DealForge autonomously sources, scores, and writes investment memos on venture deals. Stop manually hunting.

1,180+ deals tracked  ·  22 AI investment memos  ·  Updated daily

← Back to leaderboard

Yoink functionality from dependencies and avoid supply chain attacks

Show HN: Yoink functionality from dependencies and avoid supply chain attacks

43 AI Score
Show_hn other Added Apr 5, 2026

Details

Sector
other
Total Funding
$0
Last Round
$0

About

yoink is a Claude Code plugin that removes complex dependencies from your codebase by reimplementing only the functions you actually use.<p>yoink runs as a three-step, agent skills-based workflow:<p>1. &#x2F;setup clones the target repo and scaffolds a replacement package.<p>2. &#x2F;curate-tests generates tests verified against the original&#x27;s expectations.<p>3. &#x2F;decompose determines dependencies to keep or decompose based on principles such as &quot;keeping foundational primitives regardless of how narrow they are used&quot;.<p>We built yoink in response to the five major supply chain attacks that happened in two weeks, including LiteLLM and axios. We install most of these packages without thinking twice.<p>Andrej Karpathy recently called for re-evaluating the belief that &quot;dependencies are good&quot;. OpenAI echoed this in their harness engineering article: agents reason better from reimplemented functionality they have full visibility into, over opaque third-party libraries.<p>yoink makes this capability accessible to anyone.<p>Refer to the GitHub repo to install the plugin to Claude Code: <a href="https:&#x2F;&#x2F;github.com&#x2F;theogbrand&#x2F;yoink" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;theogbrand&#x2F;yoink</a><p>Love to hear what you think!

AI Score Reasoning

Yoink addresses a timely and critical pain point in software security and AI agent transparency, capitalizing on a shift toward 'minimal dependency' architectures. However, the project currently exists only as a niche plugin with significant risks regarding long-term code maintainability and a lack of clear defensibility against native IDE integrations.

Source

Show_hn — View original →