Claude Code Plugin Yoink Replaces Library Dependencies to Reduce Supply Chain Risk

✍️ OpenClawRadar📅 Published: April 14, 2026🔗 Source
Claude Code Plugin Yoink Replaces Library Dependencies to Reduce Supply Chain Risk
Ad

Yoink is a Claude Code plugin designed to reduce supply chain attack risk by replacing library dependencies with custom implementations of only the needed functionality. The tool was developed in response to recent supply chain attacks, including those affecting LiteLLM and axios.

How Yoink Works

The plugin uses a three-step skill-based workflow:

  • /setup clones the target repository and scaffolds a replacement package
  • /curate-tests generates tests verified against the original tests' expectations
  • /decompose determines which dependencies to keep or decompose based on principles like "keeping foundational primitives regardless of how narrow they are used" and implements iteratively using ralph until all tests pass

Technical Implementation

The developers used Claude Code's plugin system as a proxy framework for programming agents for long-horizon tasks. The system provides file documentation structure to organize skills, agents, and hooks in a way that systematically directs Claude Code across multi-phase execution steps via progressive disclosure. They built a custom linter to enforce additional documentation standards to make it easier to reason about interactions between skills and agents.

Ad

Current Limitations and Future Plans

Only Python is supported now, but TypeScript and Rust support are underway. The developers note that agents occasionally get too eager and run tests they were explicitly instructed not to, and sometimes wander off-course to explore unrelated files.

Future iterations will explore tracking upstream changes and updating yoinked code accordingly to address the maintenance benefits of established packages (security patches, bug fixes, version bumps). The developers also foresee fair attribution becoming an issue as AI coding and dependency internalization become more common.

📖 Read the full source: r/ClaudeAI

Ad

👀 See Also

OpenClaw Developer Achieves AI Agent Breakthroughs with Uber and Restaurant Booking Automation
Tools

OpenClaw Developer Achieves AI Agent Breakthroughs with Uber and Restaurant Booking Automation

An OpenClaw developer has successfully created AI agents that autonomously complete Uber ride bookings and restaurant reservations on real websites, overcoming bot detection and CAPTCHAs using a stack with stealth browsers, residential proxies, and CAPTCHA solving.

OpenClawRadar
Elodin Open-Sources AI Racing Harness with Real-Time Betaflight Simulation for AI Grand Prix Contestants
Tools

Elodin Open-Sources AI Racing Harness with Real-Time Betaflight Simulation for AI Grand Prix Contestants

Elodin released an open-source simulation harness for the AI Grand Prix virtual qualifier, matching competition constraints and running against real Betaflight. The Rust/Bevy-based tool generates camera sensor samples directly in the loop, avoiding heavy game engine overhead.

OpenClawRadar
Multi-LLM Paper-Trading Bot with Claude Opus as Lead Engineer and Gemini as Strategist: Architecture Breakdown
Tools

Multi-LLM Paper-Trading Bot with Claude Opus as Lead Engineer and Gemini as Strategist: Architecture Breakdown

A solo builder shares a 4,900-LOC paper-trading bot on Alpaca where Claude Opus 4 (Engineer) has veto power over Gemini Pro (Strategist), with a 270+ entry disagreement log called the Strategist Codex.

OpenClawRadar
YouTube Transcript MCP Improves Claude Research Workflow
Tools

YouTube Transcript MCP Improves Claude Research Workflow

A YouTube transcript MCP allows Claude to pull full transcripts with timestamps from YouTube links, eliminating manual tab switching and copy-pasting. The user reports significantly better answers when Claude has actual transcripts versus user summaries.

OpenClawRadar