依赖库漏洞。
用于在Quarkus服务修改后或部署前，依次检查构建、代码分析、测试与漏洞，并验证原生可执行文件、容器及环境配置，梳理部署前的检查事项。
Add a text-to-speech engine to Voicebox through dependency research, backend implementation, interface updates, and packaging. The workflow covers development checks and verification of the packaged application before handing the build over for local testing.
中文简介正在准备中。当前显示英语简介。
Analyze DepMap cancer model data to rank genes required for cell survival, compare groups defined by biological markers, and explore drug responses. Release tracking and statistical checks help organize evidence for research hypotheses.
中文简介正在准备中。当前显示英语简介。
Update Flask-AppBuilder in Apache Airflow’s FAB provider, including pinned versions, dependency locks, and documentation. Check compatibility tests and review copied security code, with asset and database migration updates when the upstream release requires them.
中文简介正在准备中。当前显示英语简介。
Trace software artifacts from source and dependencies through builds, publishing, and runtime use in CTF sandboxes. Compare intended versions with shipped files to identify the earliest divergence and document the evidence linking each stage.
中文简介正在准备中。当前显示英语简介。
Assess software dependencies, build pipelines, and container images for security risks. Create a software component inventory, check vulnerabilities and license conflicts, verify artifact signatures, and prioritize fixes based on whether vulnerable code can actually be reached.
中文简介正在准备中。当前显示英语简介。
Plan and carry out major library and framework upgrades by checking compatibility, identifying changes that require code updates, testing each stage, and preparing rollback steps if an upgrade causes problems.
中文简介正在准备中。当前显示英语简介。
Check AI agent plugins and tools for changed, missing, or untracked files using SHA-256 file fingerprints. Generate integrity records, review dependency version settings, and check requirements before promoting a plugin to production.
中文简介正在准备中。当前显示英语简介。
Audit GitHub Actions workflows and CI/CD configurations for supply chain risks. Use Python and YAML parsing to identify unpinned actions, unsafe event expressions, excessive permissions, dependency confusion, and potential exposure of secrets in build pipelines.
中文简介正在准备中。当前显示英语简介。
Analyze a software bill of materials, an inventory of software components, against known vulnerability records. Trace indirect dependencies, assess risk, and produce reports that help teams prioritize fixes and review supplier software.
中文简介正在准备中。当前显示英语简介。
Audit and upgrade NemoClaw dependencies, including Hermes and base images. Trace upstream changes to affected code, implement required migrations, and verify tests, distributed artifacts, and the versions actually selected for use.
中文简介正在准备中。当前显示英语简介。
Generate an OpenShell SBOM, an inventory of software components, with Syft. Fill missing license details from public registries, export CSV files for compliance review, and inspect or validate SBOMs attached to container images.
中文简介正在准备中。当前显示英语简介。
Review licenses in dependency lists, individual libraries, or code planned for public release. Get a memo covering obligations for the deployment model, license conflicts, unresolved questions, and recommended actions for legal review before shipping.
中文简介正在准备中。当前显示英语简介。
Create Mermaid diagrams from code relationships parsed by Trailmark. Visualize function calls, class inheritance, module dependencies, class members, complexity hotspots, and paths from inputs to sensitive functions, with adjustable focus, depth, and layout.
中文简介正在准备中。当前显示英语简介。
Audit npm, PyPI, and Go dependencies for version-specific advisories, inactive upstream projects, concentrated npm publishing rights, and installation scripts. Produce a report backed by collected data, with assessment coverage, action priorities, and upgrade or replacement guidance.
中文简介正在准备中。当前显示英语简介。
Guide Expo SDK upgrades through dependency updates, diagnostics, configuration cleanup, and migration of deprecated packages. Includes checks for native project changes and guidance for moving audio and video code to replacement APIs.
中文简介正在准备中。当前显示英语简介。
Manage Node.js dependencies with pnpm, from installing packages to coordinating multiple projects in one workspace. The skill covers shared version settings, third-party package patches, dependency overrides, and consistent installation procedures for automated build environments.
中文简介正在准备中。当前显示英语简介。