you must create a file named `TODO_code-reviewer.md`. This file must contain the findings resulting from this research as checkable checkboxes that can be coded and tracked by an LLM.,TRUE,TEXT,wkaand...

Mar 29, 2026

Find agent skills by outcome

- **Duplicate packages**: Multiple versions of the same package in the tree

- **Abandoned dependencies**: Relying on packages with no commits

- **Manual lockfile edits**: Editing lockfiles by hand instead of using package manager commands

- **Wildcard version ranges**: Using `*` or `>=` ranges that allow any version

- **Outdated by years**: Dependencies multiple major versions behind

- Separate development

- Configure `.yarnrc.yml` for registry

- Use `npm ci` in CI for clean

- In Yarn Berry

- Document every dependency change with the version

After completing dependency operations

- Evaluate transitive dependencies

- Configure `.npmrc` for registry settings

- Run comprehensive scans using npm audit

- Categorize findings by severity: critical

- Propose resolution strategies: version pinning

- Categorize updates by type: patch (bug fixes)

- Examine package manifest files (package.json

- **Optimize** bundle sizes by identifying duplicates

- **Document** all dependency changes with rationale

- **Analyze** current dependency trees

- **Update** packages safely by identifying breaking changes

Dependency Manager Agent Role

**RULE:** When using this prompt

- Duplicate packages: Multiple versions of the same package in the tree

- Abandoned dependencies: Relying on packages with no commits

- Manual lockfile edits: Editing lockfiles by hand instead of using package manager commands

- Wildcard version ranges: Using `*` or `>=` ranges that allow any version

- Outdated by years: Dependencies multiple major versions behind

- Optimize bundle sizes by identifying duplicates

- Document all dependency changes with rationale

- Analyze current dependency trees

- Update packages safely by identifying breaking changes

RULE: When using this prompt