audit-and-reduce-dependencies
This skill helps you streamline your pnpm project's dependency tree by identifying and removing unnecessary packages that bloat your lockfile. It provides automated auditing capabilities to surface redundant or unused dependencies, enabling you to maintain a leaner, faster build environment with minimal manual effort.
audit-and-reduce-dependencies streamlines your pnpm project's dependency tree by identifying and removing unnecessary packages that bloat your lockfile. The skill provides automated auditing capabilities to surface redundant or unused dependencies, enabling you to maintain a leaner, faster build environment with minimal manual effort.
AI-generated summary based on this skill's SKILL.md
Install
grafana/skills/audit-and-reduce-dependencies · repository language: JavaScript
git clone https://github.com/grafana/skills
cp -r skills/skills/grafana-plugins/audit-and-reduce-dependencies ~/.claude/skills/audit-and-reduce-dependenciesFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
How does audit-and-reduce-dependencies help reduce JavaScript dependencies in pnpm?
audit-and-reduce-dependencies streamlines your pnpm project's dependency tree by identifying and removing unnecessary packages that bloat your lockfile. The skill provides automated auditing capabilities to surface redundant or unused dependencies, enabling you to maintain a leaner, faster build environment with minimal manual effort.
Can audit-and-reduce-dependencies identify and remove unused direct dependencies from monorepos?
Yes. audit-and-reduce-dependencies is designed to identify and remove unused direct dependencies from monorepos, helping you clean up workspace dependencies across multiple packages. This capability is especially valuable in large monorepo structures where dependency sprawl can accumulate across workspaces.
What does shrink node_modules size pnpm mean, and how can audit-and-reduce-dependencies help?
Shrinking node_modules size in pnpm means reducing the overall footprint of installed packages by eliminating redundant or unnecessary dependencies. audit-and-reduce-dependencies helps achieve this by analyzing your dependency tree, deduplicating versions across workspaces, and removing transitive dependencies that don't contribute to your project's functionality.
Does audit-and-reduce-dependencies support dependency deduplication across pnpm workspaces?
Yes. audit-and-reduce-dependencies can deduplicate and standardize dependency versions across workspaces, reducing lockfile bloat and ensuring consistency. This feature helps minimize JavaScript package bloat by consolidating duplicate versions of the same package throughout your monorepo.
How can audit-and-reduce-dependencies help with supply-chain security in my pnpm projects?
audit-and-reduce-dependencies includes auditing capabilities for supply-chain hardening and dependency security policies. By analyzing your dependency closure and identifying low-risk upgrade paths, the skill helps you maintain a more secure and manageable dependency footprint while reducing exposure to unnecessary transitive dependencies.
SKILL.md
rendered from the published skill — quoted content, verbatim
Audit and reduce dependencies
Reduce JavaScript dependency footprint. Use pnpm only. Preserve the lockfile, workspace layout, and dependency range style unless there is a concrete reason to change them.
For GitHub Actions workflow triage (action choice, permissions, pinning), use a dedicated workflow audit — not the reporting format below (workflow file + step only when the finding is pnpm install policy).
Workflow
- Hardening gate: run
/check-npm(read-only). See check-npm. - Establish the baseline.
- Remove unused direct dependencies.
- Deduplicate direct dependency versions in monorepos.
- Rank direct dependencies by
(truncated - see the full file via the links below)
Read as markdown · JSON record · Browse the source repository
File tree — 1 file
skills/grafana-plugins/audit-and-reduce-dependencies/SKILL.md