APM – A dependency manager for AI agents (microsoft.github.io)

A new dependency manager for AI agents, named APM, has been announced, designed to streamline the integration of various components like skills, prompts, and plugins across different AI tools and platforms. With a single configuration file, apm.yml, developers can easily declare the dependencies required for their projects. APM ensures that all installations are consistent by using a lockfile that pins exact versions and content hashes, allowing teams to replicate the setup byte-for-byte, eliminating version mismatch issues. Supported platforms include popular tools like GitHub Copilot, Claude Code, and Codex among others. This development is significant for the AI/ML community as it provides a secure and governed framework for managing dependencies in complex AI projects. APM prioritizes security by scanning for hidden content and requires explicit trust for transitive MCP servers. It introduces governance policies through the apm-policy.yml file, enabling organizations to enforce rules across different hierarchies, thus enhancing compliance and oversight. This not only simplifies dependency management but also fosters a more reliable and scalable environment for developing and deploying AI agents, making it an essential tool for developers in the rapidly evolving AI landscape.