“npm”

npm registry ops: login, whoami, names, publish; 1Password tmux.

This skill should be used when the user asks to "publish to npm", "npm publish", "/publish-npm", "/publish_npm", or "submit to the MCP registry"; or when the…

Use when publishing a package to npmjs.com from Matt's machine and npm wants a one-time password or a fresh login -- 'npm publish', 'ship a new version to…

List the contents of an npm package tarball before publishing.

npm 패키지 다운로드 수 추적 및 성장 분석.

Triage npm packages and lockfiles for install-script malware, credential exfiltration, and worming behavior using GuardDog, manual tarball inspection, and…

Detects typosquatting attacks in npm and PyPI package registries by analyzing package name similarity using Levenshtein distance and other string metrics…

Run the pre-publish security audit for every publishable @tetherto/mdk-* package (or any non-private package in an npm monorepo).

Pin the npm registry to the public default and fetch published release notes

Create, extend, repair, validate, test, and package Pi coding-agent packages (pi packages, pi-packages, Pi 패키지) for local, npm, or git distribution.

Audit exact npm dependency versions against OSV through Runx native HTTP and emit replay-verified evidence with no unverified findings.

Automated semantic versioning and release workflow for Claude Code plugins.

Audit, update, and secure project dependencies across npm, pnpm, Yarn, pip, Pipenv, Poetry, uv, Go, Cargo, Bundler, Composer, NuGet, Maven, Gradle, Swift…

Detect and prevent dependency confusion (public-over-private package name resolution) in npm, PyPI, and Maven by enumerating claimable internal package names…

Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation, using edit-distance, keyboard-proximity, and…

Adds, upgrades and removes npm packages in Expo apps under a written policy - expo install, exact pins, 7-day release age, script review, licences.

Updates dependencies across Node (npm / pnpm / bun), PHP, Rust, Go, Java (Gradle / Maven), containers, GitHub Actions, GitLab CI and project-local skills.sh…

Add or remove npm packages with pnpm in the sandbox.

Motion on Regent's Phoenix LiveView and Ash sites with Anime.js v4 (npm animejs) and the shared motion kit, written as TypeScript hook islands.

Authoritative verification for @zereight/mcp-gitlab — mock GitLab, stdio MCP tool calls, npm test harness.

Measure traction and discoverability across all non-archived GitHub repos and their publications (npm, App Store, Play Store, web properties), judge each…

Set up or repair a Windows frontend development environment with NVM for Windows, Node.js 24 LTS, npm, pnpm, Claude Code, Git, VS Code CLI, PowerShell…

扫描代码安全漏洞，检测依赖漏洞、密钥泄露和OWASP安全模式。当用户提到安全扫描、漏洞检测、依赖审计、密钥泄露、API key、OWASP、npm audit、pip-audit或SQL注入/XSS等关键词时触发。

当需要网络搜索获取最新资料时使用。搜索技术文档、API 参考、代码示例、npm 包用法、框架指南、GitHub 仓库（README、源码、目录结构）。