Does it run every time I run an install command?

It specifically triggers when adding new dependencies that aren't already in your package.json, requirements.txt, or equivalent manifest files.

Will it block me from installing a package I definitely want?

No, the skill is designed to provide guidance and suggest lighter alternatives, but it will not block your final decision if you choose to proceed.

Can it help with license compliance?

Yes, it flags potential risks, such as adding a GPL-licensed package to a project intended for MIT or commercial use.

Which package managers does this skill support?

It supports a wide range of ecosystems including npm, yarn, pnpm, pip, composer, cargo, and go get.

Dependency Check & Optimization

Name: Dependency Check & Optimization
Author: vendeesign

byvendeesign

0•

Seguridad y Pruebas

Evaluates and optimizes project dependencies by suggesting native alternatives and verifying package health before installation.

Dependency Check acts as an automated gatekeeper for your project's architecture, intervening when you attempt to install new packages or import uninstalled libraries. It ensures your codebase remains lean and secure by prompting critical questions about necessity, maintenance status, and bundle size. By prioritizing native language features and established, lightweight libraries over bloated or abandoned packages, it helps prevent technical debt and security vulnerabilities across major ecosystems including Node.js, Python, PHP, Go, and Rust.

Características Principales

01Automatic evaluation during npm, pip, composer, cargo, and go install commands

02Real-time suggestions for native language alternatives to common libraries

030 GitHub stars

04Maintenance health checks including release frequency and open issue volume

05License compatibility verification to prevent legal and open-source conflicts

06Bundle impact assessment and tree-shaking capability verification

Casos de Uso

01Preventing dependency bloat in modern web applications by utilizing native APIs

02Auditing third-party package security and maintenance status before integration

03Modernizing legacy projects by replacing deprecated libraries with native logic

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add vendeesign/codebloom dependency-check

For use in Claude.ai and ChatGPT

Download Skill