Package Manager Security

This skill helps you harden npm, pnpm, and bun against supply chain attacks. It provides configuration guides, best practices, and troubleshooting for all three package managers.

How to use this skill

1. Identify which package manager(s) the user's query is about (npm, pnpm, bun, or multiple)
2. If they ask about npm → read references/npm.md
3. If they ask about pnpm → read references/pnpm.md
4. If they ask about bun → read references/bun.md
5. If they ask about multiple or general concepts (lockfiles, CI/CD, version pinning) → read all relevant files
6. Answer concisely and directly. Provide configuration snippets and commands the user can copy/paste.

Common concepts (apply to all three)

These security practices apply regardless of package manager. Mention them when relevant.