Move away from colors.js

[mufty]

Please swap the colors.js library for something else it's not safe to use with the dev behind it.

See: https://twitter.com/BleepinComputer/status/1480182019854327808?s=20

[ryust-ax]

I tracked down recently updated forks and found two promising future-maintainer candidates:

• https://github.com/euberdeveloper/colors.js
• https://github.com/mobilehero-archive/titanium-colors

Incidentally, good tool for this was https://techgaun.github.io/active-forks/index.htm

[benlesh]

Interesting. Is this causing us issues anywhere? I haven't seen any problems yet.

[kwonoj]

we have pkglock so not affected. actually I don't know why we have it as dep even.

[benlesh]

it's a dependency of validate-commit-msg. My guess is it was updated at some point to solve some dep conflict or maybe something with dependabot, and that added it as a dev dependency for us.

[benlesh]

[kwonoj]

@benlesh I'm fine with transitive dep. What I meant is why we have it as direct dep: https://github.com/ReactiveX/rxjs/blob/master/package.json#L161-L162

[kwonoj]

..and we have color, colors? 🤔