v0.1.6 — lean install, no redundant deps
Install hygiene — no code changes
npm install -g crispy-recall now installs 1 package with 0 vulnerabilities, down from ~150 packages that included a deprecated glob and the Agent SDK's transitive moderate advisories (hono, @anthropic-ai/sdk).
Root cause: esbuild bundles every runtime library into dist/ at build time (bundle:true, external:[]), and the Agent SDK is imported for TypeScript types only. So the published dist/ was already self-contained — those libraries never needed to be installed at runtime. Moved all six from dependencies to devDependencies.
The runtime bundle is byte-identical to v0.1.5; this is purely install-time dependency hygiene. No behavior changes.
Verified
- Clean tarball install: 1 package added, no deprecation warnings, binary runs
npm audit --omit=dev: 0 vulnerabilities (was 3 moderate)- Bundle runs standalone with no
node_modules