perf(install): switch over to modern-tar #745
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
If there is any appetite to reduce the dependency count, I'd love to suggest using modern-tar that solely relies on native APIs to reduce the surface area by 6 dependencies (additional 2MB unpacked). This brings the total package size down from 6MB to ~4MB when running
npxfor the first time.This has a very small surface area which makes me believe this is a safe migration to undertake. Please let me know if there any concerns!
Ref: https://npmgraph.js.org/?q=node-jq
On a side note,
zodis around 3MB (almost 4MB if upgraded tozod@4). If we were to switch it out with something more native or even Zod Mini, the install size would significantly drop which would be a much faster initialnpxexperience. That would also be a very interesting avenue to explore.