Dependency Bloat

[tristanhoy]

Expected behavior

A simple package should be very lean to reduce:

• Payload sizes
• Build times
• Vulnerability surface area

Observed behavior

Bugsnag has over 5mb of dependencies

Steps to reproduce

npm install bugsnag

Version

2.4.0

Additional information

• Replace request (4MB) with isomorphic-fetch (500KB)
• Upgrade cuid 1.3.8 (1.24MB) to cuid 2.1.1 (44KB)

[bengourley]

You raise some good suggestions. I think the cuid upgrade would be a lot easier than the isomorphic fetch migration. I'll make a note to address this – though that might not happen before we merge our node/browser js notifiers, in which case it will be addressed anyway.

[bengourley]

I'm closing off this issue because this package is now deprecated. @bugsnag/js is our new "universal" notifier for Node and Browser JS.

We still use request to send error reports from node because we need robust proxy support, which isomorphic-fetch (and other reasonably sized alternatives to request) doesn't have.

We will be looking at moving to just require('http')/require('https') combined with node-proxy-agent because there are still a ton of request's features that we don't use.