Dependency & Supply-Chain (Change Discipline)
Use when
-
Adding a new npm package.
-
Upgrading Angular/Firebase/tooling versions.
Workflow
-
Justify: what existing platform feature cannot solve it?
-
Minimize: smallest package/scope; avoid runtime deps for build-time needs.
-
Isolate: keep dependency behind a boundary (adapter/port) if it’s not a core framework lib.
-
Validate: run lint, type-check, architecture gate, and tests.
References
- .github/instructions/66-dependency-supply-chain-copilot-instructions.md