@skills-supply/sk - npm Package Compare versions

Comparing version 0.1.4 to 0.1.5

package.json

@@ -8,7 +8,7 @@ {
 		"@clack/prompts": "^0.7.0",
+		"@skills-supply/agents-toml": "latest",
 		"commander": "^14.0.2",
 		"consola": "^3.4.2",
 		"open": "^11.0.0",
-		"smol-toml": "^1.6.0",
-		"zod": "^3.25.76"
+		"smol-toml": "^1.6.0"
 	},
@@ -56,3 +56,3 @@ "description": "Skills Supply CLI - Install and manage AI agent skills",
 	"type": "module",
-	"version": "0.1.4"
+	"version": "0.1.5"
 }

README.md

-# @skills-supply/sk
-
-CLI for installing and managing AI agent skills.
-
-## Installation
-
-```bash
-# npm (requires Node.js 18+)
-npm install -g @skills-supply/sk
-
-# Homebrew (macOS/Linux - standalone binary)
-brew install 803/sk/sk
-
-# Scoop (Windows - standalone binary)
-scoop bucket add 803 https://github.com/803/scoop-sk
-scoop install sk
-```
-
-## Quick Start
-
-```bash
-# Install a skill
-sk install <skill-name>
-
-# List installed skills
-sk list
-
-# Get help
-sk --help
-```
-
-## Documentation
-
-For full documentation, see the [main repository](https://github.com/803/skills-supply).
-
-## License
-
-MIT

New alerts

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

579073

3.75%

Lines of code

15713

4.35%

Worsened metrics

Number of package files

3

-25%

Number of medium quality alerts

1

Infinity%

Number of lines in readme file

0

-100%

Number of low supply chain risk alerts

38

5.56%

Dependency changes

• + Added

  @skills-supply/agents-toml@latest

• + Added

  @skills-supply/agents-toml@0.1.3
  (transitive)

• + Added

  zod@4.3.6
  (transitive)

• - Removed

  zod@^3.25.76

• - Removed

  zod@3.25.76
  (transitive)