v0.4.0 — config file detection (fix false REMOVE for scripts, storybook, vitest, next)

What's new

Config file detection — dep-scope now scans config files at the project root to detect packages referenced as strings. Five built-in detectors ship enabled by default, fixing false REMOVE verdicts reported by the community.

Fixed false positives

Package	Was detected via
oxfmt, oxlint	package.json scripts
@storybook/addon-mcp	.storybook/main.ts addons array
@svgr/webpack	next.config.mjs turbopack loaders
jsdom	vitest.config.ts environment: "jsdom"

Built-in detectors

Detector	Config file
package-json-scripts	package.json scripts
vitest-config	vitest.config.*
vite-config	vite.config.*
next-config	next.config.*
storybook-config	.storybook/main.*

Opt-out

{ "stringReferences": { "disable": ["storybook-config"] } }

Architecture

String references are converted to synthetic ImportInfo entries injected before groupByPackage — verdict engine untouched. Detection is gated against declared dependencies to prevent false KEEPs.

Full changelog: CHANGELOG.md