← Back to Product Feed

Hacker News Show HN: Yoink functionality from dependencies and avoid supply chain attacks

A tool to mitigate supply chain attacks and reduce dependency complexity by reimplementing only necessary functions, making 'dependency re-evaluation' accessible.

3
Traction Score
0
Discussions
Apr 5, 2026
Launch Date
View Origin Link

Product Positioning & Context

AI Executive Synthesis
A tool to mitigate supply chain attacks and reduce dependency complexity by reimplementing only necessary functions, making 'dependency re-evaluation' accessible.
Yoink directly addresses critical developer pain points: supply chain security vulnerabilities and the operational overhead of managing complex dependencies. Its core value proposition is reducing attack surface and improving code visibility by replacing external libraries with minimal, reimplemented functionality. This aligns with a growing industry sentiment, highlighted by Karpathy and OpenAI, questioning the inherent goodness of extensive dependencies. The implementation as a Claude Code plugin signifies the increasing integration of AI agents into core development workflows, automating complex refactoring tasks. This product targets a significant market trend towards enhanced software supply chain security and code ownership, offering a practical AI-driven solution to a pervasive problem in modern software development.
yoink is a Claude Code plugin that removes complex dependencies from your codebase by reimplementing only the functions you actually use.yoink runs as a three-step, agent skills-based workflow:1. /setup clones the target repo and scaffolds a replacement package.2. /curate-tests generates tests verified against the original's expectations.3. /decompose determines dependencies to keep or decompose based on principles such as "keeping foundational primitives regardless of how narrow they are used".We built yoink in response to the five major supply chain attacks that happened in two weeks, including LiteLLM and axios. We install most of these packages without thinking twice.Andrej Karpathy recently called for re-evaluating the belief that "dependencies are good". OpenAI echoed this in their harness engineering article: agents reason better from reimplemented functionality they have full visibility into, over opaque third-party libraries.yoink makes this capability accessible to anyone.Refer to the GitHub repo to install the plugin to Claude Code: https://github.com/theogbrand/yoinkLove to hear what you think!
Claude Code plugin supply chain attacks dependencies codebase reimplementing functions agent skills-based workflow /setup /curate-tests

Community Voice & Feedback

No active discussions extracted yet.

Related Early-Stage Discoveries

Discovery Source

Hacker News Hacker News

Aggregated via automated community intelligence tracking.

Tech Stack Dependencies

No direct open-source NPM package mentions detected in the product documentation.

Media Tractions & Mentions

No mainstream media stories specifically mentioning this product name have been intercepted yet.

Deep Research & Science

No direct peer-reviewed scientific literature matched with this product's architecture.