Dependency Review

Trigger conditions

Run this review when:

• Monthly maintenance cadence
• Before a major release or branch freeze
• pnpm audit reports a vulnerability in CI
• A major ecosystem library (React, Vite, TypeScript, etc.) drops a new major version

Step 1 — Gather current state

Run in parallel:

# Outdated packages (name, current, wanted, latest)
pnpm outdated 2>/dev/null || true