# Powershell Vscode Powershell Vscode Powershell > Updating NPM Packages - Skill: `tomevault-io/powershell-vscode-powershell-vscode-powershell` (Agent Skill, multi-file: 2 files) - Install (CLI): `npx skillmds@latest add tomevault-io/powershell-vscode-powershell-vscode-powershell` - Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/powershell-vscode-powershell-vscode-powershell/raw - Safety review: pending - Works with: Claude Code, Claude.ai, OpenAI Codex - Category: Coding & Dev Tools - Author: tomevault-io (https://skillmd.com/u/tomevault-io) - Updated: 2026-09-17 - Page: https://skillmd.com/skills/tomevault-io/powershell-vscode-powershell-vscode-powershell --- # Updating NPM Packages Read [docs/development.md](../../../docs/development.md) "Tracking Upstream Dependencies" section for full context. ## Rules - Dependencies are split into three groups: - `dependencies` — runtime packages bundled into the extension - `devDependencies` — build tools only (minimum for Azure DevOps pipeline) - `optionalDependencies` — lint, type-checking, and test tools (for development and GitHub Actions) - Always use `npm install --include=optional` to get all three groups. - The `.npmrc` uses an Azure Artifacts mirror; read its comments for authentication instructions. - When updating `engines.vscode` follow the "Tracking Upstream Dependencies" section of `docs/development.md`. - Update the ESLint packages (`eslint`, `@eslint/js`, `typescript-eslint`, `eslint-config-prettier`) together and fix any new lint warnings. - After updating, verify: `npm run compile`, `npm run lint`, `npm audit`. - For vulnerabilities in transitive dependencies identified by `npm audit`, add an `overrides` entry in `package.json` rather than using `npm audit fix --force` which may downgrade our packages. - Check that each `overrides` entry is still necessary. --- > Source: [PowerShell/vscode-powershell](https://github.com/PowerShell/vscode-powershell) — distributed by [TomeVault](https://tomevault.io).