Reduce direct dependencies/devDependencies

[XhmikosR]

With jest, we might be able to remove the following devDependencies:

• c8 - will be fixed by feat: move from mocha to jest #572
• should - will be fixed by feat: move from mocha to jest #572
• sinon - will be fixed by feat: move from mocha to jest #572

As for dependencies, we might be able to remove and/or replace this with smaller/better maintained packages:

• lodash (see Remove/replace lodash dependency #604)
• prettysize
• glob - replace it with a smaller one or see if we can achieve the same with code on our side using native methods? Maybe fdir
• lodash.escape
• lodash.merge
• lodash.trim (see refactor: drop lodash.trim dependency #749)
• lodash.trimstart
• winston - do we really need its functionalities? Can't we just replace it with simpler logging/smaller package?
• csso is a big dependency but svgo depends on it anyway so it's being deduped as long as we use the same version here
• any other deps?

[Kreeg]

@XhmikosR if 2.0 release of resvgjs will be landed we can drop image-size dependency

[XhmikosR]

Nice!

I think our biggest dep at least in regard to the number of installed files is lodash. We'll get there eventually :)

[chalkygames123]

I'd like to recommend fdir as an alternative to glob.

Author's post: https://dev.to/thecodrr/how-i-wrote-the-fastest-directory-crawler-ever-3p9c

[Kreeg]

Seems like a good solution. It is lightweight, dependency-free, I'm down with that.

[XhmikosR]

One thing to keep in mind is that if one dep is very popular, there's a higher chance it's already in people's deps tree. I'm not saying we shouldn't replace a dependency if it's not popular, but it's something we should keep in mind too.

Anyway, after the lodash removal, installing svg-sprite v2.0.0-beta7 leads to ~1700 files while in v2.0.0-beta5 it was ~2700 files.

See also:

• https://packagephobia.com/result?p=svg-sprite%402.0.0-beta7 (1.x doesn't work here due to phantomjs using tar)
• https://arve0.github.io/npm-download-size/#svg-sprite@1.5.4
• https://arve0.github.io/npm-download-size/#svg-sprite@2.0.0-beta7

[strager]

Drop lodash.trim: #742

[tommiv]

A note here that with the lodash.trim removal a small documentation bug is introduced:

// Add SVG source files — the manual way ...
spriter.add('assets/svg-1.svg', null, fs.readFileSync('assets/svg-1.svg', 'utf-8'));

this line will throw an error because there's no null check on

name = trimStart(name.trim(), `${path.sep}.`) || path.basename(file);

Possible solutions are

1. to add a null-ish check

name = trimStart(name ? name.trim() : '', `${path.sep}.`) || path.basename(file);

2. to force a string before .trim() call

name = trimStart((name || '').trim(), `${path.sep}.`) || path.basename(file);

3. to update a readme

// Add SVG source files — the manual way ...
spriter.add('assets/svg-1.svg', '', fs.readFileSync('assets/svg-1.svg', 'utf-8'));

[strager]

@tommiv Thanks for finding a bug in my patch!

@XhmikosR Please advise on the right solution.

[jimCresswell]

I've opened #819 to remove lodash.trimstart, happy to make changes if that approach doesn't suit you or you find issues