What is dep-sentinel?
dep-sentinel is a Claude Code mod by KilimcininKorOglu that checks each package the model installs against its registry and OSV.dev, and stops a missing, brand-new, look-alike, outdated or vulnerable one, naming the latest version. It is listed under Interface and has 11 GitHub stars.
| Type | Claude code mod |
|---|---|
| Author | KilimcininKorOglu |
| Repository | KilimcininKorOglu/claude-code-mods |
| Popularity | 11 GitHub stars |
| Category | Interface |
| Security | Review before installing (64/100) |
| Rank | #461 of 5,272 Claude Code mods; #178 in Interface |
| License | MIT |
| Last commit | 2026-10-04 |
| Stars this week | +3 |
| Hooks | 5 events |
| Sees | Bash calls, every prompt |
| Draws on | nothing |
Is dep-sentinel safe to install?
dep-sentinel scores 64/100 on the MCPMods security check: Review before installing. Things to review: sends data over the network; starts processes outside the sandbox; watches every prompt or event. It passed 5 of 8 checks.
Mod footprints come from claude plugin validate, which lists every event a mod hooks and every API call it makes without running it.
| Check | Result |
|---|---|
| Sends data over the network | Review |
| Starts processes outside the sandbox | Review |
| Writes no files or config | Pass |
| Doesn't read environment variables | Pass |
| Watches every prompt or event | Review |
| Doesn't drive Claude | Pass |
| Passes claude plugin validate | Pass |
| Has an open-source license | Pass |
API calls in its code
| Call | What it means |
|---|---|
$.clock.now | |
$.command.register | |
$.http.fetch | network requests |
$.process.run | runs processes |
$.sidebar.clear | |
$.sidebar.set | |
$.store.get | keeps its own state |
$.store.set | keeps its own state |
$.ui.log | draws interface |
How do I install dep-sentinel?
- Check your Claude Code version. Mods need Claude Code 2.1.287 or later and are on by default.
claude --version
- Read its footprint. This lists every event it hooks and every API call it makes, without running it.
git clone https://github.com/KilimcininKorOglu/claude-code-mods claude plugin validate ./claude-code-mods/plugins/dep-sentinel
- Install it. Run this in your terminal, then /reload-plugins in an open session.
claude plugin marketplace add KilimcininKorOglu/claude-code-mods && claude plugin install dep-sentinel@kilimcininkoroglu-mods
Or ask Claude to set it up
Paste this into Claude Code and it installs dep-sentinel for you:
Install the "dep-sentinel" Claude Code mod from https://github.com/KilimcininKorOglu/claude-code-mods/tree/main/plugins/dep-sentinel. Run claude plugin validate on it first and show me what it can access before you enable it.
More from KilimcininKorOglu/claude-code-mods
This repository has at least 9 Claude Code mods on MCPMods.
- action-pin: After an edit that adds a GitHub Actions step pinned to a tag or a branch, names the commit SHA to write instead, from t (Review before installing)
- ask-autopick: Picks the recommended option of a question that waited unanswered for a set time, so a session you left does not stop. O (Low risk)
- bash-diet: Shrinks each Bash result before the model reads it: per-command filters for git, test runners, linters, package managers (Review before installing)
- bg-tasks: Shows the background shell tasks of the session on the status line or in the shared sidebar, with the oldest one's age, (Low risk)
- bughunt: Runs proof-driven bug hunt rounds with /bughunt: each round proves one bug with a failing command the mod runs itself, f (Review before installing)
- cache-warm: Keeps the 1-hour prompt cache warm for a window you set, or with no end in every session under always, with one cache-sh (Review before installing)
- commit-cadence: Names the uncommitted files to you at the end of each turn, and tells the model at the next prompt to commit each finish (Review before installing)
- config-parse: Parses each JSON, YAML, TOML or .env file an Edit or Write touches, notes a parse error at once instead of at the next b (Review before installing)