“npm”

npm registry ops: login, whoami, names, publish; 1Password tmux.

List the contents of an npm package tarball before publishing.

Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardDog, manual tarball inspection, and…

Detects typosquatting attacks in npm and PyPI package registries by analyzing package name similarity using Levenshtein distance and other string metrics…

Run the pre-publish security audit for every publishable @tetherto/mdk-* package (or any non-private package in an npm monorepo).

Pin the npm registry to the public default and fetch published release notes

Create, extend, repair, validate, test, and package Pi coding-agent packages (pi packages, pi-packages, Pi 패키지) for local, npm, or git distribution.

Audit exact npm dependency versions against OSV through Runx native HTTP and emit replay-verified evidence with no unverified findings.

Automated semantic versioning and release workflow for Claude Code plugins.

Audit, update, and secure project dependencies across npm, pnpm, Yarn, pip, Pipenv, Poetry, uv, Go, Cargo, Bundler, Composer, NuGet, Maven, Gradle, Swift…

Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumerating claimable internal package names…

Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation, using edit-distance, keyboard-proximity, and…

Adds, upgrades and removes npm packages in Expo apps under a written policy - expo install, exact pins, 7-day release age, script review, licences.

Updates dependencies across Node (npm / pnpm / bun), PHP, Rust, Go, Java (Gradle / Maven), containers, GitHub Actions, GitLab CI and project-local skills.sh…

Add or remove npm packages with pnpm in the sandbox.

Motion on Regent's Phoenix LiveView and Ash sites with Anime.js v4 (npm animejs) and the shared motion kit, written as TypeScript hook islands.

Authoritative verification for @zereight/mcp-gitlab — mock GitLab, stdio MCP tool calls, npm test harness.

Use when user wants to work with Dependabot PRs, alerts, or the Dependabot configuration file.

Automated vulnerability scanner for agent platforms.

Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived…

Interactive naming assistant: help the user land on a name for a project, product, repo, company, package, or feature they love AND can actually use.

Scan code for security issues: dependency vulnerabilities (npm/pip audit), secret leaks (regex and entropy analysis), and OWASP anti-patterns like SQL…

JavaScript and Node.js patterns, async programming, modules, runtime internals, and modern ES2024+ features.

release-it configuration, setup, troubleshooting, and plugin development.