version-sentinel
Daniel Kiska v0.4.2
Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses PreToolUse hooks to...
From the developer
License
MIT
Declared components
Skills · Commands · Agents
Works with
Claude Code
Description
From the marketplace listing
Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses PreToolUse hooks to intercept manifest edits and install commands, blocking them until the developer verifies the latest version upstream.
What changed
No changes recorded yet. Follow this plugin to keep track of future changes.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Universal package security manager — intercepts install commands across 14 ecosystems (npm, yarn, pnpm, bun, pip, uv, poetry, cargo, go, ...
Shared terms: cargo, npm, pip, dependency
-
Dependency security guard for AI coding agents. Automatically scans npm, pip, pnpm, yarn, and bun packages for known vulnerabilities and ...
Shared terms: dependency, npm, pip, block
-
Security guardrails for Claude Code. Intercepts every tool call via PreToolUse hook and evaluates it against your Open Agent Passport (OA...
Shared terms: block, intercept, pretooluse, check
-
Evaluate npm and Python packages before adding them as dependencies. Automatically gathers package metadata, analyzes source complexity, ...
Shared terms: npm, check, source, install
-
Security guard hook for Claude Code. Evaluates every tool call (Bash, Edit, Write, Read, MCP) against 864 pattern-matching rules to block...
Shared terms: block, edit, hard, hook
Keywords
Files & skills
version-sentinel · catalog manifest
Saved declaration
{}
version-sentinel · catalog manifest
Saved declaration
{
"name": "version-sentinel",
"source": {
"sha": "df2dde790963b161fea28ea1f2307bbb8fec7b47",
"url": "https://github.com/KSEGIT/Version-Sentinel.git",
"source": "url"
},
"homepage": "https://github.com/KSEGIT/Version-Sentinel#readme",
"description": "Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded via WebSearch. Supports npm, pip, Cargo, and NuGet ecosystems. Uses PreToolUse hooks to intercept manifest edits and install commands, blocking them until the developer verifies the latest version upstream."
}
version-sentinel · catalog manifest
Skills
"./skills/"
Commands
[ "./commands/vs-record.md", "./commands/check-versions.md" ]
Agents
[ "./agents/version-reviewer.agent.md" ]
Saved declaration
{
"name": "version-sentinel",
"agents": [
"./agents/version-reviewer.agent.md"
],
"author": {
"url": "https://github.com/KSEGIT",
"name": "Daniel Kiska"
},
"skills": "./skills/",
"license": "MIT",
"version": "0.4.2",
"commands": [
"./commands/vs-record.md",
"./commands/check-versions.md"
],
"homepage": "https://github.com/KSEGIT/Version-Sentinel#readme",
"keywords": [
"dependencies",
"packages",
"versions",
"guardrails",
"hooks",
"supply-chain-security"
],
"repository": "https://github.com/KSEGIT/Version-Sentinel",
"userConfig": {
"disable": {
"type": "boolean",
"title": "Turn off Version Sentinel (kill switch)",
"default": false,
"description": "Default: false — the guardrail is active. Set true and every hook becomes a no-op: dependency edits and install commands are no longer blocked, the startup check for jq/curl/python3 is skipped, and successful installs stop being auto-recorded. Use it as a temporary escape hatch when a hook misfires or you are working offline, then switch it back. A VS_DISABLE variable set in your shell overrides this setting in both directions."
},
"window_hours": {
"max": 168,
"min": 1,
"type": "number",
"title": "How long a recorded version check stays valid (hours)",
"default": 24,
"description": "Default: 24 hours (minimum 1, maximum 168 = one week). A check you save with /vs-record satisfies the guardrail for this long; once it lapses, the next change to that dependency is blocked again until you re-verify the version against its registry. Lower it to catch fast-moving packages and new advisories sooner; raise it to avoid repeat lookups during a long refactor, at the cost of acting on staler data."
}
},
"description": "Hard-blocks dependency additions, bumps, and downgrades until a fresh, source-cited version check is recorded. Supports npm, pip, Poetry/uv, Cargo, and NuGet."
}
plugin.json observed Nov 6, 2026 · 10:50 UTC. Manifest source ↗
Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.
Installation instructions
Community
/plugin marketplace add anthropics/claude-plugins-community
/plugin install version-sentinel@claude-community
Technical details
- Sources
- Community
- First seen
- Oct 3, 2026 · 22:13 UTC
- Last seen
- Nov 7, 2026 · 18:00 UTC
- Latest observed change
- Oct 3, 2026 · 22:13 UTC
- Collection status
- Listed
- Reported installs
- Not provided
Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.
Download plugin data (JSON)Plugin history: served from cache. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.