microsoft / microsoft/apm

[BUG] deps list incorrectly reports embedded skills as orphaned for subdirectory dependencies

Open
#2,926 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

status/accepted triage/recommended type/bug
Dominant language
Python
Stars
3.8k
Forks
362
Avg merge
1d 17h
Merged PRs (30d)
132

Description

Describe the bug

When using a subdirectory dependency, apm deps list -g reports other embedded skills in the same repository as orphaned, while apm deps tree -g and apm prune correctly treat the dependency graph as clean.

To Reproduce

Given:

dependencies:
  apm:
    - git: yoshiko-pg/difit
      path: skills/difit

Run:

apm update -g --yes
apm deps list -g
apm prune

apm deps list -g reports unrelated embedded skills such as .codex/skills/release as orphaned, but apm prune reports:

No orphaned packages found. apm_modules/ is clean.

Expected behavior

apm deps list should not report embedded skills as orphaned when they are part of the same repository and are not independently resolved dependencies.

Environment

  • OS: macOS
  • APM Version: 0.30.0 (8c2e0d9)

Additional context

If this is confirmed to be a bug, I'd be happy to contribute a fix via PR.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the issue with the provided dependencies configuration, then compare the implementation and output of apm deps list -g with apm deps tree -g and apm prune. Trace how each command identifies orphaned packages, focusing on subdirectory dependencies and embedded skills. Done means apm deps list -g no longer reports unrelated embedded skills as orphaned while the clean dependency behavior remains intact.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
cli
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
68/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.