元链 yotta-chain
元链 —— 跨智能体的供应链依赖校验技能：零依赖自研引擎本地解析 npm（package.json / package-lock v1-v3 / yarn.lock / pnpm-lock.yaml / bun.lock / .npmrc）与 Python（requirements / pyproject.toml / poetry.lock / uv.lock / Pipfile）及 Maven pom.xml，检测依赖混淆（私有包名被公共仓库同名抢占 / 混合仓库 / 可疑仓库 URL / extra-index 回退）、lockfile 与清单不一致、缺失锁文件、未固定版本、typo-s
as observed 2026-10-02T07:46:18.975Z- Identifier
yotta-chain- Source
- ClawHub
- Version observed
- 0.1.5
- Source repository
- not published
- Repository observation
- No source repository listed
- First observed here
- 2026-08-28T22:06:28.212Z
- Observations recorded
- 5
- Installs (reported upstream)
- 1
- Weekly downloads (upstream)
- 465
- Declared license
- MIT-0
Observation history
2026-10-02T07:46:18.975Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"**New ecosystem coverage and format improvements**\n\n- Added support for yarn.lock, pnpm-lock.yaml, bun.lock, uv.lock for broader npm and Python ecosystem coverage.\n- Updated np | "- Bump version to 0.1.5.\n- Add category \"it-ops-security\" in SKILL.md.\n- Minor updates to documentation (SKILL.md, CHANGELOG.md).\n- Remove obsolete file: skill-card.md." |
latestVersion |
"0.1.4" | "0.1.5" |
2026-09-19T21:21:32.220Z
Fields that differed: license changelog description latestVersion summary
| Field | Before | After |
|---|---|---|
license |
null | "MIT-0" |
changelog |
"- Removed skill-card.md file to streamline repository structure.\n- No functional or interface changes introduced in this version." | "**New ecosystem coverage and format improvements**\n\n- Added support for yarn.lock, pnpm-lock.yaml, bun.lock, uv.lock for broader npm and Python ecosystem coverage.\n- Updated np |
description |
"元链 —— 跨智能体的供应链依赖校验技能：零依赖自研引擎本地解析 npm（package.json / package-lock v1-v3 / .npmrc）与 Python（requirements / pyproject.toml / poetry.lock / Pipfile）及 Maven pom.xml，检测依赖混淆（私有包名被公共仓库同名抢占 | null |
latestVersion |
"0.1.3" | "0.1.4" |
summary |
"元链 —— 跨智能体的供应链依赖校验技能：零依赖自研引擎本地解析 npm（package.json / package-lock v1-v3 / .npmrc）与 Python（requirements / pyproject.toml / poetry.lock / Pipfile）及 Maven pom.xml，检测依赖混淆（私有包名被公共仓库同名抢占 | "元链 —— 跨智能体的供应链依赖校验技能：零依赖自研引擎本地解析 npm（package.json / package-lock v1-v3 / yarn.lock / pnpm-lock.yaml / bun.lock / .npmrc）与 Python（requirements / pyproject.toml / poetry.lock / uv.l |
2026-09-03T07:20:35.503Z
Fields that differed: changelog latestVersion topics
| Field | Before | After |
|---|---|---|
changelog |
"yotta-chain 0.1.2\n\n- Updated documentation files (README.md, README.zh-CN.md, SKILL.md, package.json) to reflect current version and supported ecosystems.\n- README、SKILL.md等文档细 | "- Removed skill-card.md file to streamline repository structure.\n- No functional or interface changes introduced in this version." |
latestVersion |
"0.1.2" | "0.1.3" |
topics |
["security"] | ["SBOM","供应链安全","依赖审计","依赖校验","依赖混淆"] |
2026-08-29T23:02:09.653Z
Fields that differed: changelog latestVersion
| Field | Before | After |
|---|---|---|
changelog |
"- No changes detected in this version.\n- Version number remains at 0.1.1; documentation and usage instructions are unchanged." | "yotta-chain 0.1.2\n\n- Updated documentation files (README.md, README.zh-CN.md, SKILL.md, package.json) to reflect current version and supported ecosystems.\n- README、SKILL.md等文档细 |
latestVersion |
"0.1.1" | "0.1.2" |
Correction
If you maintain this extension and believe anything above is inaccurate, request a correction. Corrections are published, and disputed entries are marked as disputed while under review.