# 010103 Package Operations

> Day-to-day package management for npm, pnpm, and bun — install, update, audit, publish, dependency inspection, and version conflict resolution.

- **Type:** Skill
- **Install:** `agentstack add skill-natuleadan-skills-010103-package-operations`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [natuleadan](https://agentstack.voostack.com/s/natuleadan)
- **Installs:** 0
- **Category:** [Developer Tools](https://agentstack.voostack.com/c/developer-tools)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [natuleadan](https://github.com/natuleadan)
- **Source:** https://github.com/natuleadan/skills/tree/main/skills/010103-package-operations
- **Website:** https://www.skills.sh/natuleadan/skills

## Install

```sh
agentstack add skill-natuleadan-skills-010103-package-operations
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Package Operations

This skill covers day-to-day package management operations across npm, pnpm, and bun.

## How to use this skill

1. If the user asks about **installing or removing packages** → run `python scripts/validate.py install`
2. If the user asks about **updating dependencies** → run `python scripts/validate.py outdated`
3. If the user asks about **auditing for vulnerabilities** → run `python scripts/validate.py audit`
4. If the user asks about **publishing packages** → run `python scripts/validate.py publish`
5. If the user asks about **dependency troubleshooting** → run `python scripts/validate.py doctor`

## Quick reference

| Task | npm | pnpm | bun |
|---|---|---|---|
| Install | `npm install` | `pnpm install` | `bun install` |
| Add dep | `npm install ` | `pnpm add ` | `bun add ` |
| Remove | `npm uninstall ` | `pnpm remove ` | `bun remove ` |
| Update all | `npm update` | `pnpm update` | `bun update` |
| Audit | `npm audit` | `pnpm audit` | `bun pm audit` |
| Outdated | `npm outdated` | `pnpm outdated` | `bun outdated` |
| Publish | `npm publish` | `pnpm publish` | `bun publish` |
| Doctor | `npm doctor` | `pnpm doctor` | `bun --help` |

## Best practices

- Always review lockfile changes before committing
- Use `--frozen-lockfile` in CI (`npm ci`, `pnpm install --frozen-lockfile`, `bun install --frozen-lockfile`)
- Pin exact versions in production: set `save-exact=true` in `.npmrc`
- Audit regularly: `npm audit --audit-level=high`
- Keep a change log when updating dependencies

## References

- `references/ops-guide.md` — PM-specific commands for install, update, audit, publish, and troubleshooting
- `scripts/validate.py` — Validation tool for package operations

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [natuleadan](https://github.com/natuleadan)
- **Source:** [natuleadan/skills](https://github.com/natuleadan/skills)
- **License:** MIT
- **Homepage:** https://www.skills.sh/natuleadan/skills

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-natuleadan-skills-010103-package-operations
- Seller: https://agentstack.voostack.com/s/natuleadan
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.