About deps-dev
deps-dev is a skill for querying package metadata through the deps.dev API. It guides package-version selection and parsing, with explicit safeguards against guessing versions.
Key features
- 01Fetch package version metadata
- 02Select version marked as default
- 03Check deprecation fields
- 04Normalize ecosystem package names
- 05Handle large JSON responses
Use cases
- 01Find the API-designated version for a package
- 02Check whether a selected version is deprecated
- 03Parse long version lists safely
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ itechmeat/ llm-code --skill deps-devAfter installing, type/deps-devin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/api.mdlarge-responses.mdlatest-version.mdnaming-and-encoding.mdsources.mdDetails
From the project READMEdeps.dev (Skill Router)
This file is intentionally introductory.
Open the right note under references/ based on what you need.
Start here (fast)
- Need the latest/default version of a known package? Read:
references/latest-version.md. - Handling huge version lists or truncated responses? Read:
references/large-responses.md. - Not sure how to format/normalize package names per ecosystem? Read:
references/naming-and-encoding.md. - Need endpoint shapes and fields to parse, including deprecation flags (
isDeprecated/deprecatedReason), PyPIprojectStatus, or resolved NuGet/Maven requirements? Read:references/api.md.
Primary recipe (one request)
Goal: given {system, packageName}, return the default/latest version.
- Call GetPackage:
GET https://api.deps.dev/v3/systems/{SYSTEM}/packages/{PACKAGE} - Parse
versions[]and select the item withisDefault=true.
If isDefault is missing for all versions, stop and ask for an explicit selection rule (e.g., include pre-releases or not) instead of guessing.
isDefault does not imply the version is safe to recommend: also check isDeprecated/deprecatedReason on that version (see references/api.md) before suggesting it.
Critical prohibitions
- Do not guess the “latest” version by string sorting.
- Do not output placeholder or “approximate” versions; always wait for API data.
- Do not parse large JSON via
grepor manual truncation; use a JSON parser (jq/Python/Node). - Do not silently fall back when
isDefaultis missing; ask for the desired rule. - Do not paste large verbatim chunks from docs; summarize.
- Do not assume auth or rate limits; treat them as unspecified unless you have evidence.