How to filter out vibe-coded dependencies

hasufell:

how I can make sure my dependency graph never includes such packages.

What’s the upside?

It’s clearly not for direct dependencies, since you wouldn’t add a library you think is bad.

If some cornerstone library—like aeson—gets an awful dependency, you’ve just locked yourself out of the ecosystem.