openapicmd
openapicmd copied to clipboard
Huge install size
Hey folks! I'm very glad that this tool exists, but it took me while to install it and it made me curious to see why.
It turns out this tool has 829 dependencies, totaling 126MB in size.
- Here is the dependency graph: https://npmgraph.js.org/?q=openapicmd#zoom=w
- Here are the installation details: https://pkg-size.dev/openapicmd
Many of these dependencies are outdated or unnecessary (e.g. polyfills for dead versions of node).
Installation warnings
npm warn deprecated [email protected]: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: Glob versions prior to v9 are no longer supported
npm warn deprecated [email protected]: this library is no longer supported
npm warn deprecated [email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.
npm warn deprecated [email protected]: request has been deprecated, see https://github.com/request/request/issues/3142
npm warn deprecated @oclif/[email protected]: Deprecated in favor of @oclif/core
npm warn deprecated @oclif/[email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated @oclif/[email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated [email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated @oclif/[email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated @oclif/[email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated @oclif/[email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated @oclif/[email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
npm warn deprecated @oclif/[email protected]: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.
Bringing openapicmd and its dependencies to modern standards would help reducing install size, ram consumption and execution time.
I'm not opening this issue to blame anyone or anything, that would not be a meaningful contribution, but to raise the concern about supply chain attacks and technical debt.
Thanks a lot for your time :)