maintaining-dependency-patches

maintaining-dependency-patches is a Dependency & version upgrades skill for AI agents, published by Agoric in the agoric-sdk repository on GitHub. Skillspace rates maintaining-dependency-patches C (77/100) and it passed the safety scan; the rating is based on static analysis only.

Manage a source-code repo's local patches against its installed package-manager dependencies — when a dep has a bug, security fix, or behavior tweak that upstream will not ship in time. Covers tracking each patch's relationship to upstream (is an issue filed? is a PR open? has it merged or been rejected?), detecting drift when upstream changes, forward-porting across version bumps, and upstream etiquette. Use when working with patch-package, yarn patch, pnpm patch, .yarn/patches/, the cweagans/composer-patches plugin in PHP, or Bazel's http_archive patches and Bzlmod single_version_override patches (which handle diff patching for polyglot deps regardless of language). Not for distribution-side patching (Homebrew/nixpkgs/Debian/Gentoo/BSD ports) nor for fork-and-redirect approaches (Cargo [patch], go mod replace, Bundler :git, requirements.txt git URLs, Elixir Mix :git).

Grade

C

Quality

77 / 100

Safety

Passed

GitHub stars

356

Unproven: rated by static analysis only, not yet compared head-to-head.

Not launch-quality. It is graded C with a clean safety verdict, but our quality filters exclude it: it looks written only for the repository it lives in. So it is not in our launch-quality set, the skills our MCP server searches and recommends. How launch-quality is decided

This rating describes the version of the repository we crawled; it may have changed since, so go by its current files.

Skillspace indexes and rates this skill; it does not host or endorse it. Run third-party skills at your own risk.