vike-lite 1.17.2 → 1.17.4

package/README.md

@@ -39,18 +39,32 @@ export default {
 
 #### printDependencies
 
-When set to `true`, at the end of each production build (client and server) the plugin prints the list of `package.json` dependencies (and devDependencies) that were actually bundled or externally imported in that specific build output. This is useful to debug bundle composition/size — e.g. spotting a heavy dependency that unexpectedly ended up in the client bundle.
+When set to `true`, at the end of each production build (client and server), the plugin prints the list of `package.json` dependencies (and devDependencies) that were actually bundled or externally imported in that specific build output.
 
-```sh
+More importantly, it cross-references this usage with your `package.json` to provide **smart suggestions** to prevent production crashes and optimize your deployment size.
 
+```sh
 📦 [Client bundle] 1 dependencies used from package.json:
-   - solid-js@^1.9.3
+   - solid-js@^1.9.3 (bundled)
+
+📦 [Server bundle] 3 dependencies used from package.json:
+   - solid-js@^1.9.3 (bundled)
+   - hono@^4.12.31 (external)
+   - postgres@^3.4.4 [dev] (external)
 
-📦 [Server bundle] 2 dependencies used from package.json:
-   - solid-js@^1.9.3
-   - hono@^4.12.31
+   Suggestions:
+   🚨 postgres is externalized in the server bundle but listed as a devDependency. Move it to dependencies or it will break in production.
+   💡 solid-js is always fully bundled (never externalized). Consider moving it to devDependencies to reduce production node_modules size.
+   🗑️ lodash@4.17.21 is listed in "dependencies" but wasn't found in any bundle — if it's only needed at build/dev time, move it to devDependencies (or remove it if unused).
 ```
 
+##### What it catches:
+- 🚨 **Production Crashes:** Flags devDependencies that are externalized by the server (if left as dev dependencies, your app will crash in production environments that use `npm ci --omit=dev`).
+- 💡 **Server Bloat:** Flags regular dependencies that are 100% bundled into the build. Moving these to `devDependencies` shrinks your production node_modules size.
+- 🗑️ **Unused Packages**: Highlights dependencies taking up space in your `package.json` that never appeared in the final build graph.
+
+It's disabled by default since it adds diagnostic console output and isn't needed for normal usage, but it is highly recommended to run occasionally to audit your packages.
+
 It's disabled by default since it only adds diagnostic console output and isn't needed for normal usage.
 
 ### 🖥️ Server Integration

package/dist/vite.mjs

@@ -345,26 +345,54 @@ function vikeLite({ pagesDir = "pages", apiPrefix = "/api", prerender = false, s
 		},
 		generateBundle(_options, bundle) {
 			if (!printDependencies || !projectDependencies) return;
-			const envName = this.environment.name;
-			if (envName !== "client" && envName !== "ssr") return;
 			const usedDeps = /* @__PURE__ */ new Map();
 			for (const chunk of Object.values(bundle)) {
 				if (chunk.type !== "chunk") continue;
 				for (const id of chunk.moduleIds) {
 					const pkg = extractPkgName(id);
-					if (pkg && !pkg.startsWith("vike-lite") && Object.hasOwn(projectDependencies, pkg)) usedDeps.set(pkg, projectDependencies[pkg]);
+					if (pkg && !pkg.startsWith("vike-lite") && Object.hasOwn(projectDependencies, pkg)) {
+						const entry = usedDeps.get(pkg) ?? {
+							...projectDependencies[pkg],
+							isBundled: false,
+							isExternal: false
+						};
+						entry.isBundled = true;
+						usedDeps.set(pkg, entry);
+					}
 				}
 				for (const imp of [...chunk.imports, ...chunk.dynamicImports]) {
+					if (bundle[imp]) continue;
 					const pkg = extractPkgName(imp);
-					if (pkg && !pkg.startsWith("vike-lite") && Object.hasOwn(projectDependencies, pkg)) usedDeps.set(pkg, projectDependencies[pkg]);
+					if (pkg && !pkg.startsWith("vike-lite") && Object.hasOwn(projectDependencies, pkg)) {
+						const entry = usedDeps.get(pkg) ?? {
+							...projectDependencies[pkg],
+							isBundled: false,
+							isExternal: false
+						};
+						entry.isExternal = true;
+						usedDeps.set(pkg, entry);
+					}
 				}
 			}
 			const sorted = [...usedDeps.entries()].sort(([a], [b]) => a.localeCompare(b));
-			console.log(`\n📦 [${envName === "client" ? "Client" : "Server"} bundle] ${sorted.length} dependencies used from package.json:`);
+			const envName = this.environment.name;
+			const label = envName === "client" ? "Client" : "Server";
+			console.log(`\n📦 [${label} bundle] ${sorted.length} dependencies used from package.json:`);
 			if (sorted.length === 0) console.log("   (None)");
 			else for (const [name, info] of sorted) {
 				const typeTag = info.type ? ` \u{1B}[33m[${info.type}]\u{1B}[0m` : "";
-				console.log(`   - \u{1B}[36m${name}@${info.version}\u{1B}[0m${typeTag}`);
+				const usageTag = info.isExternal ? " \x1B[90m(external)\x1B[0m" : " \x1B[90m(bundled)\x1B[0m";
+				console.log(`   - \u{1B}[36m${name}@${info.version}\u{1B}[0m${typeTag}${usageTag}`);
+			}
+			const suggestions = [];
+			for (const [name, info] of sorted) if (envName === "ssr" && info.isExternal && info.type === "dev") suggestions.push(`\u{1B}[31m🚨 ${name}\u{1B}[0m is externalized by the server but listed as a \u{1B}[33mdevDependency\u{1B}[0m. Move it to \u{1B}[32mdependencies\u{1B}[0m to prevent production crashes.`);
+			else if (info.isBundled && !info.isExternal && info.type === "") {
+				const otherEnv = envName === "client" ? "server" : "client";
+				suggestions.push(`\u{1B}[34m💡 ${name}\u{1B}[0m is fully bundled here. If it's also bundled (or unused) in the ${otherEnv}, consider moving it to \u{1B}[33mdevDependencies\u{1B}[0m.`);
+			}
+			if (suggestions.length > 0) {
+				console.log(`\n   \u{1B}[1m${label} Suggestions:\u{1B}[0m`);
+				for (const s of suggestions) console.log(`   ${s}`);
 			}
 		},
 		closeBundle: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vike-lite",
-  "version": "1.17.2",
+  "version": "1.17.4",
   "license": "MIT",
   "repository": {
     "type": "git",