Learn-skills.dev dependency-supply-chain

Change discipline for adding/upgrading dependencies; keeps diffs small, avoids unnecessary packages, and preserves deletion-friendly architecture.

install
source · Clone the upstream repo
git clone https://github.com/NeverSight/learn-skills.dev
Claude Code · Install into ~/.claude/skills/
T=$(mktemp -d) && git clone --depth=1 https://github.com/NeverSight/learn-skills.dev "$T" && mkdir -p ~/.claude/skills && cp -r "$T/data/skills-md/7spade/black-tortoise/dependency-supply-chain" ~/.claude/skills/neversight-learn-skills-dev-dependency-supply-chain && rm -rf "$T"
manifest: data/skills-md/7spade/black-tortoise/dependency-supply-chain/SKILL.md
source content

Dependency & Supply-Chain (Change Discipline)

Use when

  • Adding a new npm package.
  • Upgrading Angular/Firebase/tooling versions.

Workflow

  1. Justify: what existing platform feature cannot solve it?
  2. Minimize: smallest package/scope; avoid runtime deps for build-time needs.
  3. Isolate: keep dependency behind a boundary (adapter/port) if it’s not a core framework lib.
  4. Validate: run lint, type-check, architecture gate, and tests.

References

  • .github/instructions/66-dependency-supply-chain-copilot-instructions.md