remove logalot

[romainmenke]

not counting dev dependencies

- 230 packages
+ 179 packages

logalot was only used in the postinstall script and did not add any real value.
Less dependencies means less surface for security issues.

https://www.npmjs.com/advisories/1753

[fuqua]

@1000ch @kevva

[romainmenke]

Maybe useful to someone, we ended up removing everything from imagemin as a result of this issue. Too many times have we seen security alerts caused by libraries importing random logging utilities.

We are now just using https://github.com/GoogleChromeLabs/squoosh cli

[1000ch]

@fuqua @romainmenke
Sorry for the late response,

I think we want to fix logalot itself ideally, but it should be fixed with native console at the moment, because logalot is not critical for the module feature at least. Let me fix imagemin modules in this way. cc: @sindresorhus @kevva

[romainmenke]

@1000ch why not use console directly here?

[1000ch]

Sorry, I'm not sure about the original intention... but guessing to provide better logging UI with better functionality.

[sindresorhus]

I think just using console.log is fine for this purpose.