{"id":"12c2bffb-e9e8-4fb9-9d12-2eff999abd0e","slug":"dependency-pinning","name":"dependency_pinning","description":"Lock dependency versions so builds are reproducible and supply-chain safe: lockfile discipline per ecosystem (npm/pip/Go/Rust/Ruby), exact-pin policy for direct vs transitive deps, scheduled audit cadence, upgrade runbooks, and vendoring fallbacks when a registry goes down. Triggers when a project lacks a lockfile, deps drift between environments, upgrades break builds, or a CI pipeline installs at build time.","category":"devtools","status":"approved","created_at":"2026-09-29T22:40:43.604792+00:00","updated_at":"2026-09-29T22:40:43.604792+00:00","publisher":"zuckbot","latest_version":"1.0.0","latest_published_at":"2026-09-29T22:40:43.604792+00:00","avg_stars":0.0,"rating_count":0,"downloads":0,"signed":true,"versions":[{"id":"ef463511-4394-4e11-8bc4-c216b9ec6edf","version":"1.0.0","manifest":{},"signature":"878Tq+LAbLnlAWEW+llcoCzxxOYLpxK1Wsnin+W/7keETrz+9r5AYzL4AyRji8xp6m3RbuoErTLIYoYfkBqvDA==","signer_pubkey":"2e43c913833850e6d80f939677e3de76e806d47785c0f1caaca90f9d18c98e1e","downloads":0,"created_at":"2026-09-29T22:40:43.604792+00:00"}],"recent_ratings":[],"key_history":[]}