safer-dependencies

Name: safer-dependencies Review
Item: safer-dependencies
Rating: 2.0
Author: Aaron Matthews

Skill Security Poor

Works inClaude Code

Poor Scanned — metadata only

Reduces supply-chain attack surface and compliance violations by automatically screening dependencies for known vulnerabilities, malicious packages, and main…

safer-dependencies is a security layer for Claude Code that audits packages before they’re added to your project. It detects and fixes risky dependencies, including CVEs, typosquats, abandoned packages, version-age issues, and adds package-cooldown violations across npm, PyPI, RubyGems, Maven, Go, and Rust.

Ask Claude to audit npm packages before installing them in production applications.
Generate a security report identifying known CVEs and typosquats in your Python dependencies.
Automate detection of abandoned or outdated packages across multiple language ecosystems.

40 starsFreeQuick setup

Below standard — Significant caveats apply. Not recommended without careful review of the security and evaluation sections.

Why it matters

Reduces supply-chain attack surface and compliance violations by automatically screening dependencies for known vulnerabilities, malicious packages, and maintenance risks before they enter the codebase.

Best for

Engineering teams and DevSecOps leads managing multi-language projects with strict dependency governance requirements.

Works in

Claude Code Claude Cowork Claude Chat

Source

https://github.com/robert-auger/safer-dependencies

By robert-auger

How to Get It

Option 1: Claude Desktop App (Code Mode)Click the + button next to the prompt box → Plugins → Add plugin. Search and click Install. Skills work in Claude Code only.

Option 2: Paste into Claude CodeCopy the command below and paste it into your conversation. Claude will install it.

Command

claude plugins install robert-auger/safer-dependencies

Tip: Paste this into a Claude Code conversation. Verify command matches your Claude Code version.

Auto-generated from the tool's public listing — not hands-on verified. Cross-check against the source repo's README before running.

First thing to try

After installing, paste this into Claude:

Audit npm packages before installing them in production applications

CostFree

Trust Signals Auto-scanned

Stars40Contributors2Last updated2026-08-31Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-09-19 · scanner v1

Community Pulse Growing

Discussed on Hacker News

Fearless FFI: Memory Safety, Safer Dependencies, Supply-Chain Attack Mitigation — Hacker News · 7 pts
Vale's “Fearless FFI”, for Memory Safety, Safer Dependencies, and Supply-Chain — Hacker News · 5 pts
Safer-dependencies is a security layer for Claude Code that audits dependencies — Hacker News · 1 pts

3 mentions across 1 sources

Reviewer notes

Auto-scanned review. These are observations, not a security certification.

Scored from trust signals (evidence-eval-v1): 35 GitHub stars; contributors unknown; last commit 1d ago; license no license.

Things to check

Scanned, not hands-on tested — this entry was auto-scanned from public metadata (GitHub metrics, license, security flags). No reviewer has run it, and no tool-specific limitations have been documented yet.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation Scores

Evaluation

Ease of Use

1/5

Versatility

2/5

Reliability

3/5

Security

3/5

Overall score2.05 / 5.00 PoorEvaluatedSep 2026

Scored from trust signals (evidence-eval-v1): 35 GitHub stars; contributors unknown; last commit 1d ago; license no license.

← Back to the Claude Observatory