Skip to main content

Browse the directory

Showing 2 resources for "package-management"
Saved
Active

Safety notes filter active — add entries to compare trust side by side.

Rollout signal scan

2 rollout risk signals in current results

Biggest gaps: metadata review, package integrity. 0 entries have 2+ required gaps.

2 scanned

Install payload

Install payload is broadly covered in current results.

good

100% (2/2)

Adoption queue

Browse adoption queue · balanced

0/2 visible results are ready for staged adoption under this preset.

ready 0caution 2hold 0

Dependency Update Checker - Hooks

1 blockers: Metadata review

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

hooks/dependency-update-checker · trust review · confidence 67%

caution

50/100

Request metadata review from maintainers or internal owners.

Collect package checksum or signed artifact information.

skills/renovate-dependency-upgrade-review-capability-pack · trust review · confidence 67%

Decision confidence

Decision confidence scan · balanced

0/2 results are high-confidence for the selected preset.

high 0medium 2low 0

Dependency Update Checker - Hooks

Address Metadata review, Package integrity before broader rollout.

medium

54/100

Missing: Metadata reviewMissing: Package integrity

hooks/dependency-update-checker · trust review

Freshness distribution

50% of this view is aging or stale

Median age 185 days; 1 fresh of 2 scanned. Re-verify the oldest entries.

median 185d

Aging

91–180 days

0%

0 entries

Stale

> 180 days

50%

1 entry

Expert Renovate review skill for evaluating dependency upgrade PRs, package rules, lockfile changes, grouping, automerge, and release readiness.

Level:expertType:capability-packVerified:validated
Safety ✓ Privacy ✓

Automatically checks for outdated dependencies and suggests updates with security analysis. This PostToolUse hook triggers when dependency manifest files (package.json, requirements.txt, Gemfile, go.mod, Cargo.toml, pyproject.toml) are modified, providing real-time dependency health monitoring.

Trigger:PostToolUse
Safety ✓ Privacy ✓