jchigg2000-git

Harden Deps

Name: Harden Deps
Author: jchigg2000-git

Security community

SOURCE https://github.com/jchigg2000-git/claude-code-dev/blob/main/commands/harden-deps.md

Description

--- description: Deployment hardening step 3 — run ecosystem-native vulnerability audit (full tree AND production-only, so shipped CVEs are separated from dev-only ones), flag unpinned versions, abandoned packages, dev-deps leaking into runtime. Read-only; --fix runs `npm audit fix` (non-breaking only) and offers to pin floating versions one-by-one. Fire on `/harden-deps`. argument-hint: "[--fix] [--no-install] [scope path]" allowed-tools: Bash(npm:*), Bash(pnpm:*), Bash(yarn:*), Bash(pip:*), Ba

Installation

Installs to ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-deps/SKILL.md

Terminal

mkdir -p ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-deps && curl -fsSL https://raw.githubusercontent.com/jchigg2000-git/claude-code-dev/HEAD/commands/harden-deps.md -o ~/.claude/skills/jchigg2000-git-claude-code-dev-harden-deps/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.