Dep-Auditor: Lean & Secure Dependency Auditing

Review dependencies affected by the requested change. Reuse existing utilities or standard library functions when they meet the same requirements; preserve unrelated dependencies.

Audit Checklist for Changed Dependencies

1. Standard library replacement:

   • Can existing project utilities or the language's standard library meet the same requirements?
     • lodash/cloneDeep -> native structuredClone().
     • lodash/assign / shallow merges -> Object.assign() or spread. A deep merge (lodash/merge) has no native equivalent; keep a small helper or the dependency.
     • axios / request -> native fetch().
     • moment / dayjs -> native Intl.DateTimeFormat or Date.
     • rimraf / mkdirp -> fs.rmSync(path, { recursive: true }) / fs.mkdirSync(path, { recursive: true }).

2. Bundle size & unpack overhead:

   • Prefer zero-dependency or tree-shakeable packages.
   • Inspect added bundle or install cost when material to the project and the dependency's purpose.