{"id":22213,"plugin_id":"plugins_6ab01c9056c481918eac972df8fb396d","kind":"skill","collection_source":null,"comparison_source":null,"observed_at":"2026-09-30T23:17:11.417Z","digest":"34dea0def6ea0e4d6c0d6b4398d223f5af33dcd44c70b21f15de19707b1825c5","against":null,"payload":{"description":"Review packages, lockfiles, scripts, provenance, licensing, advisories, and dependency risk.","included_files":[],"name":"dependencies-and-supply-chain","skill_md_contents":"---\nname: dependencies-and-supply-chain\ndescription: Review packages, lockfiles, scripts, provenance, licensing, advisories, and dependency risk.\n---\n\n# Dependencies and Supply Chain\n\nCheck direct and transitive dependencies, versions, lockfiles, install scripts, abandoned packages, advisories, typosquatting signals, permissions, licenses, and update paths. Prioritize reachable vulnerable code and verify fixes with reproducible installs.\n"},"changes":[],"summary":"First saved snapshot. No earlier version is available for comparison.","summary_kind":"deterministic","summary_metadata":{}}