dependency-evaluator
Apart Tech v1.0.0
Evaluate npm and Python packages before adding them as dependencies. Automatically gathers package metadata, analyzes source complexity, checks security and maintenance health, and produces a stru...
From the developer
License
MIT
Works with
Claude Code
Description
From the marketplace listing
Evaluate npm and Python packages before adding them as dependencies. Automatically gathers package metadata, analyzes source complexity, checks security and maintenance health, and produces a structured USE / EXTRACT / BUILD verdict. Auto-triggers when your agent is about to install a new package, or run on-demand with /evaluating-dependencies <package> [function]. Catches supply chain red flags like .pth injection, typosquatting, and stale maintainership.
What changed
No changes recorded yet. Follow this plugin to keep track of future changes.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get s...
Shared terms: dependencie, check, security, analyze
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and ...
Shared terms: npm, package, security, dependencie
-
Use NPM packages as Maven/Gradle dependencies. Searches, converts, and syncs NPM packages to Maven Central via mvnpm.org.
Shared terms: dependencie, npm, package
-
Endor Labs ai plugin for AI-native application security — scan and analyze across your software supply chain
Shared terms: analyze, security, chain, supply
-
Universal package security manager — intercepts install commands across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, ...
Shared terms: npm, package, security, dependencie
Keywords
Files & skills
dependency-evaluator · catalog manifest
Saved declaration
{}
dependency-evaluator · catalog manifest
Saved declaration
{
"name": "dependency-evaluator",
"source": {
"sha": "ee22907788ea53d5a41f0c84e7b09471a86b9588",
"url": "https://github.com/apart-tech/plugins.git",
"source": "url"
},
"homepage": "https://github.com/apart-tech/plugins",
"description": "Evaluate npm and Python packages before adding them as dependencies. Automatically gathers package metadata, analyzes source complexity, checks security and maintenance health, and produces a structured USE / EXTRACT / BUILD verdict.\n\nAuto-triggers when your agent is about to install a new package, or run on-demand with /evaluating-dependencies <package> [function]. Catches supply chain red flags like .pth injection, typosquatting, and stale maintainership."
}
dependency-evaluator · catalog manifest
Saved declaration
{
"name": "dependency-evaluator",
"author": {
"url": "https://github.com/apart-tech",
"name": "Apart Tech"
},
"license": "MIT",
"version": "1.0.0",
"homepage": "https://github.com/apart-tech/plugins",
"keywords": [
"npm",
"dependencies",
"evaluation",
"build-vs-buy",
"developer-tools"
],
"repository": "https://github.com/apart-tech/plugins",
"description": "Apart Tech's plugin collection for Claude Code — developer tools, evaluation skills, and workflow automation"
}
plugin.json observed Nov 6, 2026 · 10:43 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
Installation instructions
Community
/plugin marketplace add anthropics/claude-plugins-community
/plugin install dependency-evaluator@claude-communityTechnical details
- Sources
- Community
- First seen
- Oct 3, 2026 · 22:13 UTC
- Last seen
- Nov 7, 2026 · 00:08 UTC
- Latest observed change
- Oct 3, 2026 · 22:13 UTC
- Collection status
- Listed
- Reported installs
- Not provided
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.