vendored-deps

Name: vendored-deps
Availability: InStock
Author: 0xursanomics

Compare local manifests against upstream GitHub release tags to track dependency drift.

2|Updated Jul 22, 2026

Search Tags:#automation #security #github #maintenance #updates #dependency

Ready to run

npx skills add https://github.com/0xUrsanomics/utopia-os --skill vendored-deps

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vendored-deps
Source: https://github.com/0xUrsanomics/utopia-os/tree/main/skills-shared/vendored-deps
Command: npx skills add https://github.com/0xUrsanomics/utopia-os --skill vendored-deps

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill solves the problem of silent dependency drift for tools installed manually from GitHub that are not managed by standard package managers like npm or pip.

Core Features & Use Cases

Inventory Tracking: Maintains a central manifest of manually adopted binaries and repositories.
Version Monitoring: Automatically checks GitHub for new releases or tags against your currently pinned versions.
Security-First Workflow: Integrates with system-wide stand-down registries and age-gating to ensure updates are reviewed and safe before adoption.

Quick Start

Run the vendored-deps check script to identify which of your manually installed tools have pending upstream updates.

Frequently Asked Questions about vendored-deps

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I monitor version drift for manually installed GitHub dependencies?▼

This Skill monitors version drift for manually installed GitHub dependencies by comparing local manifests against upstream release tags to flag stale binaries that require manual intervention.

What is the best way to track upstream updates for tools not managed by standard package managers?▼

The best way to track upstream updates for unmanaged tools is maintaining a central inventory manifest and automatically checking GitHub for new releases against your pinned versions.

Can I enforce security gate protocols when checking manually installed binaries for updates?▼

You can enforce security gate protocols when checking manually installed binaries by integrating with system-wide stand-down registries and age-gating to ensure updates are reviewed before adoption.

How do I generate a status report for stale binaries in secure development environments?▼

To generate a status report for stale binaries in secure development environments, run the check script which utilizes GitHub API integration to identify tools with pending upstream updates.

Does vendored-deps work with tools installed manually from GitHub repositories?▼

Yes, vendored-deps works with tools installed manually from GitHub repositories by comparing your local pinned versions against upstream release tags to identify required manual updates.