npm-research
NPM Research Skill
Automated skill for researching npm packages to identify changelogs, security advisories, breaking changes, and compatibility impacts.
Use Cases
- Evaluate a dependency upgrade before applying it
- Find security vulnerabilities affecting a package
- Understand breaking changes between versions
- Generate research summaries for dependency reviews
- Validate compatibility with current codebase
- Check release history and maintenance status
Core Research Methods
1. Retrieve Package Metadata
Get comprehensive package information from npm registry:
More from equinor/fusion-framework
dependabot-pr-handler
Automated workflow for researching, validating, and safely merging Dependabot PRs in the Fusion Framework monorepo. Use when asked to review dependencies, handle or merge Dependabot PRs, validate dependency updates, or investigate build/test/lint impacts from dependency changes.
35pnpm-dependency-analysis
Analyze package usage, resolved versions, direct/transitive dependencies, workspace interdependencies, and blast radius in pnpm monorepos. Perfect for Dependabot PR triage, upgrades, security reviews, and version conflict debugging.
34make-skill-template
Create new Agent Skills for GitHub Copilot from prompts or by duplicating this template. Use when asked to "create a skill", "make a new skill", "scaffold a skill", or when building specialized AI capabilities with bundled resources. Generates SKILL.md files with proper frontmatter, directory structure, and optional scripts/references/assets folders.
30rebase
Guide for rebasing feature branches onto main in the Fusion Framework monorepo, including handling pnpm-lock.yaml conflicts
28fusion-dependency-review
Review dependency PRs with structured research, existing-PR-discussion capture, multi-lens analysis (security, code quality, impact), and a repeatable verdict template. USE FOR: dependency update PRs, Renovate/Dependabot PRs, library upgrade reviews, "review this dependency PR", "should we merge this update". DO NOT USE FOR: feature PRs, application code reviews, dependency automation/bot configuration, or unattended merge without confirmation.
4fusion-discover-skills
Discovers relevant Fusion skills through Fusion MCP first, falls back to GitHub-backed catalog inspection when needed, returns concise matches with purpose and next-step guidance, and handles install, update, or remove intent without guesswork. USE FOR: finding a skill for a task, asking what to install, checking update or remove guidance, discovering available Fusion skills. DO NOT USE FOR: creating new skills, performing the task itself, or inventing results when discovery signals are unavailable.
2