[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71HV2WEGW7H161J3P2FNF0W":3,"skill-same:01M71HV2WEGW7H161J3P2FNF0W":69},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":37,"linkOnly":38,"markdownContent":39,"markdownBody":40,"frontMatter":41,"refName":42,"commitSha":43,"skillDirectory":44,"forksCount":45,"repositoryHtmlUrl":46,"repositoryHomepageUrl":6,"ownerHtmlUrl":47,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":48,"install":49,"resources":62},"01M71HV2WEGW7H161J3P2FNF0W","up-deps",null,"Update project dependencies using taze, a modern CLI tool that keeps deps fresh. Supports monorepos, version range updates, and automatic installation. Use when updating dependencies, upgrading packages, or keeping packages up-to-date.","JSGforever\u002Fskillguard","JSGforever","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F85541948?v=4","01M71FQD3E132VMR5F4TAYX3YS","01M71FQD4DYW0XJ4XQ4YQH75Y9",2,"GPL-3.0","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curev--up-deps\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36],"up","up deps","deps","cli tool","automatic","installation","update","dependencies","cli","packages","fresh","update project dependencies","version","updates","when","use","updating dependencies","tool","project","2026-11-10 10:12:30",false,"---\nname: up-deps\ndescription: Update project dependencies using taze, a modern CLI tool that keeps deps fresh. Supports monorepos, version range updates, and automatic installation. Use when updating dependencies, upgrading packages, or keeping packages up-to-date.\n---\n\n# Update Dependencies Workflow\n\nComplete workflow for updating project dependencies using [taze](https:\u002F\u002Fgithub.com\u002Fantfu-collective\u002Ftaze), a modern CLI tool that keeps your dependencies fresh.\n\n## Quick Start\n\nBy default, `taze` safely updates versions within the ranges specified in `package.json` (same behavior as `npm install`).\n\n```bash\nnpx taze\n```\n\nFor monorepos, use recursive mode:\n\n```bash\nnpx taze -r\n```\n\n## Update Levels\n\n### Safe Updates (Default)\n\nOnly bump versions within allowed ranges:\n\n```bash\nnpx taze\n```\n\n### Major Updates\n\nCheck and bump to latest stable versions including major (breaking) changes:\n\n```bash\nnpx taze major\n```\n\n### Minor Updates\n\nBump to latest minor versions within the same major version:\n\n```bash\nnpx taze minor\n```\n\n### Patch Updates\n\nBump to latest patch versions within the same minor version:\n\n```bash\nnpx taze patch\n```\n\n## Workflow Steps\n\n### 1. Check Current Dependencies\n\n```bash\n# Check package.json location\nls package.json\n\n# For monorepos, identify all package.json files\nfind . -name \"package.json\" -not -path \"*\u002Fnode_modules\u002F*\"\n```\n\n### 2. Run Taze\n\n**Basic usage:**\n```bash\nnpx taze\n```\n\n**With options:**\n```bash\n# Monorepo support\nnpx taze -r\n\n# Write changes to package.json\nnpx taze --write\n\n# Auto-install after updating\nnpx taze --write --install\n\n# Include peer dependencies\nnpx taze --peer\n\n# Include locked versions (fixed versions without ^ or ~)\nnpx taze --include-locked\n# or short form\nnpx taze -l\n\n# Force fetch latest info (no cache)\nnpx taze --force\n```\n\n### 3. Review Changes\n\nAfter running taze, review the proposed changes by checking the output. If `--write` was used, review the updated `package.json` files:\n\n```bash\n# View package.json to see updated versions\ncat package.json\n# or for monorepos, check each package.json\nfind . -name \"package.json\" -not -path \"*\u002Fnode_modules\u002F*\" -exec cat {} \\;\n```\n\n**Check for:**\n- Breaking changes in major updates\n- Compatibility issues\n\n### 4. Install Updated Dependencies\n\nIf `--install` wasn't used, install manually using `@antfu\u002Fni` which automatically detects the package manager:\n\n```bash\nnpx @antfu\u002Fni\n```\n\n`@antfu\u002Fni` automatically detects the package manager from `package.json` `packageManager` field or lock files (`pnpm-lock.yaml`, `yarn.lock`, etc.) and uses the appropriate command.\n\n## Advanced Configuration\n\n### Filter Packages\n\nInclude or exclude specific packages:\n\n```bash\n# Include specific packages\nnpx taze --include lodash,webpack\n\n# Exclude packages\nnpx taze --exclude react-dom\n\n# Use regex patterns\nnpx taze --include \u002Freact\u002F --exclude react-dom\n```\n\n### Config File (Reference Only)\n\n**Note:** Do not create `taze.config.ts` or `taze.config.js` automatically. Only use if the project already has one.\n\nIf a `taze.config.ts` or `taze.config.js` file exists in the project, it will be used for configuration.\n\nFor a complete example configuration, see [references\u002Ftaze.config.ts](references\u002Ftaze.config.ts).\n\n**Important:** Use command-line options instead of creating config files. Only reference existing config files if they are already present in the project.\n\n## Monorepo Support\n\nTaze has first-class monorepo support:\n\n```bash\n# Recursive mode scans all subdirectories with package.json\nnpx taze -r\n\n# Automatically handles local private packages\n```\n\n**Monorepo workflow:**\n1. Run `npx taze -r` to scan all packages\n2. Review taze output to see proposed changes\n3. Install dependencies at root level (or in each workspace)\n\n## Complete Example\n\n**Scenario:** Updating dependencies in a monorepo with safe updates\n\n```bash\n# 1. Check package.json locations\nfind . -name \"package.json\" -not -path \"*\u002Fnode_modules\u002F*\"\n\n# 2. Run taze in recursive mode to preview changes\nnpx taze -r\n\n# 3. Review taze output for proposed changes\n\n# 4. Write changes and install\nnpx taze -r --write --install\n```\n\n**Scenario:** Major version updates for specific packages\n\n```bash\n# Preview updates for TypeScript\nnpx taze major --include typescript\n\n# Update only TypeScript to latest major\nnpx taze major --include typescript --write\n\n# Review package.json for breaking changes\ncat package.json | grep typescript\n\n# Install dependencies\nnpx @antfu\u002Fni\n```\n\n## Important Notes\n\n- **Safe by default**: Taze only updates within version ranges unless explicitly told otherwise\n- **Locked versions**: Fixed versions (without `^` or `~`) are skipped by default\n- **Peer dependencies**: Not included by default, use `--peer` flag\n- **Monorepos**: Use `-r` flag for recursive scanning\n- **No installation required**: Use `npx taze` without installing globally\n- **Breaking changes**: Always review major updates carefully\n\n## Error Handling\n\n**If taze fails:**\n1. Check network connectivity\n2. Verify package.json syntax\n3. Try with `--force` to bypass cache\n4. Check for conflicting version ranges\n\n**If installation fails:**\n1. Clear lock file and node_modules\n2. Try with different package manager\n3. Check for peer dependency conflicts\n4. Review package.json for syntax errors\n","# Update Dependencies Workflow\n\nComplete workflow for updating project dependencies using [taze](https:\u002F\u002Fgithub.com\u002Fantfu-collective\u002Ftaze), a modern CLI tool that keeps your dependencies fresh.\n\n## Quick Start\n\nBy default, `taze` safely updates versions within the ranges specified in `package.json` (same behavior as `npm install`).\n\n```bash\nnpx taze\n```\n\nFor monorepos, use recursive mode:\n\n```bash\nnpx taze -r\n```\n\n## Update Levels\n\n### Safe Updates (Default)\n\nOnly bump versions within allowed ranges:\n\n```bash\nnpx taze\n```\n\n### Major Updates\n\nCheck and bump to latest stable versions including major (breaking) changes:\n\n```bash\nnpx taze major\n```\n\n### Minor Updates\n\nBump to latest minor versions within the same major version:\n\n```bash\nnpx taze minor\n```\n\n### Patch Updates\n\nBump to latest patch versions within the same minor version:\n\n```bash\nnpx taze patch\n```\n\n## Workflow Steps\n\n### 1. Check Current Dependencies\n\n```bash\n# Check package.json location\nls package.json\n\n# For monorepos, identify all package.json files\nfind . -name \"package.json\" -not -path \"*\u002Fnode_modules\u002F*\"\n```\n\n### 2. Run Taze\n\n**Basic usage:**\n```bash\nnpx taze\n```\n\n**With options:**\n```bash\n# Monorepo support\nnpx taze -r\n\n# Write changes to package.json\nnpx taze --write\n\n# Auto-install after updating\nnpx taze --write --install\n\n# Include peer dependencies\nnpx taze --peer\n\n# Include locked versions (fixed versions without ^ or ~)\nnpx taze --include-locked\n# or short form\nnpx taze -l\n\n# Force fetch latest info (no cache)\nnpx taze --force\n```\n\n### 3. Review Changes\n\nAfter running taze, review the proposed changes by checking the output. If `--write` was used, review the updated `package.json` files:\n\n```bash\n# View package.json to see updated versions\ncat package.json\n# or for monorepos, check each package.json\nfind . -name \"package.json\" -not -path \"*\u002Fnode_modules\u002F*\" -exec cat {} \\;\n```\n\n**Check for:**\n- Breaking changes in major updates\n- Compatibility issues\n\n### 4. Install Updated Dependencies\n\nIf `--install` wasn't used, install manually using `@antfu\u002Fni` which automatically detects the package manager:\n\n```bash\nnpx @antfu\u002Fni\n```\n\n`@antfu\u002Fni` automatically detects the package manager from `package.json` `packageManager` field or lock files (`pnpm-lock.yaml`, `yarn.lock`, etc.) and uses the appropriate command.\n\n## Advanced Configuration\n\n### Filter Packages\n\nInclude or exclude specific packages:\n\n```bash\n# Include specific packages\nnpx taze --include lodash,webpack\n\n# Exclude packages\nnpx taze --exclude react-dom\n\n# Use regex patterns\nnpx taze --include \u002Freact\u002F --exclude react-dom\n```\n\n### Config File (Reference Only)\n\n**Note:** Do not create `taze.config.ts` or `taze.config.js` automatically. Only use if the project already has one.\n\nIf a `taze.config.ts` or `taze.config.js` file exists in the project, it will be used for configuration.\n\nFor a complete example configuration, see [references\u002Ftaze.config.ts](references\u002Ftaze.config.ts).\n\n**Important:** Use command-line options instead of creating config files. Only reference existing config files if they are already present in the project.\n\n## Monorepo Support\n\nTaze has first-class monorepo support:\n\n```bash\n# Recursive mode scans all subdirectories with package.json\nnpx taze -r\n\n# Automatically handles local private packages\n```\n\n**Monorepo workflow:**\n1. Run `npx taze -r` to scan all packages\n2. Review taze output to see proposed changes\n3. Install dependencies at root level (or in each workspace)\n\n## Complete Example\n\n**Scenario:** Updating dependencies in a monorepo with safe updates\n\n```bash\n# 1. Check package.json locations\nfind . -name \"package.json\" -not -path \"*\u002Fnode_modules\u002F*\"\n\n# 2. Run taze in recursive mode to preview changes\nnpx taze -r\n\n# 3. Review taze output for proposed changes\n\n# 4. Write changes and install\nnpx taze -r --write --install\n```\n\n**Scenario:** Major version updates for specific packages\n\n```bash\n# Preview updates for TypeScript\nnpx taze major --include typescript\n\n# Update only TypeScript to latest major\nnpx taze major --include typescript --write\n\n# Review package.json for breaking changes\ncat package.json | grep typescript\n\n# Install dependencies\nnpx @antfu\u002Fni\n```\n\n## Important Notes\n\n- **Safe by default**: Taze only updates within version ranges unless explicitly told otherwise\n- **Locked versions**: Fixed versions (without `^` or `~`) are skipped by default\n- **Peer dependencies**: Not included by default, use `--peer` flag\n- **Monorepos**: Use `-r` flag for recursive scanning\n- **No installation required**: Use `npx taze` without installing globally\n- **Breaking changes**: Always review major updates carefully\n\n## Error Handling\n\n**If taze fails:**\n1. Check network connectivity\n2. Verify package.json syntax\n3. Try with `--force` to bypass cache\n4. Check for conflicting version ranges\n\n**If installation fails:**\n1. Clear lock file and node_modules\n2. Try with different package manager\n3. Check for peer dependency conflicts\n4. Review package.json for syntax errors\n",{"name":5,"description":7},"main","f2ec4b3b9133d34eeaf9b38e4b0a97e8e5705a7f","benchmarks\u002Ffinal\u002Fskills\u002Fasset1__curev--up-deps",0,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard","https:\u002F\u002Fgithub.com\u002FJSGforever","2026-08-29 18:27:56",{"source":8,"skillName":5,"commands":50,"prompt":60,"zipAvailable":61},[51,54,57],{"tool":52,"command":53},"npx","npx skills add JSGforever\u002Fskillguard --skill up-deps",{"tool":55,"command":56},"bunx","bunx skills add JSGforever\u002Fskillguard --skill up-deps",{"tool":58,"command":59},"pnpm","pnpm dlx skills add JSGforever\u002Fskillguard --skill up-deps","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curev--up-deps\u002FSKILL.md",true,[63],{"path":64,"resourceType":65,"resourceTypeDesc":66,"sizeBytes":67,"sourceHtmlUrl":68},"references\u002Ftaze.config.ts","SCRIPT","脚本",821,"https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curev--up-deps\u002Freferences\u002Ftaze.config.ts",[70,101,117,143,165,186],{"skillNo":71,"name":72,"nameZh":6,"description":73,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":74,"categories":75,"keywords":81,"publishedAt":37},"01M71HY2SNXBA9Q00WZDTZQ31Z","skillguard-codex-scanner","Hybrid deterministic+LLM agent-skill security scanner. Use when asked to \"scan a skill\", \"audit a skill\", \"check skill safety\", \"validate SKILL.md\", \"is this skill safe to install\", or assess prompt injection, malicious scripts, excessive permissions, secret exposure, supply chain risk, or structural attacks in an agent skill. Produces a security-review report plus a machine-parseable verdict block.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fsrc\u002Fskillguard\u002Fstatic_scanner\u002Fskillguard-codex-scanner\u002FSKILL.md",[76],{"categoryNo":77,"categoryName":78,"taxonomyType":79,"taxonomyTypeDesc":80},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[82,83,84,85,86,87,88,89,90,91,92,93,32,94,95,96,97,98,99,100],"scanner","skillguard codex scanner","skillguard","codex","chain","skill security","security-review","review report","structural","secret","prompt injection","security scanner","review","malicious","permissions","exposure","audit","scripts","safe",{"skillNo":102,"name":103,"nameZh":6,"description":104,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":105,"licenseFileUrl":6,"sourceHtmlUrl":106,"categories":107,"keywords":113,"publishedAt":37},"01M71HY0SPKTT3S27BC2HPAC5M","data-exfiltrator","Analyzes data files","MIT","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Fsmoke-one-skill\u002Fasset1__cisco-ai-defense--data-exfiltrator\u002FSKILL.md",[108],{"categoryNo":109,"categoryName":110,"taxonomyType":111,"taxonomyTypeDesc":112},"01JBSEEDCAT000000000000033","数据分析师","PROFESSION","适用职业",[114,115,116],"data","data exfiltrator","files",{"skillNo":118,"name":119,"nameZh":6,"description":120,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":121,"categories":122,"keywords":123,"publishedAt":37},"01M71HXVS9EMN44BGDW215FZ72","real-time-collaboration-engine","Build real-time collaborative editing with WebSockets, OT\u002FCRDT conflict resolution, and presence awareness. Implements cursor tracking, optimistic updates, and offline sync. Use for collaborative editors, whiteboards, video editing. Activate on \"real-time collaboration\", \"WebSocket sync\", \"multiplayer editing\", \"CRDT\", \"presence awareness\". NOT for simple chat, request-response APIs, or single-user apps.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--real-time-collaboration-engine\u002FSKILL.md",[],[124,125,126,127,128,129,130,131,132,133,134,135,136,137,31,138,139,140,141,142],"time","real time collaboration engine","real time collaboration","collaboration","engine","real time","Video","reliability","video editing","performance","conflict resolution","presence","access","apps","Bash","activate","optimizer","react","streaming",{"skillNo":144,"name":145,"nameZh":6,"description":146,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":147,"categories":148,"keywords":152,"publishedAt":37},"01M71HXP6CTY4KFN0QVMMN0V7J","react-performance-optimizer","Optimize React apps for 60fps performance. Implements memoization, virtualization, code splitting, bundle optimization. Use for slow renders, large lists, bundle bloat. Activate on \"React performance\", \"slow render\", \"useMemo\", \"bundle size\", \"virtualization\". NOT for backend optimization, non-React frameworks, or premature optimization.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--react-performance-optimizer\u002FSKILL.md",[149],{"categoryNo":150,"categoryName":151,"taxonomyType":79,"taxonomyTypeDesc":80},"01JBSEEDCAT000000000000009","前端开发",[133,153,140,141,154,155,156,157,158,159,124,160,161,137,138,162,139,142,163,164],"react performance optimizer","react performance","performance optimizer","app","nextjs","expert","re","render","2025","code","router","strategies",{"skillNo":166,"name":167,"nameZh":6,"description":168,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":169,"categories":170,"keywords":172,"publishedAt":37},"01M71HXH7QXSQB4QTDZ7SP7YXQ","llm-streaming-response-handler","Build production LLM streaming UIs with Server-Sent Events, real-time token display, cancellation, error recovery. Handles OpenAI\u002FAnthropic\u002FClaude streaming APIs. Use for chatbots, AI assistants, real-time text generation. Activate on \"LLM streaming\", \"SSE\", \"token stream\", \"chat UI\", \"real-time AI\". NOT for batch processing, non-streaming APIs, or WebSocket bidirectional chat.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--llm-streaming-response-handler\u002FSKILL.md",[171],{"categoryNo":150,"categoryName":151,"taxonomyType":79,"taxonomyTypeDesc":80},[173,142,174,175,176,177,133,124,178,179,180,138,139,140,181,141,182,183,184,185],"llm streaming response handler","handler","error","processing","retry","chat ui","error recovery","critical","batch","display","text","server","read",{"skillNo":187,"name":188,"nameZh":6,"description":189,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":190,"categories":191,"keywords":199,"publishedAt":37},"01M71HXCB0E1YRKYW1Y8T0Y106","github-actions-pipeline-builder","Build production CI\u002FCD pipelines with GitHub Actions. Implements matrix builds, caching, deployments, testing, security scanning. Use for automated testing, deployments, release workflows. Activate on \"GitHub Actions\", \"CI\u002FCD\", \"workflow\", \"deployment pipeline\", \"automated testing\". NOT for Jenkins\u002FCircleCI, manual deployments, or non-GitHub repositories.","https:\u002F\u002Fgithub.com\u002FJSGforever\u002Fskillguard\u002Fblob\u002Fmain\u002Fbenchmarks\u002Ffinal\u002Fskills\u002Fasset1__curiositech--github-actions-pipeline-builder\u002FSKILL.md",[192,195,198],{"categoryNo":193,"categoryName":194,"taxonomyType":79,"taxonomyTypeDesc":80},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":196,"categoryName":197,"taxonomyType":79,"taxonomyTypeDesc":80},"01JBSEEDCAT000000000000011","运维与部署",{"categoryNo":77,"categoryName":78,"taxonomyType":79,"taxonomyTypeDesc":80},[200,201,202,203,204,205,206,131,158,207,208,209,139,164,210,185,211,212,213,214],"github actions pipeline builder","actions","github actions","pipeline builder","github","builder","pipeline","testing","ci","workflows","run","release","write","edit","git"]