skills.rest
0xUrsanomics
0xUrsanomicsCOMMUNITY
Explore all skills by this author →
GitHub

vendored-deps

Compare local manifests against upstream GitHub release tags to track dependency drift.

2|Updated Jul 22, 2026
Search Tags:#automation#security#github#maintenance#updates#dependency
One-click install
npx skills add https://github.com/0xUrsanomics/utopia-os --skill vendored-deps
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vendored-deps
Source: https://github.com/0xUrsanomics/utopia-os/tree/main/skills-shared/vendored-deps
Command: npx skills add https://github.com/0xUrsanomics/utopia-os --skill vendored-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill solves the problem of silent dependency drift for tools installed manually from GitHub that are not managed by standard package managers like npm or pip.

Core Features & Use Cases

  • Inventory Tracking: Maintains a central manifest of manually adopted binaries and repositories.
  • Version Monitoring: Automatically checks GitHub for new releases or tags against your currently pinned versions.
  • Security-First Workflow: Integrates with system-wide stand-down registries and age-gating to ensure updates are reviewed and safe before adoption.

Quick Start

Run the vendored-deps check script to identify which of your manually installed tools have pending upstream updates.

Frequently Asked Questions about vendored-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I monitor version drift for manually installed GitHub dependencies?▼

This Skill monitors version drift for manually installed GitHub dependencies by comparing local manifests against upstream release tags to flag stale binaries that require manual intervention.

What is the best way to track upstream updates for tools not managed by standard package managers?▼

The best way to track upstream updates for unmanaged tools is maintaining a central inventory manifest and automatically checking GitHub for new releases against your pinned versions.

Can I enforce security gate protocols when checking manually installed binaries for updates?▼

You can enforce security gate protocols when checking manually installed binaries by integrating with system-wide stand-down registries and age-gating to ensure updates are reviewed before adoption.

How do I generate a status report for stale binaries in secure development environments?▼

To generate a status report for stale binaries in secure development environments, run the check script which utilizes GitHub API integration to identify tools with pending upstream updates.

Does vendored-deps work with tools installed manually from GitHub repositories?▼

Yes, vendored-deps works with tools installed manually from GitHub repositories by comparing your local pinned versions against upstream release tags to identify required manual updates.

Related Skills

Explore More Software Engineering Skills→
wipcomputerwipcomputer
3

wip-repos

Reconcile repository filesystem layout with a central manifest file.

Official
Intermediate
ArvorCoArvorCo
96

checklist

Generate Markdown validation checklists from spec, plan, and tasks documents.

Community
Advanced
datht-workdatht-work
15

SafeAI EdTech & Child Privacy Expert

Draft compliance-focused PRDs for EdTech products using COPPA, FERPA, and age-appropriate design codes.

Community
Advanced
ouzayrouzayr

package-management

Install and manage language packages, system dependencies, and runtimes with Nix, npm, pip, and cargo.

Community
Intermediate