Skip to content
Back to skills

Deps Minor

ASecurity

Safe minor dependency updates with validation (lint/test/build) and automatic rollback on failure.

  • 666 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added February 8, 2026
toolsshellbashgit

Security analysis

A96/100
  • mediumInstalls packages at runtime which could introduce malicious dependencies

Pro shows the line behind each finding and how to fix it

Scanned February 10, 2026

npx -y skills add majiayu000/claude-skill-registry --skill deps-minor --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Deps Minor?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Deps Minor
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/majiayu000-deps-minor/badge)](https://www.skillsdirectory.com/skills/majiayu000-deps-minor)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: deps-minor
description: Safe minor dependency updates with validation (lint/test/build) and automatic rollback on failure.
---

# Purpose

Perform safe **minor** npm dependency updates for the current project.  
Run validation (lint → test → build) after each update, and revert if any step fails.  
No major updates are performed.

# Scope

- Operates on both `dependencies` and `devDependencies`.
- Updates only minor versions (`x.X.x`).
- No git operations.
- Excludes i18next* and storybook* packages.

# Process

1. **Discovery**
   - Run: `ncu --target minor --jsonAll`
   - Filter out:
     - Any package containing `i18next`, `18next`, or `storybook`
2. **Batch Update**
   - Update in batches of ≤8 packages:
     ```bash
     ncu -u <pkg-list> --target minor
     npm install --no-audit --no-fund
     ```
3. **Validation**
   - Run (if present):
     ```bash
     npm run lint
     npm run test
     npm run build
     ```
   - If any step fails:
     - Revert last batch changes using backup copy.
     - Log failure and skip problematic packages.
4. **Reporting**
   - Output summary with:
     - Updated packages
     - Skipped packages
     - Validation results
   - Remind user: “No git operations were performed.”

# Tool Permissions

- **Bash**: run shell commands
- **Read**: inspect `package.json`, test scripts
- **Write**: modify `package.json`, `package-lock.json`

# Safety

- Always back up `package.json` and `package-lock.json` before updates.
- Never touch excluded packages.
- Stop on first failed batch.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.