Harden Packages — Development skill for Claude Code
Pin dependency versions, disable install scripts, and secure registry configs.
How to install Harden Packages
Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-packages/SKILL.md
mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-packages && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/harden-packages.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-packages/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Harden Packages does
description: Pin dependency versions, disable install scripts, and secure registry configs allowed-tools: Read, Write, Edit, Glob, Grep, Bash(npm:*, pnpm:*, yarn:*, pip:*, pip-compile:*, uv:*, go:*, cargo:*, bundle:*, git:*, docker:*) argument-hint: [package-manager]
Harden the project's package manager configuration for supply chain security. **This command takes action by default** - it pins versions, disables scripts, and secures configs. Changes are explained as they are made.
Read
Alternatives in Development
- Nexting — Remote control for Claude Code, Codex, Grok, and Cursor on Mac or PC 1.3k ★
- Contributing To Claude Code Configs — Thank you for your interest in contributing to Claude Code Configs 625 ★
- Agent Vibes Bmad Voices — Control BMAD party mode voice integration (enable/disable/status) 153 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Publishing
Use when publishing Buoy packages to npm, bumping versions, or debugging workspace: dependency leaks. Covers t
Skilldex
Package manager and registry for Claude skill packages - install, validate, score, and publish .skill packages
Harden Containers
Pin base images by digest, enforce non-root, and harden Dockerfiles
Proto Pin
Pin tool versions in .prototools for team consistency
Pin Versions
Claude Version Picker
Windows wrapper that let's you chose between 2 different Claude Code versions you want to use. Simply enter th
Related Agents
Ehs Supply Chain
Software supply chain and secrets specialist for the Ethical Hacker Squad. Reviews manifests and lockfiles, in
Build Security
Build Security Agent (SSDF PW.6). Read-only. Verifies build/CI configuration changes and artifact production —
Release Guardian
Pre-publish release gate — blocks a crates.io publish if the CRATES list drifted, versions are inconsistent, t
