dep cleanup

[talentlessguy]

• Replaces execa with tinyexec
• Replaces fs-extra with built-in fs module
• Use node: protocol for better support in serverless environments

I also had to replace Jest with Vitest because Jest kept using the ESM version of tinyexec and ignoring the CJS one (it's an issue with Jest, not tinyexec)

As a result, 23 dependencies are dropped and the package becomes ~20% smaller:

Estimated new statistics:
  Package size: 2.7 MB → 2.2 MB (80.65%)
  Subdependencies: 87 → 64 (-23)

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@esbuild/[email protected]	None	0	9.75 MB	evanw
npm/@ungap/[email protected]	None	0	27.5 kB	webreflection
npm/[email protected]	environment, shell	0	46.1 kB	43081j
npm/[email protected]	Transitive: environment, filesystem, network, shell, unsafe	+39	10.3 MB	antfu, oreanno, patak, ...1 more

🚮 Removed packages: npm/[email protected], npm/[email protected]

View full report↗︎

[talentlessguy]

tests are failing, will fix

in the meantime, is support for Node 16 still required or it could be dropped? asking because structuredClone used by vitest is supported only since Node 17

[onsclom]

tests are failing, will fix

in the meantime, is support for Node 16 still required or it could be dropped? asking because structuredClone used by vitest is supported only since Node 17

Thanks! Unfortunately, yes, Node 16 support is still required.

[talentlessguy]

had to apply a patch to Vite because on node 16 getRandomValues is inside webcrypto and not require('crypto')

[talentlessguy]

polyfill because structuredClone is only available since node 17

[talentlessguy]

woohoo, all tests pass

[onsclom]

I think after pinning these deps and updating the lockfile, this is good to go. Thank you @talentlessguy!

[talentlessguy]

@onsclom done, the lockfile is updated and all deps have fixed versions

[talentlessguy]

@onsclom thank you for merging! any chance that it would also get published on npm?

(bringing it up because it often happens that merged PRs remain unpublished)

[github-actions]

🎉 This PR is included in version 1.1.3 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀

[EndangeredMassa]

@talentlessguy check out 1.1.3 and let us know if that doesn't work!