Skip to content

Remove unused npm dependencies: @netlify/blobs and fflate#3889

Open
Copilot wants to merge 2 commits intomainfrom
copilot/remove-unused-npm-dependencies-one-more-time
Open

Remove unused npm dependencies: @netlify/blobs and fflate#3889
Copilot wants to merge 2 commits intomainfrom
copilot/remove-unused-npm-dependencies-one-more-time

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 30, 2026

Auto-QA flagged 5 potentially unused dependencies. Investigation found 3 are legitimately required; 2 have no usage anywhere in the codebase and are safe to drop.

Dependency audit results

Package Action Reason
@netlify/blobs Removed No imports in src/
fflate Removed No imports in src/; transitive dependents bundle it themselves
react-is Kept Peer dep required by recharts at build time
sucrase Kept Dynamic import in lib/dynamic-cards/compiler.ts
@sqlite.org/sqlite-wasm Kept Dynamic import in lib/cache/worker.ts

The Auto-QA scan missed the last two because they use await import(...) syntax rather than static top-level imports.


Changes Made

  • Removed @netlify/blobs from web/package.json
  • Removed fflate from web/package.json

Checklist

Please ensure the following before submitting your PR:

  • I used a coding agent (Claude Code, Copilot, Gemini, or Codex) to generate/review this code
  • I have reviewed the project's contribution guidelines
  • New cards target console-marketplace, not this repo
  • isDemoData is wired correctly (cards show Demo badge when using demo data)
  • I have written unit tests for the changes (if applicable)
  • I have tested the changes locally and ensured they work as expected
  • All commits are signed with DCO (git commit -s)

Screenshots or Logs (if applicable)

Build passes cleanly after removal (tsc -b && vite build ✓).


👀 Reviewer Notes

react-is looks unused by source code but is required by recharts — removing it breaks the Vite/Rollup build with an unresolved import error. Keep it.


💬 Send tasks to Copilot coding agent from Slack and Teams to turn conversations into code. Copilot posts an update in your thread when it's finished.

@kubestellar-prow kubestellar-prow bot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. dco-signoff: no Indicates the PR's author has not signed the DCO. labels Mar 30, 2026
Copilot AI linked an issue Mar 30, 2026 that may be closed by this pull request
@netlify
Copy link
Copy Markdown

netlify bot commented Mar 30, 2026

Deploy Preview for kubestellarconsole ready!

Name Link
🔨 Latest commit 35603e7
🔍 Latest deploy log https://app.netlify.com/projects/kubestellarconsole/deploys/69c9dd02d063b00008a57d50
😎 Deploy Preview https://deploy-preview-3889.console-deploy-preview.kubestellar.io
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@kubestellar-prow kubestellar-prow bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Mar 30, 2026
@github-actions github-actions bot added copilot and removed dco-signoff: no Indicates the PR's author has not signed the DCO. labels Mar 30, 2026
@github-actions
Copy link
Copy Markdown
Contributor

👋 Hey @Copilot — thanks for opening this PR!

🤖 This project is developed exclusively using AI coding assistants.

Please do not attempt to code anything for this project manually.
All contributions should be authored using an AI coding tool such as:

This ensures consistency in code style, architecture patterns, test coverage,
and commit quality across the entire codebase.


This is an automated message.

@github-actions github-actions bot added the dco-signoff: yes Indicates the PR's author has signed the DCO. label Mar 30, 2026
@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 30, 2026

❌ PR Title Verification Failed

Your PR title does not follow the required format.

Current title: Remove unused npm dependencies: @netlify/blobs and fflate

Required Format

PR titles must start with one of these emoji prefixes:

Emoji Meaning
⚠️ Breaking change
Non-breaking feature
🐛 Patch fix / Bug fix
📖 Documentation
🚀 Release
🌱 Infra/Tests/Other

How to Fix

Edit your PR title to start with the appropriate emoji. For example:

  • ✨ Add new feature for user authentication
  • 🐛 Fix crash when loading empty config
  • 📖 Update installation guide

You can edit the title by clicking the Edit button next to your PR title.


This comment was automatically posted by the PR Title Verifier workflow.

Signed-off-by: copilot <copilot@github.com>

Agent-Logs-Url: https://github.com/kubestellar/console/sessions/2159a82c-bbb7-4331-9f32-1596307a3a24

Co-authored-by: clubanderson <407614+clubanderson@users.noreply.github.com>
@kubestellar-prow kubestellar-prow bot added the dco-signoff: no Indicates the PR's author has not signed the DCO. label Mar 30, 2026
@kubestellar-prow
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from clubanderson. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubestellar-prow kubestellar-prow bot removed the dco-signoff: yes Indicates the PR's author has signed the DCO. label Mar 30, 2026
@kubestellar-prow
Copy link
Copy Markdown
Contributor

Thanks for your pull request. Before we can look at it, you'll need to add a 'DCO signoff' to your commits.

📝 Please follow instructions in the contributing guide to update your commits with the DCO

Full details of the Developer Certificate of Origin can be found at developercertificate.org.

The list of commits missing DCO signoff:

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@github-actions github-actions bot removed the dco-signoff: no Indicates the PR's author has not signed the DCO. label Mar 30, 2026
@kubestellar-prow kubestellar-prow bot added size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Mar 30, 2026
@github-actions github-actions bot added the dco-signoff: yes Indicates the PR's author has signed the DCO. label Mar 30, 2026
Copilot AI changed the title [WIP] Remove potentially unused npm dependencies Remove unused npm dependencies: @netlify/blobs and fflate Mar 30, 2026
Copilot AI requested a review from clubanderson March 30, 2026 02:18
@clubanderson clubanderson marked this pull request as ready for review March 30, 2026 02:21
Copilot AI review requested due to automatic review settings March 30, 2026 02:21
@clubanderson clubanderson removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Mar 30, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Removes two npm dependencies from the web/ frontend package that were flagged as unused, reducing dependency surface area and transitive installs.

Changes:

  • Removed @netlify/blobs from web/package.json and pruned its transitive dependencies from web/package-lock.json.
  • Removed fflate from web/package.json (while leaving any transitive fflate dependencies intact in the lockfile).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File Description
web/package.json Drops @netlify/blobs and fflate from direct dependencies.
web/package-lock.json Updates the lockfile to reflect the removed direct deps and prunes now-unneeded transitive packages.
Files not reviewed (1)
  • web/package-lock.json: Language not supported

Comment on lines 46 to 50
"@dnd-kit/core": "^6.3.1",
"@dnd-kit/sortable": "^10.0.0",
"@dnd-kit/utilities": "^3.2.2",
"@netlify/blobs": "^10.7.4",
"@react-three/drei": "^9.122.0",
"@react-three/fiber": "^8.17.10",
Copy link

Copilot AI Mar 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description/body should start with Fixes #<issue-number> so GitHub can automatically link/close the tracked issue when this PR is merged (project workflow requirement).

Copilot uses AI. Check for mistakes.
@clubanderson
Copy link
Copy Markdown
Collaborator

🔄 Auto-Applying Copilot Code Review

Copilot code review found 0 code suggestion(s) and 1 general comment(s).

Also address these general comments:

  • web/package.json (line 50): The PR description/body should start with Fixes #<issue-number> so GitHub can automatically link/close the tracked iss

Push all fixes in a single commit. Run cd web && npm run build && npm run lint before committing.


Auto-generated by copilot-review-apply workflow.

@github-actions github-actions bot mentioned this pull request Mar 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

copilot dco-signoff: yes Indicates the PR's author has signed the DCO. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Auto-QA] Potentially unused npm dependencies

3 participants