depshred 1.0.0 → 1.0.1

package/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="assets/depshred.webp" width="200" alt="depshred logo">
+  <img src="https://raw.githubusercontent.com/gozajpeg/depshred/master/assets/depshred.webp" width="200" alt="depshred logo">
 </p>
 
 <h1 align="center">depshred</h1>
@@ -11,7 +11,7 @@
 <p align="center">
   <img src="https://img.shields.io/badge/run_with-npx_depshred-111111?style=flat-square" alt="Run with npx">
   <img src="https://img.shields.io/badge/node.js-18%2B_%7C_20%2B_%7C_22%2B-111111?style=flat-square" alt="Node Support">
-  <img src="https://img.shields.io/badge/version-1.0.0-111111?style=flat-square" alt="version 1.0.0">
+  <img src="https://img.shields.io/badge/version-1.0.1-111111?style=flat-square" alt="version 1.0.0">
   <img src="https://img.shields.io/badge/license-MIT-111111?style=flat-square" alt="MIT license">
 </p>
 
@@ -53,14 +53,14 @@ bunx depshred
 Here is what you see when you run it in your terminal:
 
 <p align="center">
-  <img src="assets/view01.webp" width="100%" alt="depshred terminal interface">
+  <img src="https://raw.githubusercontent.com/gozajpeg/depshred/master/assets/view01.webp" width="100%" alt="depshred terminal interface">
 </p>
 
 You get an easy list you can move through with your arrow keys:
 
 ```text
 +--------------------------------------------------------------------------+
-| depshred v1.0.0 (Node v20.12.0)                                          |
+| depshred v1.0.1 (Node v20.12.0)                                          |
 | Target: ./my-project                                                     |
 +--------------------------------------------------------------------------+
 | Total Scanned: 24 dependencies                                           |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "depshred",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Shred dependency bloat. Embrace modern Node.",
   "type": "module",
   "main": "./src/cli.js",

package/src/cli.js

@@ -77,7 +77,7 @@ export async function run(rawArgs = []) {
   }
 
   if (values.version) {
-    console.log('depshred v1.0.0');
+    console.log('depshred v1.0.1');
     return;
   }
 

package/src/interactive.js

@@ -29,7 +29,7 @@ export async function runInteractive(auditData) {
     process.stdout.write('\x1b[2J\x1b[3J\x1b[H');
 
     console.log(pc.bold(pc.white('+--------------------------------------------------------------------------+')));
-    console.log(pc.bold(pc.white(`| depshred v1.0.0 (Target Node: ${targetNode})`)));
+    console.log(pc.bold(pc.white(`| depshred v1.0.1 (Target Node: ${targetNode})`)));
     console.log(pc.bold(pc.white(`| Project: ${projectName} (${totalDependencies} dependencies scanned)`)));
     console.log(pc.bold(pc.white('+--------------------------------------------------------------------------+')));
     console.log(pc.red(`| [CRITICAL] ${summary.critical} native replacements (saves ~${formatBytes(totalSaveableBytes)})`));
@@ -41,27 +41,70 @@ export async function runInteractive(auditData) {
 
     if (inspecting) {
       const item = results[selectedIndex];
-      console.log(pc.bold(`=== INSPECTING: ${item.name} (${item.tier}) ===`));
-      console.log(`Details: ${item.details}`);
-      console.log(`Unpacked Size: ${formatBytes(item.size)}`);
-      console.log(`Sub-dependencies: ${item.dependenciesCount}`);
+      console.log(pc.bold(pc.white('+--------------------------------------------------------------------------+')));
+      console.log(pc.bold(pc.white(`| INSPECTING: ${item.name} (${item.tier})`)));
+      console.log(pc.bold(pc.white('+--------------------------------------------------------------------------+')));
+      console.log(`Summary: ${item.details}`);
+      console.log(`Unpacked Size: ${formatBytes(item.size)} | Sub-dependencies: ${item.dependenciesCount}`);
+      console.log(`Type: ${item.isDev ? 'Development dependency (devDependencies)' : 'Production dependency (dependencies)'}`);
       console.log('');
 
+      // Critical items: show Before/After diff and uninstall command
+      if (item.tier === 'CRITICAL') {
+        if (item.diff) {
+          console.log(pc.bold('Replacement Solution (Modern Node.js Built-in):'));
+          console.log(pc.green(item.diff));
+          console.log('');
+        }
+        console.log(pc.bold('Action:'));
+        console.log(pc.cyan(`  npm uninstall ${item.name}`));
+        console.log(pc.dim(`  Saves ~${formatBytes(item.size)} unpacked disk space.`));
+        console.log('');
+      }
 
+      // Unused items: show clear uninstall command and ignore instructions
+      if (item.tier === 'UNUSED') {
+        console.log(pc.bold('Recommended Action:'));
+        console.log(pc.cyan(`  npm uninstall ${item.name}`));
+        console.log(pc.dim(`  Zero imports or config references found in project.`));
+        console.log(pc.dim(`  To permanently ignore, add to package.json: "depshred": { "ignore": ["${item.name}"] }`));
+        console.log('');
+      }
 
-      if (item.imports && item.imports.length > 0) {
-        console.log(pc.bold(`Imports found (${item.imports.length}):`));
-        for (const imp of item.imports.slice(0, 5)) {
-          console.log(pc.dim(`  - ${imp.file}:${imp.line} -> ${imp.snippet}`));
+      // Warning items: show lighter alternatives or dormancy details
+      if (item.tier === 'WARN') {
+        if (item.altRule) {
+          console.log(pc.bold('Recommended Lighter Alternative:'));
+          console.log(`  Suggested: ${pc.cyan(item.altRule.lighter)}`);
+          console.log(`  Savings:   ${pc.green(item.altRule.savings)}`);
+          console.log(`  Details:   ${item.altRule.description}`);
+          console.log('');
+        } else if (item.size > 5 * 1024 * 1024) {
+          console.log(pc.bold('Size Optimization Note:'));
+          console.log(pc.yellow(`  Heavy package (${formatBytes(item.size)}). Check if dynamic import() or tree-shaking can reduce bundle weight.`));
+          console.log('');
         }
-        if (item.imports.length > 5) {
-          console.log(pc.dim(`  ... and ${item.imports.length - 5} more`));
+
+        if (item.yearsDormant && item.yearsDormant >= 3) {
+          console.log(pc.bold('Maintenance Assessment:'));
+          if (item.selfContained) {
+            console.log(pc.dim(`  Last update >${item.yearsDormant} years ago, but 0 sub-dependencies (self-contained and stable).`));
+          } else {
+            console.log(pc.yellow(`  Last update >${item.yearsDormant} years ago with ${item.dependenciesCount} sub-dependencies.`));
+          }
+          console.log('');
         }
-        console.log('');
       }
 
-      if (item.tier === 'UNUSED') {
-        console.log(pc.cyan(`Run: npm uninstall ${item.name}`));
+      // Show where imports or references were found
+      if (item.imports && item.imports.length > 0) {
+        console.log(pc.bold(`References in project (${item.imports.length}):`));
+        for (const imp of item.imports.slice(0, 8)) {
+          console.log(pc.dim(`  - ${imp.file}:${imp.line} -> ${imp.snippet}`));
+        }
+        if (item.imports.length > 8) {
+          console.log(pc.dim(`  ... and ${item.imports.length - 8} more references`));
+        }
         console.log('');
       }
 
@@ -136,4 +179,4 @@ export async function runInteractive(auditData) {
     process.stdin.resume();
     render();
   });
-}
+}

package/src/locator.js

@@ -1,7 +1,7 @@
 import { readdir, readFile, stat } from 'node:fs/promises';
-import { join, relative, extname } from 'node:path';
+import { join, relative, extname, basename } from 'node:path';
 
-const SUPPORTED_EXTENSIONS = new Set(['.js', '.mjs', '.cjs', '.ts', '.tsx', '.jsx']);
+const SUPPORTED_EXTENSIONS = new Set(['.js', '.mjs', '.cjs', '.ts', '.tsx', '.jsx', '.vue', '.svelte']);
 const IGNORED_DIRECTORIES = new Set([
   'node_modules',
   '.git',
@@ -17,6 +17,25 @@ const IGNORED_DIRECTORIES = new Set([
   '.windsurf'
 ]);
 
+const CONFIG_FILE_PATTERNS = [
+  /^\.babelrc(\.json|\.js|\.cjs|\.mjs)?$/,
+  /^babel\.config(\.json|\.js|\.cjs|\.mjs)?$/,
+  /^\.eslintrc(\.json|\.js|\.cjs|\.yaml|\.yml)?$/,
+  /^eslint\.config(\.js|\.mjs|\.cjs)?$/,
+  /^\.prettierrc(\.json|\.js|\.cjs|\.yaml|\.yml)?$/,
+  /^prettier\.config(\.js|\.mjs|\.cjs)?$/,
+  /^tsconfig(\..+)?\.json$/,
+  /^jsconfig(\..+)?\.json$/,
+  /^postcss\.config(\.js|\.cjs|\.mjs|\.json)?$/,
+  /^tailwind\.config(\.js|\.cjs|\.mjs|\.ts)?$/,
+  /^vite\.config(\.js|\.ts|\.mjs)?$/,
+  /^webpack\.config(\.js|\.cjs|\.mjs|\.ts)?$/,
+  /^rollup\.config(\.js|\.mjs)?$/,
+  /^next\.config(\.js|\.mjs|\.ts)?$/,
+  /^jest\.config(\.js|\.ts|\.json)?$/,
+  /^vitest\.config(\.js|\.ts)?$/
+];
+
 /**
  * Normalizes an import specifier to its root npm package name.
  * e.g. "lodash/map" -> "lodash", "@scoped/pkg/deep" -> "@scoped/pkg"
@@ -80,10 +99,34 @@ async function getSourceFiles(dir) {
 }
 
 /**
- * Scan project source files to locate package imports and detect unused dependencies.
+ * Find root-level config files in a directory.
+ */
+async function getRootConfigFiles(dir) {
+  const configFiles = [];
+  let entries;
+  try {
+    entries = await readdir(dir, { withFileTypes: true });
+  } catch {
+    return configFiles;
+  }
+
+  for (const entry of entries) {
+    if (entry.isFile()) {
+      const name = entry.name.toLowerCase();
+      if (CONFIG_FILE_PATTERNS.some((pat) => pat.test(name))) {
+        configFiles.push(entry.name);
+      }
+    }
+  }
+  return configFiles;
+}
+
+/**
+ * Scan project source files and config files to locate package imports and detect unused dependencies.
  *
  * @param {string} rootDir - Root directory of the project
  * @param {string[]} declaredDependencies - List of package names from package.json
+ * @param {object} scripts - package.json scripts object
  * @returns {Promise<{ importsMap: Map<string, Array<{file: string, line: number, snippet: string}>>, unusedPackages: string[], scannedFilesCount: number }>}
  */
 export async function locateImports(rootDir, declaredDependencies = [], scripts = {}) {
@@ -91,7 +134,73 @@ export async function locateImports(rootDir, declaredDependencies = [], scripts
   const importsMap = new Map();
   const importedSet = new Set();
 
-  // Scan package.json scripts for CLI tool references (e.g. nodemon, rimraf)
+  // Rule 1: Always ignore depshred itself (never flag depshred as unused within a project)
+  if (declaredDependencies.includes('depshred')) {
+    importedSet.add('depshred');
+    importsMap.set('depshred', [{
+      file: 'package.json',
+      line: 1,
+      snippet: 'depshred CLI dependency auditor'
+    }]);
+  }
+
+  // Rule 2: Ambient TypeScript definitions (@types/*) are used by compiler, never imported in source code
+  for (const pkg of declaredDependencies) {
+    if (pkg.startsWith('@types/')) {
+      importedSet.add(pkg);
+      if (!importsMap.has(pkg)) importsMap.set(pkg, []);
+      importsMap.get(pkg).push({
+        file: 'tsconfig.json',
+        line: 1,
+        snippet: 'TypeScript ambient type definition'
+      });
+    }
+  }
+
+  // Rule 3: Scan root configuration files for package names and plugin/preset references
+  const rootConfigFiles = await getRootConfigFiles(rootDir);
+  for (const configName of rootConfigFiles) {
+    let content;
+    try {
+      content = await readFile(join(rootDir, configName), 'utf8');
+    } catch {
+      continue;
+    }
+
+    for (const pkg of declaredDependencies) {
+      if (importedSet.has(pkg)) continue;
+
+      // Exact package match (quoted or word boundary)
+      const escaped = pkg.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+      const directRegex = new RegExp(`['"]${escaped}['"]|\\b${escaped}\\b`);
+
+      // Shorthand matches for common config tools (e.g. "react" for "eslint-plugin-react" or "react-app" for "eslint-config-react-app")
+      let shorthandMatch = false;
+      if (configName.includes('eslint')) {
+        const eslintPlugin = pkg.replace(/^eslint-plugin-/, '');
+        const eslintConfig = pkg.replace(/^eslint-config-/, '');
+        if (eslintPlugin !== pkg && new RegExp(`['"]${eslintPlugin}['"]`).test(content)) shorthandMatch = true;
+        if (eslintConfig !== pkg && new RegExp(`['"]${eslintConfig}['"]`).test(content)) shorthandMatch = true;
+      } else if (configName.includes('babel')) {
+        const babelPreset = pkg.replace(/^(@babel\/preset-|babel-preset-)/, '');
+        const babelPlugin = pkg.replace(/^(@babel\/plugin-|babel-plugin-)/, '');
+        if (babelPreset !== pkg && new RegExp(`['"]${babelPreset}['"]`).test(content)) shorthandMatch = true;
+        if (babelPlugin !== pkg && new RegExp(`['"]${babelPlugin}['"]`).test(content)) shorthandMatch = true;
+      }
+
+      if (directRegex.test(content) || shorthandMatch) {
+        importedSet.add(pkg);
+        if (!importsMap.has(pkg)) importsMap.set(pkg, []);
+        importsMap.get(pkg).push({
+          file: configName,
+          line: 1,
+          snippet: `Config reference in ${configName}`
+        });
+      }
+    }
+  }
+
+  // Rule 4: Scan package.json scripts for CLI tool references (e.g. nodemon, rimraf, tsc, prettier)
   for (const [scriptName, scriptCmd] of Object.entries(scripts)) {
     if (typeof scriptCmd !== 'string') continue;
     for (const pkg of declaredDependencies) {
@@ -111,6 +220,7 @@ export async function locateImports(rootDir, declaredDependencies = [], scripts
     }
   }
 
+  // Rule 5: Scan project source files for import / require / export from
   for (const filePath of sourceFiles) {
     let content;
     try {
@@ -124,7 +234,6 @@ export async function locateImports(rootDir, declaredDependencies = [], scripts
 
     for (let i = 0; i < lines.length; i++) {
       const line = lines[i];
-      // Skip empty or comment-only lines
       const trimmed = line.trim();
       if (!trimmed || trimmed.startsWith('//') || trimmed.startsWith('/*') || trimmed.startsWith('*')) {
         continue;
@@ -152,7 +261,7 @@ export async function locateImports(rootDir, declaredDependencies = [], scripts
     }
   }
 
-  // Detect unused packages: declared in package.json but never imported in source code
+  // Detect unused packages: declared in package.json but never referenced anywhere
   const unusedPackages = declaredDependencies.filter((pkg) => !importedSet.has(pkg));
 
   return {
@@ -160,4 +269,4 @@ export async function locateImports(rootDir, declaredDependencies = [], scripts
     unusedPackages,
     scannedFilesCount: sourceFiles.length
   };
-}
+}

package/src/reporter.js

@@ -9,7 +9,7 @@ export function printScorecard(auditData, options = {}) {
 
   console.log('');
   console.log(pc.bold(pc.white('+--------------------------------------------------------------------------+')));
-  console.log(pc.bold(pc.white(`| depshred v1.0.0 (Target Node: ${targetNode})`)));
+  console.log(pc.bold(pc.white(`| depshred v1.0.1 (Target Node: ${targetNode})`)));
   console.log(pc.bold(pc.white(`| Project: ${projectName} (${totalDependencies} dependencies scanned)`)));
   console.log(pc.bold(pc.white('+--------------------------------------------------------------------------+')));