depsdotdev
deps.dev API
Use this skill to map package coordinates (system/name/version) to high-signal dependency intelligence from Open Source Insights.
Start Here
- Prefer stable API base:
https://api.deps.dev/v3 - Use
v3alphaonly when you need purl and batch endpoints - Percent-encode all path/query values before sending requests
- Use canonical values returned in responses (
packageKey,versionKey,projectKey) for follow-up calls
Fast Routing
| If you need to... | Use | Read |
|---|---|---|
| List versions for a package | GetPackage |
references/endpoint-map.md |
| Inspect one version (licenses, advisories, links) | GetVersion |
references/endpoint-map.md |
| Get declared constraints | GetRequirements |
references/endpoint-map.md |
| Get resolved dependency graph | GetDependencies |
references/endpoint-map.md |
| Map project repo to package versions | GetProjectPackageVersions |
references/endpoint-map.md |
| Query by file hash or exact version key | Query |
references/endpoint-map.md |
| Avoid encoding mistakes | URL/purl rules | references/request-shapes-and-encoding.md |
| Handle limits and error cases | batch/query limits | references/limits-errors-and-reliability.md |
| Use purl/batch/dependents | v3alpha features |
references/v3alpha-extras.md |
Minimal Workflow
- Normalize user input into
{system, name, version?}. - Call
GetPackageif version is missing; preferisDefaultor newest published version. - Call
GetVersionfor license/advisory/provenance metadata. - Add
GetRequirementsandGetDependencieswhen user asks "declared" vs "resolved" dependency questions. - If input is a hash or purl, use
Queryorv3alphapurl endpoints.
Examples
- Curl patterns and jq snippets:
examples/curl-cheatsheet.md
External Docs
- API overview and versions: https://docs.deps.dev/api/
- Stable REST schema: https://docs.deps.dev/api/v3/
- Experimental REST schema: https://docs.deps.dev/api/v3alpha/
More from aaronflorey/agent-skills
amber-lang
Write, debug, and explain Amber code, the `amber` language that compiles `.ab` files to Bash. Use this skill when the user asks to write an Amber script, convert Bash to Amber, compile Amber to Bash, debug Amber syntax or type errors, or asks about Amber 0.5.1-alpha syntax, functions, types, error handling, the standard library, or the `amber` CLI.
26go-cobra
Write, scaffold, and debug Go CLI applications with `github.com/spf13/cobra`. Use this skill whenever the user mentions Cobra, `cobra.Command`, a Go command-line app, subcommands, persistent or local flags, required flags, argument validation, shell completions, generated docs, or wants to build or refactor a cobra-based CLI.
24laravel-actions
Write, scaffold, explain, and refactor code using the `lorisleiva/laravel-actions` package. Use this skill whenever the user mentions Laravel Actions, `AsAction`, `php artisan make:action`, action classes, converting a controller, job, listener, or command into an action, dispatching an action as a job, using an action as a controller or listener, or adding validation, authorization, testing, or mocking around an action.
24num30-config
Write, debug, and explain Go configuration code using `github.com/num30/config`. Use this skill when the user mentions `num30/config`, wants config structs, file plus env plus CLI flag loading, validation, config watching, precedence rules, or asks how to integrate the num30/config package into a Go application.
22pelican-panel-plugins
Write, scaffold, explain, and debug plugins for the Pelican gaming panel. Use this skill whenever the user mentions Pelican plugins, extending Pelican, FilamentPHP resources or pages for Pelican, plugin service providers, custom permissions, plugin settings, routes, models, widgets, or asks how to add new functionality to the Pelican panel.
21go-viper
Write, debug, and explain Go configuration code with `github.com/spf13/viper`. Use this skill whenever the user mentions Viper, `viper`, config structs, reading config from files plus env vars plus flags, Cobra or `pflag` integration, unmarshaling into structs, env key replacers, config precedence, config watching, or a clean Viper bootstrap.
20