Adding an npm dependency isn't just installing code — it's taking on its maintenance, its attack surface, and its transitive deps. Here's the checklist I run before adding any package to a serious TypeScript project.

Sumar una dependencia npm no es solo instalar código: es asumir su mantenimiento, su superficie de ataque y sus deps transitivas. Acá está la checklist que uso antes de agregar…

Adding an npm dependency isn't just installing code — it's taking on its maintenance, its attack surface, and its transitive deps. Here's the checklist I run before adding any…