dependency-audit
Decide whether to add, keep, or remove a dependency. Use before adding any package.
来源信息
- 仓库
- Archive228/loopkit
- 最近来源活动
- 2026年6月29日 21:52
- 检测到的 SKILL.md 语言
- 英语
- 星标
- 757
- Forks
- 124
安装方式
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
检查来源文件
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
正在显示 SKILL.md
SKILL.md
来源说明 · 只读预览- name
- dependency-audit
- description
- Decide whether to add, keep, or remove a dependency. Use before adding any package.
- when_to_use
- adding a package, a bloated lockfile, a CVE alert, "do we need this dep"
# Dependency Audit
Before adding a package, ask:
1. **Can the stdlib do it?** No lodash for `Array.map`. No left-pad-tier packages.
2. **Is it already in the tree?** Don't add axios if the project uses fetch.
3. **Is it alive?** Last commit, open issues, maintainer responsiveness.
4. **Cost?** A 500KB dep to format a date isn't worth it. Check the install size and transitive deps.
5. **Security?** Known CVEs? Postinstall scripts?
When you do add one, justify it in the PR body. Never silently grow package.json. For existing deps: anything unused or one-function gets removed.
在 GitHub 查看