AI pulled in 12 packages where 3 would do

Agents reach for a new dependency instead of a few lines of code, and you end up with overlapping, unmaintained, or vulnerable packages you never chose. Audit it: run `npm audit` (or `pip-audit`), list every direct dependency and ask which are redundant or replaceable with the standard library, then drop the unmaintained ones. Before accepting new code, tell the agent not to add a dependency without asking. A lean tree is fewer things that break and fewer security holes.