---

name: package-updates description: Checks package dependencies against registries (PyPI, crates.io, npm, RubyGems, Maven Central, Go Proxy, Swift Package Index, Docker Hub, ArtifactHub) to identify outdated packages and provides update commands. Use when the user wants to check for updates, find outdated dependencies, audit package versions, or upgrade packages in a repository. license: Complete terms in LICENSE.txt

Package Updates Checker

This skill checks package dependencies in a repository against their respective package registries to identify outdated packages.

Supported Ecosystems

How to Use

Step 1: Run the Update Checker

Execute the bundled script against the target repository:

Copypython {skill_path}/scripts/check_updates.py --path /path/to/repo

The script automatically detects all supported manifest files in the repository.

Options:

• --path - Path to repository (default: current directory)
• --format - Output format: markdown, json, or text (default: markdown)
• --ecosystem - Filter by ecosystem: python, rust, javascript, ruby, java, go, swift, docker, helm, or all (default: all)

Step 2: Review Results

The script outputs a table of outdated packages with:

• Package: Package name
• Current: Currently specified version
• Latest: Latest version available (respecting constraints)
• Constraint: Version constraint from manifest
• Update Command: Command to update the package

Example Output

Copy## Outdated Packages (5 found)

### requirements.txt (python)

| Package  | Current | Latest | Constraint | Update Command                 |
| -------- | ------- | ------ | ---------- | ------------------------------ |
| requests | 2.28.0  | 2.31.0 | >=2.28     | `pip install requests==2.31.0` |

### Cargo.toml (rust)

| Package | Current | Latest  | Constraint | Update Command          |
| ------- | ------- | ------- | ---------- | ----------------------- |
| serde   | 1.0.180 | 1.0.195 | ^1.0       | `cargo update -p serde` |

### package.json (javascript)

| Package | Current | Latest  | Constraint | Update Command               |
| ------- | ------- | ------- | ---------- | ---------------------------- |
| lodash  | 4.17.20 | 4.17.21 | ^4.17      | `npm install lodash@4.17.21` |

### go.mod (go)

| Package                  | Current | Latest | Constraint | Update Command                           |
| ------------------------ | ------- | ------ | ---------- | ---------------------------------------- |
| github.com/gin-gonic/gin | v1.9.0  | v1.9.1 | v1.9.0     | `go get github.com/gin-gonic/gin@v1.9.1` |

### Gemfile (ruby)

| Package | Current | Latest | Constraint | Update Command        |
| ------- | ------- | ------ | ---------- | --------------------- |
| rails   | ~> 7.0  | 7.1.2  | ~> 7.0     | `bundle update rails` |

Error Handling

• Network errors: The script will skip packages that fail to fetch and report them at the end
• Invalid versions: Unparseable versions are reported with a warning
• Missing files: If no manifest files are found, the script exits with a helpful message

Rate Limiting

The script makes sequential API calls with a small delay to avoid rate limiting. For large dependency lists, consider using the --ecosystem flag to check one ecosystem at a time.

References

For detailed API documentation, see references/REGISTRIES.md:

• Search ## PyPI through ## ArtifactHub for registry-specific endpoints
• Search Rate Limiting for throttling information per registry
• Search Version Constraint Formats for constraint syntax (PEP 440, Cargo, semver)