tracking dependencies

[ryanatkn]

To be mindful of our project's dependencies, let's track some basic stats. Bots can look through the actual git history.

These numbers are absolute totals at each commit. (meaning, don't add numbers together between snapshots, each is the total)

At each commit, run:

rm -rf node_modules
npm i

---

initialize SvelteKit

npm init svelte@next # yes to TypeScript, plain CSS, and Prettier, no to eslint

df44ca3

added 46 packages from 111 contributors and audited 47 packages in 2.406s

---

install Gro

npm i -D @feltcoop/gro@0.6.4

8720c75

+ 71 packages
+ 15 contributors

added 117 packages from 126 contributors and audited 124 packages in 3.429s

Hey that's neat, Gro only adds 15 contributors. Its esinstall dependency along with some Rollup plugins add a lot of unwanted weight.

Also, Gro has dependencies that re-use 6 existing packages internally, to SvelteKit's initial 1. (if you do the math, that's what those packages numbers mean)

Gro also has the stated goal of offering a SvelteKit alternative to Vite, but that's a ways off. And Vite currently hides all of its dependencies like Rollup, by bundling the dependencies up and shipping with near-zero dependencies to npm. (for more about Gro see here and here) So maybe there's more contributors than it appears. (I haven't checked if Vite/Rollup include them somehow)

---

update Gro

npm i -D @feltcoop/gro@0.13.0

9770d19

+ 7 packages
+ 16 contributors

added 124 packages from 142 contributors and audited 131 packages in 5.085s

Lots of updates to Gro. Adds 7 packages and 16 contributors, almost all through types and Rollup plugins, so not bad. Also not bad considering the improvements to Gro between 0.6.4 and 0.13.0.

[ryanatkn]

---

replace svelte-preprocess with svelte-preprocess-esbuild

npm i -D svelte-preprocess-esbuild@2.0.0
npm uninstall svelte-preprocess

ca24632

- 6 packages
- 5 contributors

added 118 packages from 137 contributors and audited 126 packages in 3.657s

Switching svelte-preprocess to svelte-preprocess-esbuild drops 6 dependencies and 5 maintainers.

---

[ryanatkn]

---

add Felt and upgrade SvelteKit and Gro dependencies

I wasn't keeping up with this so it conflates multiple changes, but the aggregate numbers barely changed:

npm i -D @sveltejs/kit@1.0.0-next.120
npm i -D @sveltejs/adapter-static@1.0.0-next.13
npm uninstall @sveltejs/adapter-node # change to static adapter
npm uninstall vite # no longer needed with SvelteKit
npm i -D @feltcoop/felt@0.4.5
npm i -D @feltcoop/gro@0.34.2

90dd335

- 3 packages

added 115 packages, and audited 116 packages in 2s

Sadly npm@7.20.0 isn't reporting the contributor count any more. 😿

---

[ryanatkn]

---

npm i -D @sveltejs/kit@1.0.0-next.131

26350fd

- 6 packages

added 109 packages, and audited 110 packages in 2s

---

[ryanatkn]

npm i @sveltejs/kit@1.0.0-next.179

+ 2 packages

added 111 packages, and audited 112 packages

[ryanatkn]

npm i @feltcoop/felt@0.12.0

+ 1 packages

added 1 package, changed 1 package, and audited 113 packages

[ryanatkn]

npm i @feltcoop/felt@0.12.0

+ 48 packages 😢

added 50 packages, removed 2 packages, changed 10 packages, and audited 161 packages

This is a big sadface increase in Gro's dependencies, but adding svelte-check makes Gro more convenient to use. Alleviated by the fact that it's an official Svelte project and adds extremely popular dependencies. See this PR for more context and details: ryanatkn/gro#271

[ryanatkn]

npm i @feltcoop/felt@0.14.1 @feltcoop/gro@0.45.1

- 29 packages 🙂

removed 29 packages, changed 2 packages, and audited 132 packages in 1s

Gro removed its frontend functionality in favor of supporting only SvelteKit, dropping esinstall and its many deps: ryanatkn/gro#281

[ryanatkn]

npm i @feltcoop/felt@0.15.1 @feltcoop/gro@0.47.2

+ 3 packages 😢

added 5 packages, removed 2 packages, changed 18 packages, and audited 135 packages in 5s

Some transitive deps changed in Gro, nothing major.

[ryanatkn]

npm i @feltcoop/gro@0.49.0

- 78 packages

removed 78 packages, changed 2 packages, and audited 57 packages in 534ms

Gro no longer has svelte-check as a dependency; if it's installed, gro typecheck will detect and use it. Additionally, it removed Rollup and some Rollup plugins, and now uses esbuild for everything.

But at the same time, we install svelte-check as a dependency in the template:

npm i -D svelte-check@2.3.0

+ 54 packages

added 54 packages, and audited 111 packages in 4s

Bringing the total change to:

- 24 packages

[ryanatkn]

npm i @sveltejs/adapter-static@1.0.0-next.26

+ 3 packages

added 3 packages, changed 1 package, and audited 114 packages in 1s

The static adapter added some glob utils.

[ryanatkn]

npm i @feltcoop/gro@0.50.3

+ 11 packages

added 11 packages, changed 2 packages, and audited 122 packages in 4s

Gro added support for TypeScript type generation from schemas, adding the json-schema-to-typescript dependency. (I maintain a fork because I only use it programmatically, and Gro has its own things like formatting, so my fork is 11 deps vs 54 for the main project)

[ryanatkn]

npm i @feltcoop/gro@0.52.3

52293dd

+ 5 packages

added 6 packages, removed 1 package, changed 3 packages, and audited 127 packages in 578ms

Gro added support for args schema validation, adding the Ajv dependency.

[ryanatkn]

npm i -D eslint@8.11.0 \
	@typescript-eslint/eslint-plugin@5.15.0 \
	@typescript-eslint/parser@5.15.0 \
	eslint-plugin-svelte3@3.4.1 \
	@feltcoop/eslint-config@0.1.3

513ec74

+ 84 packages

added 84 packages, and audited 211 packages in 3s

Gro has optional support for eslint, and we've decided to integrate it by default in all of our projects. This adds eslint along with support for TypeScript and Svelte, and it uses our config @feltcoop/eslint-config.

This is a big one, almost doubling our total dep count, but given the popularity of eslint in the community, adding these dependencies isn't as costly as it may appear, the benefits to code quality are substantial, and it's very nice to have it out of the box.

[ryanatkn]

npm i @sveltejs/kit@1.0.0-next.298 @sveltejs/adapter-static@1.0.0-next.29

#3

+ 2 packages

added 4 packages, removed 2 packages, changed 10 packages, and audited 213 packages in 3s

Big upgrade for SvelteKit.

[ryanatkn]

npm i @feltcoop/gro@0.55.1

41d21d9

- 1 package

removed 1 package, changed 1 package, and audited 212 packages in 522ms

removed a dep from Gro

[ryanatkn]

npm i @sveltejs/kit@1.0.0-next.340 @sveltejs/adapter-static@1.0.0-next.31

8405ee7

+ 1 package

added 2 packages, removed 1 package, changed 11 packages, and audited 213 packages in 4s

[ryanatkn]

Not sure where the 2 additional deps came from here, everything got updated: #6

c47fae4

+ 2 packages

[ryanatkn]

Upgraded esbuild via SvelteKit/Vite which added a couple platform-specific deps.

eb2dad5

+ 2 packages

added 2 packages, changed 9 packages, and audited 217 packages in 3s

[ryanatkn]

Upgraded SvelteKit from 1.0.0-next.405 to 1.0.0-next.476, along with most other deps. SvelteKit has more deps now, but it's still quite slim. Also adds uvu as a dependency now that it's no longer a Gro peer dep.

#7

+ 19 packages

added 24 packages, removed 5 packages, changed 31 packages, and audited 236 packages in 2s

[ryanatkn]

Upgraded SvelteKit from 1.0.0-next.476 to 1.0.0-next.538 and eslint from 8.23.0 to 8.27.0. Each has some dependency churn but net zero packages.

b289aa3

7679a40

[ryanatkn]

Upgraded all the deps:

476b7a7

+ 0 packages

added 1 package, removed 3 packages, changed 18 packages, and audited 236 packages in 11s

Hmm says 236 still? Maybe I missed an upgrade, doesn't matter.

[ryanatkn]

Upgraded to SvelteKit 1.0:

ryanatkn/gro#359

ryanatkn/gro@d38378b

+ 1 packages

audited 237 packages

[ryanatkn]

Upgraded to @sveltejs/kit@1.7.2:

bb1b59b

+ 1 package

added 1 package, changed 5 packages, and audited 238 packages in 4s

[ryanatkn]

Some good churn in the eslint plugin and elsewhere:

608ffa4

- 9 packages

audited 229 packages

[ryanatkn]

Now included via SvelteKit: @sveltejs/vite-plugin-svelte-inspector:

#9

- 2 packages

added 2 packages, removed 4 packages, changed 32 packages, and audited 227 packages in 5s

[ryanatkn]

Upgraded to Svelte 4 and changed from eslint-plugin-svelte3 to eslint-plugin-svelte:

#10

+ 27 packages

added 27 packages, removed 1 package, changed 17 packages, and audited 253 packages in 2s

[ryanatkn]

@typescript-eslint/eslint-plugin shaved a dep:

6d32351

- 1 package

added 1 package, removed 2 packages, changed 14 packages, and audited 252 packages in 2s

[ryanatkn]

gro changed to chokidar away from cheap-watch - ryanatkn/gro#386:

b22acb5

- 1 package

removed 1 package, changed 2 packages, and audited 251 packages in 561ms

[ryanatkn]

gro had a major update with ryanatkn/gro#382

#12

- 3 packages

audited 248 packages in 1s

[ryanatkn]

@typescript-eslint/eslint-plugin@6 trimmed some deps:

bcd6ccf

- 4 packages

added 1 package, removed 5 packages, changed 9 packages, and audited 244 packages in 708ms

[ryanatkn]

upgraded to @grogarden/gro@0.85

04246c6

- 4 packages

audited 240 packages in 454ms

[ryanatkn]

added @fuz.dev/fuz_library

06d38ee

+ 2 packages

audited 242 packages in 893ms

[ryanatkn]

added @fuz.dev/fuz_contextmenu and @fuz.dev/fuz_dialog and upgraded some others

29673c0

+ 1 package

audited 243 packages in 596ms

[ryanatkn]

removed svelte-preprocess-esbuild, using import {vitePreprocess} from '@sveltejs/kit/vite'; instead

#15

- 2 packages

audited 241 packages in 520ms

[ryanatkn]

removed @sveltejs/package by default, users are now expected to install it themselves to enable gro publish with the default config, see ryanatkn/gro#426

#16

- 6 packages

removed 6 packages, and audited 235 packages in 513ms

[ryanatkn]

added ts-morph in Gro, see ryanatkn/gro#430

d3435f2

+ 7 packages

added 7 packages, changed 5 packages, and audited 242 packages in 1s

[ryanatkn]

upgrade @sveltejs/kit@2

eab40d3

+ 1 package

audited 243 packages

[ryanatkn]

upgrade @typescript-eslint/typescript-estree@6.16

c2349b7

+ 1 package

added 2 packages, removed 1 package, changed 10 packages, and audited 244 packages in 5s

[ryanatkn]

upgrade deps

8e1ab5b

- 7 packages

added 1 package, removed 8 packages, changed 15 packages, and audited 237 packages in 4s

[ryanatkn]

upgrade deps

3f118c1

+ 1 package

added 1 package, and audited 238 packages in 687ms

[ryanatkn]

upgrade deps including Svelte 5

#18

- 1 package

audited 237 packages in 490ms

[ryanatkn]

add @ryanatkn/moss which was extracted from Fuz

#19

+ 1 package

audited 238 packages in 484ms

[ryanatkn]

Some deps were trimmed from eslint-plugin-svelte and @typescript-eslint/utils and their transient deps.

#20

- 6 packages

audited 232 packages in 487ms

[ryanatkn]

esbuild upgrade, nothing really added

#21

+ 2 packages

audited 234 packages in 511ms

[ryanatkn]

upgraded to eslint@9 and typescript-eslint@8, each of which added some deps

#22

+ 11 packages

audited 245 packages in 478ms

[ryanatkn]

Some more eslint-related churn

a8001ba

- 7 packages

audited 238 packages in 694ms

[ryanatkn]

Big reduction mostly thanks to svelte-check no longer depending on svelte-preprocess.

ac4b1b7

- 25 packages

audited 213 packages in 592ms

[ryanatkn]

ESLint churn

8056932

+1 package

audited 214 packages in 474ms

[ryanatkn]

Chokidar dropped 12 deps but it's not yet updated in svelte-check, so I expect this'll drop by 14 deps once it's updated.

56baa26

+2 packages

audited 216 packages in 453ms

[ryanatkn]

svelte-check upgraded Chokidar, looks like some deps are still used by ESLint.

15a0b12

reinstalled lockfile - 60a1893

-7 packages

audited 209 packages in 607ms

[ryanatkn]

eslint netted out a dep

2dd2981

-1 packages

audited 208 packages in 1s

[ryanatkn]

Svelte 5 upgrade dropped a dep.

6252e60

-1 packages

audited 207 packages in 1s

[ryanatkn]

Gro switched over to oxc-parser from es-module-lexer. It's basically the same number of dependencies, but like esbuild it has platform-dependent packages, so the number can be higher than 1. (even deleting package-lock.json and reinstalling, which sometimes works, I don't understand npm)

4a1b9cd

+3 packages

audited 210 packages in 1s

[ryanatkn]

Eslint dropped text-table.

286a3c9

-1 package

audited 209 packages in 454ms

[ryanatkn]

Svelte added clsx.

0219f72

+1 package

audited 210 packages in 797ms