{"slug":"version-sentinel","title":"version-sentinel","description":"Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses PreToolUse hooks to intercept manifest edits and install commands, blocking them until the developer verifies the latest version upstream.","developer":"Daniel Kiska","category":null,"reported_installs":null,"active":true,"first_seen_at":"2026-10-03T22:13:33.942Z","last_seen_at":"2026-11-07T00:08:29.147Z","last_changed_at":"2026-10-03T22:13:33.942Z","platform":"claude","sources":["Community"],"works_with":["Claude Code"],"marketplace_url":null,"repository_url":"https://github.com/KSEGIT/Version-Sentinel.git","web_data":{},"github_data":{},"catalog_sources":{"community":[{"name":"version-sentinel","source":{"sha":"df2dde790963b161fea28ea1f2307bbb8fec7b47","url":"https://github.com/KSEGIT/Version-Sentinel.git","source":"url"},"homepage":"https://github.com/KSEGIT/Version-Sentinel#readme","description":"Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses PreToolUse hooks to intercept manifest edits and install commands, blocking them until the developer verifies the latest version upstream."}]},"manifest":{"url":"https://raw.githubusercontent.com/KSEGIT/Version-Sentinel/df2dde790963b161fea28ea1f2307bbb8fec7b47/.claude-plugin/plugin.json","payload":{"name":"version-sentinel","agents":["./agents/version-reviewer.agent.md"],"author":{"url":"https://github.com/KSEGIT","name":"Daniel Kiska"},"skills":"./skills/","license":"MIT","version":"0.4.2","commands":["./commands/vs-record.md","./commands/check-versions.md"],"homepage":"https://github.com/KSEGIT/Version-Sentinel#readme","keywords":["dependencies","packages","versions","guardrails","hooks","supply-chain-security"],"repository":"https://github.com/KSEGIT/Version-Sentinel","userConfig":{"disable":{"type":"boolean","title":"Turn off Version Sentinel (kill switch)","default":false,"description":"Default: false — the guardrail is active. Set true and every hook becomes a no-op: dependency edits and install commands are no longer blocked, the startup check for jq/curl/python3 is skipped, and successful installs stop being auto-recorded. Use it as a temporary escape hatch when a hook misfires or you are working offline, then switch it back. A VS_DISABLE variable set in your shell overrides this setting in both directions."},"window_hours":{"max":168,"min":1,"type":"number","title":"How long a recorded version check stays valid (hours)","default":24,"description":"Default: 24 hours (minimum 1, maximum 168 = one week). A check you save with /vs-record satisfies the guardrail for this long; once it lapses, the next change to that dependency is blocked again until you re-verify the version against its registry. Lower it to catch fast-moving packages and new advisories sooner; raise it to avoid repeat lookups during a long refactor, at the cost of acting on staler data."}},"description":"Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded. Supports npm, pip, Poetry/uv, Cargo, and NuGet."},"observed_at":"2026-11-06T10:50:43Z"}}