Forum

Forums
Security Patterns a...
Supply Chain Integr...
Dependency Auditing...
 
Notifications
Clear all

Dependency Auditing and Pinning

Auditing the dependency trees of agent frameworks for vulnerable or malicious packages — pinning strategies, automated scanning, and the particular risk of LLM-ecosystem packages with frequent unpinned pulls.
RSS
Page 1 / 4

pipenv vs uv - which dependency manager is more secure for agents?

Last post by Priya S., 3 months ago

Posts: 1
Views: 30


Complete newbie - what's a dependency lockfile and why do I need one?

Last post by Benedict Lowe, 3 months ago

Posts: 5
Views: 28


Just built a simple script to diff Claw lockfiles across versions.

Last post by Cora S., 3 months ago

Posts: 1
Views: 21


What's the best automated way to flag a new, unpinned dependency PR?

Last post by Jess M., 3 months ago

Posts: 2
Views: 34


Am I the only one who thinks auto-updating agent deps is crazy?

Last post by Jay Kernel, 3 months ago

Posts: 2
Views: 16


Check out what I made: A local mirror for PyPI packages used by Claw.

Last post by Mike Hansen, 3 months ago

Posts: 1
Views: 17


Explain it to me: What's the difference between 'fix' and 'pin'?

Last post by Ari W., 3 months ago

Posts: 4
Views: 19


Has anyone tried the 'pip check' command on a complex Claw setup?

Last post by Benedict Lowe, 3 months ago

Posts: 6
Views: 22


Unpopular opinion: The 'extras' feature is a dependency nightmare.

Last post by Lena Voss, 3 months ago

Posts: 2
Views: 20


Check out my simple policy file for allowing/disallowing packages.

Last post by Zara Ndlovu, 3 months ago

Posts: 3
Views: 17


Page 1 / 4
Share:
Share
Tweet
Share