Claude Code mod
dependency-sentinel
Flags typosquatted or brand-new packages before npm, pip or cargo installs them.
Install
/plugin marketplace add Plagemes/claude-mods
/plugin install dependency-sentinel@claude-modsMods install like plugins. Run /reload-plugins or start a new session to load it.
What it can access
- Reach
- L3Network: network, reads files, persists state, draws, other: $.mods.hello, other: $.mods.mode, other: $.mods.notify, other: $.mods.publish, other: $.mods.registerTab
- Sees
- every prompt, Bash calls
- Hooks
prompt.submitsession.starttool.call
From a static scan of the mod's code by awesome-claude-code-mods. It shows what the code asks for, not a security review.
How Claude Code mods work
- A mod is a plugin with a JavaScript or TypeScript module that runs inside Claude Code (version 2.1.287 or later). It can draw panes beside the transcript, a band above the prompt, buttons and toasts, restyle the spinner and tool rows, and watch or rewrite tool calls and prompts.
- It installs like any plugin: add its marketplace with /plugin marketplace add owner/repo, then /plugin install name@marketplace.
- Check what a mod can reach before installing: it runs with your permissions. Reach goes from drawing only, to reading files, to writing files or running processes, to the network. Run claude plugin validate on a clone to list its hooks and calls without running it.
- Turn one off from the Installed tab in /plugin, or start Claude Code with --safe-mode to skip every customization for a session.
Details
- Repository
- Plagemes/claude-mods
- Folder
mods/dependency-sentinel- Marketplace
claude-mods- Author
- Plagemes
- Type
- Workflow mods
- License
- MIT
- Last updated
- 15 October 2026
- Listed in
- awesome-claude-code-mods
FAQ
What is dependency-sentinel?
Flags typosquatted or brand-new packages before npm, pip or cargo installs them. It is a mod for Claude Code, from Plagemes/claude-mods on GitHub.
What can the dependency-sentinel mod access?
Its widest reach is "network" (network, reads files, persists state, draws, other: $.mods.hello, other: $.mods.mode, other: $.mods.notify, other: $.mods.publish, other: $.mods.registerTab). It sees every prompt, Bash calls. Like any mod, it runs with your permissions.
How do I install dependency-sentinel?
Inside Claude Code (v2.1.287 or later), run /plugin marketplace add Plagemes/claude-mods and then /plugin install dependency-sentinel@claude-mods.
Is dependency-sentinel popular?
Plagemes/claude-mods has 3 GitHub stars and 0 forks, and is included in 1 curated Claude Code list. It was last updated on 15 October 2026.
More workflow mods
debug-catcher
3Plagemes/claude-mods
Warns when console.log, print, debugger or dbg! statements are left in code.
docker-lint
3Plagemes/claude-mods
Flags Dockerfile smells: :latest tags, running as root, apt without cleanup, ADD instead of COPY.
curl-to-code
3Plagemes/claude-mods
/curl2code turns a curl command into fetch, axios, Python requests or Go code.
docstring-mode
3baselane-sh/mods
Every new or changed public function gets a short doc comment in the language's normal style.
copy-last
3Plagemes/claude-mods
/copy-last copies Claude's last answer (or its last code block) to the clipboard.
eli5-mode
3baselane-sh/mods
Explains like the reader is new: analogies first, no jargon without a one-line definition.
Browse the most popular Claude Code mods, all workflow mods, or the skills and MCP server directories.