fix: apply security best practices #8700

	name: 'Unused Dependencies'
	on: [pull_request]

	permissions:
	contents: read

	jobs:
	unused-dependecies:
	runs-on: ubuntu-latest
	steps:
	- name: Harden Runner
	uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2
	with:
	egress-policy: audit

	- name: 'Checkout Repository'
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
	- name: 'Setup Node.js'
	uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
	with:
	node-version: '24.x'
	- name: 'Run depcheck'
	run: \|
	npx depcheck --skip-missing --ignores="tsx,@babel/,@commitlint/,eslint,eslint-*,husky,ts-node,concurrently,nyc,prettier,typescript,tsconfig-paths,vite-tsconfig-paths,quicktype,history,@types/domutils,@vitest/coverage-v8,cross-env,c8"
	echo $?
	if [[ $? == 1 ]]; then
	echo "Unused dependencies or devDependencies found"
	exit 1
	fi

Provide feedback