code-quality-check

Code quality checks execute ESLint for style validation, TypeScript noEmit for type errors, npm audit for security vulnerabilities, and depcheck for unused dependencies in a single workflow. Use this Skill in pre-commit hooks or pull request reviews to catch issues before merging, with options for full-repo scans or changed-files-only checks.

Yes, the --changed-only option runs validation exclusively on modified files, speeding up feedback loops in pull requests. This mode runs ESLint, TypeScript, npm audit, and dependency checks on changed files only while maintaining the same exit codes and colorized output.

The --fix option auto-corrects fixable ESLint violations. Run the Skill with --fix to apply corrections, then review the changes before committing. For security vulnerabilities detected by npm audit, review the output and update dependencies; for unused dependencies flagged by depcheck, remove them manually.

TypeScript validation catches type errors early, npm audit detects security vulnerabilities in dependencies, and unused dependency detection reduces supply-chain risk and bundle bloat. Together they provide comprehensive quality assurance beyond style checking, preventing bugs, security gaps, and technical debt.

The --quick option skips TypeScript validation and security audits to prioritize speed, running only ESLint for immediate style feedback. Use it for rapid iteration during development; run full checks before pulling or pushing to catch type errors and vulnerabilities.

Depcheck identifies dependencies listed in package.json but not imported in code, reducing bundle size, supply-chain attack surface, and maintenance overhead. Removing unused dependencies prevents stale packages from introducing vulnerabilities and keeps your project dependency graph clean.