How do you stop AI coders from adding random npm packages for simple stuff?

Asked an agent for a basic date formatting function and it literally tried to pull in a whole external library instead of just using vanilla JS.

It seems like these tools always jump to installing third party packages for tiny tasks that only take a few lines of code.

How are you stopping them from cluttering package.json without having to spell it out in every single prompt?