Agent Package Manager (APM) for Agent Configuration
First package manager for AI agent configs with supply-chain security scanning.
The package manager for Agent Skills
npm for AI agent prompts with commit-pinned lockfiles, but still early and experimental.
AI coding assistant users (Claude Code, Cursor, Gemini CLI), prompt engineers
npm · Cargo
The problem: as I accumulated skills across projects, I found myself manually copying files between repos with no way to track versions or share updates reliably.
ArteSync treats any public GitHub path as an installable source and locks it to a commit hash, similar to how npm/Cargo handle dependencies:
arsync install myorg/myrepo/skills/my-skill#main
This fetches the files, writes a skills.arsync manifest, and generates a skills-lock.arsync lockfile (commit-pinned). Running arsync install with no arguments does a hard checkout to the exact hashes in the lockfile—so teams get reproducible skill environments. arsync update checks for upstream changes and rewrites the lock.
It's early and experimental (breaking changes possible), but it's usable:
npm install -g artesync
Happy to answer questions.First package manager for AI agent configs with supply-chain security scanning.
npm install for agent skills that copies prompts into Claude, Cursor, and Gemini instantly.
BMAD architecture repurposed for delivery management with audit-ready markdown outputs.
Profile manager for AI agents — switch configs like dotfiles but for Claude and Cursor.
tmux for AI agents with discovery, status tracking, and batch prompting across Claude Code and Copilot.
CLI wrapper around skill repo, but dependency on viral repo means dead without upstream adoption.