[FEATURE] Reduce number of dependencies and install size (v2.17 needs 1700 dependencies, takes 1.7Gb of space)

[peitschie]

Why do we need this improvement?

The @asyncapi/cli tool (v2.17.0) requires 1700 additional packages and occupies about 1.7Gb of space on install.

This provides a significant barrier to use within more controlled environments, as the auditing and review of the dependencies is completely impractical.

It also has a significant impact on install size, application performance, and even tool choice.

For example, I'm unable to install this on some machines as they simply don't have enough RAM available to complete the installation without special overrides.

How will this change help?

Reducing the number of dependencies significantly would make this tool a much more attractive option, and likely will reduce the maintenance burden of keeping the dependencies up to date.

It would also increase accessibility to the package.

Screenshots

See attachment for the current result of running npm install @asyncapi/cli in a completely clean directory:
dependencies.txt

How could it be implemented/designed?

Some related discussion seems to be in #1657, #1707 and #1703 (these all list identifying and removing redundant dependencies and imports)

1. Review direct dependencies and determine which are not providing significant features and might be suitable to inline/reimplement.
2. Review heavy-weight dependencies to evaluate alternative tools or alternative approaches that don't require the massive dependency tree

🚧 Breaking changes

Yes

👀 Have you checked for similar open issues?

• I checked and didn't find a similar issue

🏢 Have you read the Contributing Guidelines?

• I have read the Contributing Guidelines

Are you willing to work on this issue?

Yes I am willing to submit a PR!

[github-actions]

Welcome to AsyncAPI. Thanks a lot for reporting your first issue. Please check out our contributors guide and the instructions about a basic recommended setup useful for opening a pull request.
Keep in mind there are also other channels you can use to interact with AsyncAPI community. For more details check out this issue.

[lmussier]

Double down on this one: 2.16.7 is reported to be 367MB on docker hub.
2.16.8 is almost three times heavier!

[neoandmatrix]

Hey @Shurtu-gal was investigating this one and as per above comment comparing the changes between the versions mentioned above the i.e 2.16.7 and 2.16.8 the studio's new version which uses next.js was implemented, hence i believe a seperate issue there needs to open for discussion on reducing size if possible, WDYT or something else can also be done?

[lfvJonas]

This is a major concern for us as well — not just due to size, but security. The large number of dependencies makes auditing nearly impossible in controlled environments. Reducing the dependency tree would greatly improve usability and trust.

[Shurtu-gal]

Could you generate a list dependency sizes @neoandmatrix

[neoandmatrix]

Could you generate a list dependency sizes @neoandmatrix

Okay, will update.

[neoandmatrix]

Main root

Inside asyncapi

inside studio folder

inside build folder

@Shurtu-gal above are the dependency size for the largest modules.

[Shurtu-gal]

Thanks, your earlier suggestion makes sense then. Could you open an issue in studio with this as context.

Can add this link there as well: https://nextjs.org/docs/app/guides/package-bundling

[neoandmatrix]

Thanks, your earlier suggestion makes sense then. Could you open an issue in studio with this as context.

Can add this link there as well: https://nextjs.org/docs/app/guides/package-bundling

Sure.

[neoandmatrix]

Hey @Shurtu-gal was looking on this further and currently the cli when installed through npm is 1.1Gb

Here from last screenshot its visible that the studio's @next and next and global @next and next are redundant and present twice which ideally should be used from global only.

WDYT as expect these i believe rest of the dependencies are good are not redundant.