DISCOVERY: Identifying and Managing Unnecessary or Duplicated Dependencies

[codecovdesign]

Problem to solve

Particularly in projects with extensive dependencies, it becomes increasingly challenging to manage and optimize these dependencies efficiently. Two specific problems frequently arise:

• Duplicate dependencies: projects often accumulate duplicate dependencies over time. These can occur due to various reasons, such as different team members adding the same dependency for different features or through nested dependencies in package management. This duplication unnecessarily inflates bundle sizes, impacting application performance and load times.
• Replaceable dependencies: as projects evolve, some dependencies may become obsolete or less efficient than newer alternatives. However, identifying these replaceable dependencies, evaluating alternatives, and understanding the impact of replacement on the project can be complex and time-consuming.

When I am reviewing my project's dependencies, I want to easily identify any duplicate dependencies and understand if there are more efficient alternatives to my current dependencies, so I can optimize my project's performance and maintainability by reducing bloat and ensuring the use of the most efficient libraries available.

GH-1420.mp4

Discovery exploration

• Dependency Analysis: implement a feature that scans the project's dependencies to identify any duplicates or dependencies that are no longer used.
• Impact estimation: offer insights into how each dependency (or its removal) impacts the bundle size.
• Optimization suggestions: provide actionable recommendations for removing or consolidating dependencies without sacrificing functionality.

[rohan-at-sentry]

my feeling is that this is better suited to a "bundle management" use case vs reporting and gating commits based on changes in overall bundle size or some deps

[codecovdesign]

related feedback to consider from slack @armen G.:

I think it's even more important to show it when we know dependency trees are changed. Customers may be adding a ton load of code when adding a single package