Updated 5d ago
by clidey
deptrust
deptrust is a CLI that checks package versions for known vulnerabilities across npm, PyPI, crates.io, Go modules, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, GitHub Actions, and more. It runs locally as a CLI and as an MCP server, comes with a skill, and a hook.
61 GitHub stars (61)
Steady at 61 stars — no new stars in the 16 days since Sep 30.
- 1 skill (1 skills found in its SKILL.md files)
- 3 forks (3 forks)
- 5d ago last update (Last updated 5d ago)
Install
Skills CLI
npx skills add clidey/deptrust
Asks which agents to install it for. Add -g to install it for every project.
Claude Code
git clone https://github.com/clidey/deptrustcp -r "deptrust/.agents/skills/deptrust-package-check" ~/.claude/skills/
Copies the deptrust-package-check skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project).
Plugin
/plugin marketplace add clidey/deptrust
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
deptrust-package-check
Check package safety with the local deptrust CLI before installing, updating, or recommending npm, PyPI, Cargo, Go module, RubyGems, NuGet, Maven, Packagist, pub.dev, CocoaPods, Hex.pm, Hackage, or GitHub Actions dependencies. Use when asked to add, upgrade, audit, or evaluate a package version and MCP is unavailable or not configured.
.agents/skills/deptrust-package-check/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.