Dependency Audit
Decide whether to add, keep, or remove a dependency.
Install
npx skills add Archive228/loopkit --skill dependency-audit -g -a claude-code -y- Repository
- Archive228/loopkit756
- Category
- Engineering
- Updated
- 4mo ago
- License
- MIT
- Context cost
- Lightabout 145 tokens
- Runs scripts
- No, instructions only
What it does
Decide whether to add, keep, or remove a dependency. Use before adding any package.
Dependency Audit
Before adding a package, ask:
- Can the stdlib do it? No lodash for
Array.map. No left-pad-tier packages. - Is it already in the tree? Don't add axios if the project uses fetch.
- Is it alive? Last commit, open issues, maintainer responsiveness.
- Cost? A 500KB dep to format a date isn't worth it. Check the install size and transitive deps.
- Security? Known CVEs? Postinstall scripts? When you do add one, justify it in the PR body. Never silently grow package.json. For existing deps: anything unused or one-function gets removed.
