actual-mcp-server: Command for Claude Code

Run a dependency health audit for actual-mcp-server and create GitHub issues for any findings.

Usage

Accepted arguments: [--full]

• Default: skip libraries checked within the last 30 days (cache-first)
• --full: ignore the cache and re-audit every library

Overview

Runs 4 sequential checks, writes results to docs/audit/dep-audit-cache.json, and opens GitHub issues for every finding. Never auto-removes or auto-updates anything — create tickets only.

---

Step 1 — Read the cache

Read docs/audit/dep-audit-cache.json if it exists. Structure:

{
  "lastFullAudit": "<ISO timestamp>",
  "libraries": {
    "<package-name>": {
      "lastChecked": "<YYYY-MM-DD>",
      "status": "maintained|unmaintained|deprecated",
      "lastPublish": "<YYYY-MM-DD>",
      "weeklyDownloads": 0
    }
  }
}

If the file does not exist, treat all libraries as uncached. If --full was passed, treat all libraries as uncached regardless.

---

Step 2 — Check 1: Unused dependencies (Knip)

Knip is now committed and configured (#234): use the project config, not bare npx knip.

npm run knip 2>&1   # uses the committed knip.json (report-only)

Scope split (#234): this auditor owns DEPENDENCY findings only (unused or duplicate package.json entries). The unused FILES, EXPORTS, and TYPES that Knip also reports are SOURCE dead code, owned by the /code-health-auditor skill. Do NOT file source dead-code tickets here; leave them to /code-health-auditor.

Known false positives — exclude from tickets:

• tsconfig-paths — used by scripts/register-tsconfig-paths.js at runtime
• dotenv — loaded dynamically via src/index.ts
• @types/* packages — compile-time only, not detectable by Knip
• @playwright/test — test-only, conditionally executed

For any remaining unused DEPENDENCY flagged by Knip (not exports/files: those go to /code-health-auditor), prepare one ticket:

Title: fix: remove unused dependencies (Knip) Labels: infrastructure Body: list each flagged item with the file/import path where it appears (or doesn't)