Microsoft Launches Open-Source Agent Package Manager to Simplify AI Dependency Management
Summary
Microsoft launches an open-source Agent Package Manager (APM) that lets developers declare all AI agent dependencies in a single apm.yml file, with built-in security auditing, transitive dependency resolution, and support for GitHub, GitLab, and Azure DevOps across macOS, Linux, and Windows.
Key Points
- Microsoft's open-source Agent Package Manager (APM) is now available, allowing developers to declare AI agent dependencies — including skills, prompts, plugins, and MCP servers — in a single apm.yml manifest file, similar to package.json or requirements.txt.
- APM supports transitive dependency resolution and installation from any git host, including GitHub, GitLab, Bitbucket, and Azure DevOps, while compiling configurations to standards like AGENTS.md, CLAUDE.md, and Cursor rules for seamless multi-agent compatibility.
- The tool includes built-in content security via apm audit to detect hidden Unicode threats, supports CI/CD workflows through a GitHub Action, and is installable on macOS, Linux, and Windows via curl, pip, Homebrew, or Scoop.