Dependency
Also called Transitive dependency, node_modules, Package
Code your project relies on but didn't write. The ones you name, in a file called package.json for JavaScript, are direct. They have dependencies of their own, and those have theirs, so these transitive ones are usually most of what you install, into a folder called node_modules.
Each one is code you now run without having read it, from people you don't know. Agents add them readily, because that solves today's problem. The cost arrives later, as updates, size and exposure. So ask for a reason each time.
“Don't add a dependency for this yet. Tell me what it would do for us and how many packages it brings, using bun pm ls --all before and after. If the job is under 20 lines, write it here with a test.”