dep-auditBoth uv and bun ship a native CVE audit subcommand, which is the part worth knowing — without it the reflex is to reach for pip-audit or safety and never find them. Covers the invocation for each, plus the two judgment calls that change what you do with a finding. Use when the user asks whether pack
doc-conventionsHouse documentation conventions that are not derivable from the repo: last-updated dates, where unshared notes and session logs live, how dependency changes get recorded, and the rule against decorative counts in prose. Use when creating or updating documentation, READMEs, design docs, or session lo
python-toolingHouse Python conventions plus the type-checking failures that get misdiagnosed: the dependency pinning policy (applications exact, libraries floors), the rule that linters, formatters and tests are never auto-run after an edit unless asked, and the two mechanical mistakes behind most Pydantic/Pyrigh