logseq-dependency-upgrade
logseq-dependency-upgrade is a Secrets & supply chain skill for AI agents, published by logseq in the logseq repository on GitHub. Skillspace rates logseq-dependency-upgrade D (68/100) and it passed the safety scan; a judge model has also reviewed it.
Audit, plan, and refresh dependency upgrades for the Logseq repository by scanning every non-gitignored package.json, deps.edn, bb.edn and nbb.edn manifest, checking latest upstream versions, cross-root consistency, lockfile resolution, deprecation, staleness, and OSV vulnerabilities, then generating a batch-ordered upgrade plan and compact JSON artifact.
- Grade
- D
- Quality
- 68 / 100
- Safety
- Passed
- GitHub stars
- 43,902
Placed #5 of 6 in the judged category final for Secrets & supply chain.
Our two independent classifiers differ on this skill's category, so treat the placement as provisional.
This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.
Our review
- Architecture
- 99 / 100
- Maturity
- Basic: a single SKILL.md
- Security scan
- No issues found
- License
- AGPL-3.0
- Adoption
- Adopted by 0 other repositories, in 0 collections
- Scope
- Repo-internal: written for the repository it lives in. Audits this Logseq repo's own dependency manifests.
Judge review
Placed #5 of 6 in the judged category final for Secrets & supply chain.
- Trigger
78 78 - Instructions
88 88 - Specificity
92 92 - Safety
85 85 - Disclosure
78 78 - Maintenance
85 85
Thorough manifest coverage (package.json/deps.edn/bb.edn/nbb.edn) with concrete classification, version-prefix preservation, and lockfile-resolution logic, tightly scoped to one repo's script and paths.
Not checked yet
- No blind task eval yet
- Sibling files (scripts, references) not fetched; security scan covers SKILL.md only
Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.