Skip to content

v0.1.6 — lean install, no redundant deps

Choose a tag to compare

@TheSylvester TheSylvester released this 14 Jun 22:34

Install hygiene — no code changes

npm install -g crispy-recall now installs 1 package with 0 vulnerabilities, down from ~150 packages that included a deprecated glob and the Agent SDK's transitive moderate advisories (hono, @anthropic-ai/sdk).

Root cause: esbuild bundles every runtime library into dist/ at build time (bundle:true, external:[]), and the Agent SDK is imported for TypeScript types only. So the published dist/ was already self-contained — those libraries never needed to be installed at runtime. Moved all six from dependencies to devDependencies.

The runtime bundle is byte-identical to v0.1.5; this is purely install-time dependency hygiene. No behavior changes.

Verified

  • Clean tarball install: 1 package added, no deprecation warnings, binary runs
  • npm audit --omit=dev: 0 vulnerabilities (was 3 moderate)
  • Bundle runs standalone with no node_modules