[eranation]

That group of people is the loosely affiliated people called "vibe coders". Even to get them to install depsguard is a challenge. I just ask them to point Claude to depsguard or cooldowns and follow the instructions (to save the tokens, of course Claude can figure it what needs to be done on its own)

The issue is that Claude Code also will be super happy to npm install axios / tanstack etc unless you explicitly tell it to add cooldowns.

[Normal_gaussian]

Ha. Yes I haven't calibrated myself well for that form of users. It would seem that telling them to tell their agent to read cooldowns might be the best advice there; they sure as he'll won't read it.