WARM

Arguments

Raw arguments: $ARGUMENTS

Parse the arguments as the base branch to diff against. If empty, default to main.

Goal

Evaluate the dependencies this branch pulls in — added or upgraded since it diverged from the base — against the WARM check, and give each one a clear verdict. Cover both client-side and server-side dependencies, in any language. The output helps the user decide which new dependencies to keep, reconsider, or pin/patch before merge.

WARM stands for:

• Worth it? — could ~20 lines of your own code replace it? A dependency you'd write in an afternoon isn't worth the supply-chain surface.
• Alive? — recent commits, active maintenance, real release cadence. A package last touched years ago is a liability.
• Right-sized? — are you pulling a whole library for one function? Match the dependency's footprint to what you actually use.
• Maintained securely? — known vulnerabilities (CVEs/advisories), unpatched issues, or a maintainer with a poor security track record.