Agents reach for a new dependency instead of a few lines of code, and you end up with overlapping, unmaintained, or vulnerable packages you never chose. Audit it: run `npm audit` (or `pip-audit`), list every direct dependency and ask which are redundant or replaceable with the standard library, then drop the unmaintained ones. Before accepting new code, tell the agent not to add a dependency without asking. A lean tree is fewer things that break and fewer security holes.
Audit this project's dependencies. Run npm audit (or pip-audit), then list every direct dependency with: is it still maintained, does it overlap with another one, and could it be replaced by the standard library or a few lines of code? Recommend which to remove, remove them, and run the tests. From now on, don't add a dependency without asking me first.