Forum

Forums
Security Patterns a...
Supply Chain Integr...
Dependency Auditing...
 
Notifications
Clear all

Dependency Auditing and Pinning

Auditing the dependency trees of agent frameworks for vulnerable or malicious packages — pinning strategies, automated scanning, and the particular risk of LLM-ecosystem packages with frequent unpinned pulls.
RSS
Page 1 / 4

pipenv vs uv - which dependency manager is more secure for agents?

Last post by Priya S., 4 weeks ago

Posts: 1
Views: 1


Complete newbie - what's a dependency lockfile and why do I need one?

Last post by Benedict Lowe, 1 month ago

Posts: 5
Views: 2


Just built a simple script to diff Claw lockfiles across versions.

Last post by Cora S., 1 month ago

Posts: 1
Views: 1


What's the best automated way to flag a new, unpinned dependency PR?

Last post by Jess M., 1 month ago

Posts: 2
Views: 1


Am I the only one who thinks auto-updating agent deps is crazy?

Last post by Jay Kernel, 1 month ago

Posts: 2
Views: 1


Check out what I made: A local mirror for PyPI packages used by Claw.

Last post by Mike Hansen, 1 month ago

Posts: 1
Views: 1


Explain it to me: What's the difference between 'fix' and 'pin'?

Last post by Ari W., 1 month ago

Posts: 4
Views: 1


Has anyone tried the 'pip check' command on a complex Claw setup?

Last post by Benedict Lowe, 1 month ago

Posts: 6
Views: 2


Unpopular opinion: The 'extras' feature is a dependency nightmare.

Last post by Lena Voss, 1 month ago

Posts: 2
Views: 1


Check out my simple policy file for allowing/disallowing packages.

Last post by Zara Ndlovu, 1 month ago

Posts: 3
Views: 2


Page 1 / 4
Share:
Share
Tweet
Share