npm-install

What problem does it solve?

Managing Node.js dependencies reliably is error-prone: inconsistent installs, lockfile drift, CI non-determinism, peer dependency conflicts, and unremediated vulnerability findings disrupt builds and deployments. This Skill centralizes best practices for installing, updating, removing, and auditing npm packages to keep projects reproducible and secure.

Core Features & Use Cases

• Deterministic CI installs: run clean installs from package-lock.json to ensure reproducible builds.
• Dependency lifecycle: add production or dev dependencies, update within semver, and remove unused packages while managing the lockfile.
• Conflict resolution & fixes: identify peer dependency issues, apply legacy or force flags, and use overrides to patch transitive vulnerabilities.
• Security auditing: run npm audit and apply automatic fixes or surface items that require manual intervention.
• Use Case: In CI pipelines, use the clean install workflow to remove node_modules, restore exact versions from package-lock.json, and run an automated security audit before deployment.

Quick Start

Use the npm-install skill to perform a clean CI install, add or update a dependency, and run a security audit.