audit-and-reduce-dependencies

Audit and reduce dependencies Reduce JavaScript dependency footprint. Use pnpm only . Preserve the lockfile, workspace layout, and dependency range style unless there is a concrete reason to change them. For GitHub Actions workflow triage (action choice, permissions, pinning), use a dedicated workflow audit — not the reporting format below (workflow file + step only when the finding is pnpm install policy ). Workflow Hardening gate: run /check-npm (read-only). See check-npm . Establish the baseline. Remove unused direct dependencies. Deduplicate direct dependency versions in monorepos. Rank direct dependencies by transitive lockfile closure. Use closure data to find low-risk minor/patch upgrades. Use closure data to find trivial dependencies worth inlining. Check e18e recommendations for replacements/removals. Reinstall, verify, and report measured impact. Step 0: Hardening gate ( /check-npm ) Show more Installs 861 Repository grafana/skills GitHub Stars 219 First Seen Jul 10, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass