foundation-deps

To install and pin dependencies across multiple languages, the skill parses manifests like pyproject.toml, package.json, Cargo.toml, and go.mod to resolve conflicts and generate lockfiles. This ensures reproducible builds by applying version pinning across all detected ecosystems.

Lockfiles are needed for reproducible builds to freeze exact package versions across Python, Node, Rust, and Go projects. Without lockfiles, manifest ranges can resolve to different versions over time, causing unexpected behavior or compilation failures in production environments.

Yes, you can resolve dependency conflicts across different package manifests automatically by parsing manifests like pyproject.toml and Cargo.toml. The skill handles conflict resolution during installation to ensure compatible versions are pinned across the project's ecosystems.

The best way to verify dependency installations is through smoke-testing, which checks that imports and compilations succeed after packages are installed and pinned. This validation step ensures the locked dependencies function correctly within the project environment.

Yes, this dependency installation approach works with Python, Node, Rust, and Go projects simultaneously. It inspects manifests across all these ecosystems to handle version pinning, conflict resolution, and lockfile creation in a single pass for mixed-language repositories.