The original title is "Claude Code Skills for safe PHP and JS package updates"

Short summary

The author encodes supply-chain safety rules into Claude Code skills (markdown instruction files) so AI agents follow strict protocols when updating PHP and JS dependencies. Rules include researching recent compromised-package incidents, running registry audits, and enforcing a 7-day minimum release age to skip poisoned versions. The approach leverages pnpm and Bun's built-in minimum-release-age features while manually enforcing the same gate for Composer-based PHP projects.

• •Claude Code skills encode dependency-update safety rules as markdown instructions loaded by AI agents
• •Key rule: never install packages younger than 7 days to avoid short-lived compromised releases
• •Covers both JS (pnpm/Bun native support) and PHP (manual enforcement via Composer) workflows

Generated with AI, which can make mistakes.