PixelPilot uiux-library-verification.instructions.md

Library Verification Skill

Before recommending any third-party library, AI must verify its health and suitability.

---

VERIFICATION CHECKLIST

Rule: Never recommend a library without completing this verification. Output results in a standardized table.

Required Checks

Check	Criteria	Action if Failed
Exists	Package found on npm or GitHub	Do not recommend
Last Update	≤ 12 months ago	Warn user, suggest alternatives
Downloads	≥ 10,000/week (popular) or ≥ 1,000/week (niche)	Warn user
License	MIT, Apache 2.0, BSD, ISC, or MIT-compatible	Do not recommend without explicit user consent
Bundle Size	Reasonable for category	Note in recommendation
TypeScript	Has types (built-in or @types/*)	Note if missing

---

OUTPUT FORMAT

Always output verification results in this table format:

### Library Verification Report

| Library | Exists? | Weekly Downloads | Last Update | License | Bundle Size | Recommendation |
|---------|---------|------------------|-------------|---------|-------------|----------------|
| fuse.js | ✅ Yes | 1.2M | 2 months ago | Apache-2.0 | 24KB | ✅ Recommended |
| some-lib | ✅ Yes | 500 | 18 months ago | MIT | 8KB | ⚠️ Low activity |
| fake-lib | ❌ No | N/A | N/A | N/A | N/A | ❌ Does not exist |

---

VERIFICATION PROCESS

Step 1: Check npm Registry

// Verification script (run via Node.js or use npm API)
async function verifyPackage(packageName) {
  const response = await fetch(`https://registry.npmjs.org/${packageName}`);
  
  if (!response.ok) {
    return { exists: false, reason: 'Package not found on npm' };
  }
  
  const data = await response.json();
  const latest = data['dist-tags']?.latest;
  const latestVersion = data.versions?.[latest];
  
  return {
    exists: true,
    name: data.name,
    version: latest,
    license: latestVersion?.license || 'Unknown',
    lastPublish: data.time?.[latest],
    repository: latestVersion?.repository?.url,
    types: latestVersion?.types || latestVersion?.typings || 
           data.name.startsWith('@types/') || 
           !!latestVersion?.devDependencies?.['@types/' + data.name]
  };
}