How to filter out vibe-coded dependencies

You still haven’t defined what vibecoding even is. It seems like what you really want to say is “was touched by an LLM”, but you haven’t justified that, except vague “the quality must be bad claims”. I guess you don’t have to justify that, though. If you really want an answer to your question you need to be more specific as to where you actually want to draw the line.