Tag: package-management

All-in-one JavaScript and TypeScript toolchain: a single bun binary is a Node.js-compatible runtime, package manager, test runner and script runner, with noticeably faster installs and test runs.

Astral's extremely fast Python package and project manager written in Rust, replacing pip, pipx, poetry, pyenv and more. Supports lockfiles and multiple Python versions, and uvx runs Python tools without installing them.

From HKU's Data Intelligence Lab: plugins or skills for Claude Code, Codex and other agents generate agent-callable CLIs for apps like GIMP, Blender and LibreOffice, and the cli-hub package manager finds and installs ready-made community CLIs. Needs Python 3.10+.

Package manager for macOS and Linux: agents can brew install CLI tools and desktop apps (casks), or use brew bundle to restore a dev environment from a Brewfile.

Python 3.12+ development plugin with python-pro, django-pro and fastapi-pro subagents, a project scaffolding command, and 16 skills on async, type safety, testing, packaging, uv and more. Part of the wshobson/agents marketplace.

Package manager for the open Agent Skills ecosystem: one command installs skills from GitHub and other sources into Claude Code, Codex, Cursor and dozens more agents, with search, update and removal. From Vercel Labs.

Polyglot dev environment manager: declare Node, Python, Go and other tool versions, environment variables and project tasks in mise.toml; mise exec and mise run install tools on demand and run them, with one config shared by local and CI.

Kubernetes package manager that packages, installs, upgrades and rolls back releases with Chart templates, including ready-made charts from Artifact Hub. A CNCF graduated project; needs a kubeconfig to reach your cluster.

Google's official dependency vulnerability scanner: parses project lockfiles and container images, checks them against the OSV.dev database to find affected dependencies, and can suggest upgrade fixes (experimental).

Trail of Bits skill that audits npm, PyPI and Go supply-chain risk: known advisories across direct deps and the whole lockfile tree, deprecated or archived upstreams, npm publisher concentration and install-time scripts. Needs uv; a logged-in gh is recommended.

The Dart team's official MCP server (dart mcp-server): analyze project errors, search pub.dev and manage dependencies, connect to running Flutter apps for hot reload, and read runtime errors and the widget tree. Needs Dart 3.9+; still experimental.