dependencies SKILL.md skillA
dependencies from gems-uff/noworkflow is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add gems-uff/noworkflow/dependencies@git:20261021.ab3d214Pins git:20261021.ab3d214 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- gems-uff/noworkflow
- Path
.claude/skills/dependencies/SKILL.md- Versions recorded
- 12
- Latest version
- git:20261021.ab3d214, committed Oct 21, 2026
- First version recorded
- Oct 14, 2026
- Size
- 40,440 bytes
- Repository stars
- 130
- License
- MIT
Decides how a dependency is declared in pyproject.toml, judges whether a version pin still has a reason, and carries out an update — one package at a time, or a campaign that moves the tail in batches by level and the core one package per step — with uv.lock and pip-audit for Python, the npm lock and the bundle for the frontend, the SHA-pinned GitHub Actions. Use when adding a dependency, changing a version constraint, auditing the pins, handling a Dependabot PR, measuring an unreleased…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Dependencies: declaring and updating
Two different questions, easily confused. **How to declare** is long-term
policy and lives in `pyproject.toml`. **How to update** is an operation and
lives in the arguments of `uv lock` — never in the file.
The rule of the step — one package per step, the target is the latest patch
of the same series, a minor or major bump is a decision and never a side
effect — is in `AGENTS.md` ("Dependencies") and is not repeated here, nor is
its one exception, a campaign, whose procedure is "A campaign" below. What
follows is how to apply them with the tools of this repository.
## Where things are
- `[project.dependencies]` in `pyproject.toml`: what `now` imports at
runtime, every command included — everything reachable from the CLI counts
as in use (`AGENTS.md`). These ranges go into the wheel verbatim.
- `[project.optional-dependencies]`: the extras (`demo`, `notebook`, `all`)
are user-facing features; a user installs `noworkflow[notebook]` to get one.
- `[dependency-groups]`: the tools (pytest, ruff, bandit, pip-audit), in
`dev`, which `uv sync` installs by default, and what a set of tests needs
…Read the whole file at its exact version.
How to install
mdr add gems-uff/noworkflow/dependencies@sha256:63f79bfc5e468cfdThe line at the top of this page pins the label git:20261021.ab3d214, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_7ztfco6h43xpxdai)
5 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 12 versions of this file, between Oct 14, 2026 and Oct 21, 2026, more than one a day.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261021.ab3d214 latest | 2026-10-21 | ab3d214 | 40,440 B | A | view · diff |
| git:20261021.954092c | 2026-10-21 | 954092c | 39,760 B | A | view · diff |
| git:20261020.87fded3 | 2026-10-20 | 87fded3 | 39,130 B | A | view · diff |
| git:20261020.bc296c5 | 2026-10-20 | bc296c5 | 27,625 B | A | view · diff |
| git:20261019.85a4863 | 2026-10-19 | 85a4863 | 27,274 B | A | view · diff |
| git:20261018.6f98b35 | 2026-10-18 | 6f98b35 | 27,586 B | A | view · diff |
| git:20261018.fdb2c84 | 2026-10-18 | fdb2c84 | 27,188 B | A | view · diff |
| git:20261018.b9b655d | 2026-10-18 | b9b655d | 27,637 B | A | view · diff |
| git:20261015.1ba5b15 | 2026-10-15 | 1ba5b15 | 27,527 B | A | view · diff |
| git:20261015.94fc575 | 2026-10-15 | 94fc575 | 26,343 B | A | view · diff |
| git:20261015.aa79b35 | 2026-10-15 | aa79b35 | 26,099 B | A | view · diff |
| git:20261014.00066b9 | 2026-10-14 | 00066b9 | 25,535 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (40440 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
gems-uff/noworkflow · 130 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_7ztfco6h43xpxdai GET https://markdownregistry.com/api/v1/resolve?ref=gems-uff/noworkflow/dependencies GET https://markdownregistry.com/api/v1/blob/63f79bfc5e468cfd1399247061922b8a81d4855c079676f14b45d5f1870dad9b
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.