skills.rest
SocketDev
SocketDevOFFICIAL
Explore all skills by this author →
Website𝕏@SocketSecurityGitHub

tidying-rolldown-bundles

Audits fleet repos for dedupe opportunities, missing overrides, and oversized shims.

125|42|Updated May 19, 2025
Search Tags:#audit#pnpm#dependency#dedupe#bundles#lockfile#fleet
One-click install
npx skills add https://github.com/SocketDev/socket-mcp --skill tidying-rolldown-bundles
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tidying-rolldown-bundles
Source: https://github.com/SocketDev/socket-mcp/tree/main/.claude/skills/fleet/tidying-rolldown-bundles
Command: npx skills add https://github.com/SocketDev/socket-mcp --skill tidying-rolldown-bundles

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

The skill provides a conservative, no-prompt sweep to keep fleet roll-down bundles lean by detecting and reporting lockfile dedupe opportunities, missing overrides, and oversized shims without making unintended source changes.

Core Features & Use Cases

  • Detects collapsible lockfile transitives and can run pnpm dedupe with --fix to perform lockfile-only improvements.
  • Flags missing catalog overrides for external dependencies to prevent drift and accidental duplication.
  • Reports oversized re-export shims that regressive to a fat re-vendored tree, helping maintain bundle hygiene ahead of releases.

Quick Start

Run the tidy-rolldown-bundles routine on a fleet repo to identify dedupe opportunities and fat shims, then optionally apply a lockfile-only dedupe.

Frequently Asked Questions about tidying-rolldown-bundles

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I dedupe pnpm lockfiles across a fleet of repositories?▼

To dedupe pnpm lockfiles across a fleet, this Skill audits the fleet roster for collapsible transitives and optionally applies a lockfile-only `pnpm dedupe` using the `--fix` flag to keep bundles lean.

What causes duplicate dependencies in rolldown bundles and how do I prevent drift?▼

Duplicate dependencies in rolldown bundles often stem from missing catalog overrides for external dependencies; this Skill flags missing overrides to prevent drift and accidental duplication across the fleet.

How can I find oversized re-export shims before a release?▼

Finding oversized re-export shims before a release involves auditing repos for shims that regress into a fat re-vendored tree; this Skill reports these anomalies to maintain bundle hygiene ahead of releases.

Does the rolldown bundle audit modify source code or run automatically?▼

The rolldown bundle audit does not modify source code; it performs a conservative, no-prompt dry-run sweep by default, and only applies a lockfile-only dedupe with the optional `--fix` flag.

How do I prepare my repositories for periodic rolldown bundle maintenance?▼

Preparing repositories for rolldown bundle maintenance requires an external/ directory or a bundle structure; the Skill reads the fleet roster and operates on qualifying repos to detect dedupe opportunities and fat shims.

Related Skills

Explore More Software Engineering Skills→
SocketDevSocketDev
125

fleet-tidying-rolldown-bundles

Report dedupable lockfile transitives in fleet bundle repos.

Official
Advanced
dennisonbertramdennisonbertram
1

npm-deps

Automate npm dependency audits, updates, and cleanup across Node.js projects.

Community
Intermediate
emilneuraz-aiemilneuraz-ai

pnpm

Automate Node.js dependency management with pnpm across monorepos.

Community
Advanced
sanity-iosanity-io
28

pnpm

Manage Node.js monorepos with pnpm workspace-aware dependency management.

Official
Advanced