Is your feature request related to a specific problem?
As AI coding agents become more autonomous, they frequently hallucinate or install outdated, bloated, or unmaintained npm packages without human oversight. Relying solely on the LLM's training data for dependency resolution leads to polluted node_modules and security vulnerabilities across developer workspaces using the Antigravity CLI.
Describe the solution you'd like
I propose bundling PkgDiet as a default, built-in MCP Server within the core Antigravity CLI distribution.
PkgDiet is an AST-based dependency governance CLI that evaluates the network cost, calculates tarball sizes, and determines if a package is actively maintained or legacy. It is already officially listed in the global Anthropic MCP Registry as an active server (io.github.om-tajne/pkgdiet).
If adopted, the CLI would autonomously route any npm install intent through PkgDiet first. If the package is bloated or unmaintained, the agent will gracefully halt the installation and propose a modern alternative to the user.
Describe alternatives you've considered
- Relying on standard
npm audit: This only catches known CVEs, not bloated, abandoned, or deprecated packages.
- Regex parsing: This is error-prone. PkgDiet uses a full AST parser (
@babel/parser) to guarantee accurate detection of dependencies before the agent installs them.
Additional context
If the CLI team is open to this architecture, I am prepared to submit a Pull Request. The PR will simply include adding the bundled mcp_config.json entry for the Stdio transport to the CLI's global defaults, providing users with out-of-the-box protection.
Is your feature request related to a specific problem?
As AI coding agents become more autonomous, they frequently hallucinate or install outdated, bloated, or unmaintained npm packages without human oversight. Relying solely on the LLM's training data for dependency resolution leads to polluted
node_modulesand security vulnerabilities across developer workspaces using the Antigravity CLI.Describe the solution you'd like
I propose bundling PkgDiet as a default, built-in MCP Server within the core Antigravity CLI distribution.
PkgDiet is an AST-based dependency governance CLI that evaluates the network cost, calculates tarball sizes, and determines if a package is actively maintained or legacy. It is already officially listed in the global Anthropic MCP Registry as an active server (
io.github.om-tajne/pkgdiet).If adopted, the CLI would autonomously route any
npm installintent through PkgDiet first. If the package is bloated or unmaintained, the agent will gracefully halt the installation and propose a modern alternative to the user.Describe alternatives you've considered
npm audit: This only catches known CVEs, not bloated, abandoned, or deprecated packages.@babel/parser) to guarantee accurate detection of dependencies before the agent installs them.Additional context
If the CLI team is open to this architecture, I am prepared to submit a Pull Request. The PR will simply include adding the bundled
mcp_config.jsonentry for the Stdio transport to the CLI's global defaults, providing users with out-of-the-box protection.