From nexus-agents
Checks that dependencies are current stable versions, not deprecated, and free from security advisories. Use before adding new dependencies or at project setup.
How this skill is triggered — by the user, by Claude, or both
Slash command
/nexus-agents:version-checkThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
<!-- CANONICAL SOURCE: CLAUDE.md Core Operating Principles - Version Currency Enforcement -->
Full documentation: CLAUDE.md
npm view <package> version
npm view <package> deprecated
npm view <package> time.modified
npm view <package> engines
| Criterion | Pass | Fail |
|---|---|---|
| Deprecation | Not deprecated | Deprecated |
| Last update | Within 12 months | Over 12 months |
| Node version | Compatible with 22.x | Incompatible |
| Security | No advisories | Has advisories |
pnpm audit
If deprecated or outdated:
See CLAUDE.md for complete version verification protocol.
| Excuse | Counter |
|---|---|
| "It's the most-starred package" | Stars correlate with marketing, not maintenance. Check last-commit, open-issues-vs-resolved-rate, recent CVE response time. |
| "Latest version is fine, just install it" | Latest may be a 0.x with breaking changes, or a v2 alpha. Check stability marker — latest tag isn't always stable. |
| "I'll fix any issues that come up" | Cost of npm uninstall + replacement is a multiple of npm view upfront. Ten seconds of due diligence saves an afternoon. |
npm install <name> without a version-check cite in the PRnpm view <pkg> dist-tags confirms latest is intentional (not alpha/beta)main of upstreamnpm view <pkg> license)npm audit <pkg>bundlephobia or npm view <pkg> dist.tarball size)npx claudepluginhub nexus-substrate/nexus-agentsAudits npm dependencies for vulnerabilities and outdated packages, reporting CVEs with fix commands and severity levels.
Audits npm dependencies for security vulnerabilities, outdated packages, and bundle impact. Guides upgrade planning with CVE research and per-dependency proposals.
Audits project dependencies for CVEs, outdated packages, and unsafe versions. Recommends highest safe version per package, unlike npm audit. Blocks critical CVEs via Composure commit gate.