dependency-vetting

【数据与研究】Vet new package dependencies before installation. Triggers when adding packages via pip, npm, yarn, or similar package managers. Checks for typosquatting, known vulnerabilities, low adoption (potential supply chain risk), and package metadata anomalies. Use when: - User asks to install a new package - pip install, npm install, yarn add commands dete…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准