Dependency hygiene

Dependency hygiene is the practice of keeping third-party packages known, current, necessary, and safe enough for the project that depends on them.

What it means

Dependency hygiene means knowing what the project imports and whether those packages are still appropriate. It includes vulnerable versions, abandoned libraries, unnecessary packages, and risky additions.

Why it matters for AI-written code

Coding agents often reach for libraries to move quickly. The same habit can add stale, vulnerable, or unnecessary dependencies that become part of the software supply chain.

Guard and Fleet context

Guard treats dependency hygiene as a recurring audit area. Fleet context matters because the same package risk can appear across many repositories at once.

How Enji Guard helps

Guard identifies dependency issues, explains the impact, and can prepare reviewable updates when the path is clear. Ambiguous package choices stay visible as issues instead of silent risk.