Dependency audit by timotheeguerin · Pull Request #10239 · microsoft/typespec

timotheeguerin · 2026-04-01T16:12:50Z

Had copilot do an audit of all our dependencies to see which ones were not used, which ones should use a more modern or built in alternative.

Removed unused dependencies

Dependency	Packages affected	Reason
`json5`	`internal-build-utils`	Unused
`grammarkdown`	`compiler`	Unused
`date-fns`	`website`	Unused

Replaced with built in

Dependency	Packages affected	Reason
`c8`	~25 packages	Unused; coverage handled by `@vitest/coverage-v8`
`deep-equal` / `@types/deep-equal`	`spec-api`, `spector`, `http-specs`	Replaced with Node.js built-in `isDeepStrictEqual` from `node:util`
`body-parser` / `@types/body-parser`	`spector`	Replaced with Express 5 built-ins (`express.json()`, `express.urlencoded()`, etc.)
`fs-extra`	`http-server-csharp`, `http-server-js`, `http-client-js`	Replaced with `fs/promises` (`access`, `copyFile`, `mkdir`, etc.)

Modernized dependencies

Old	New	Packages affected	Notes
`onigasm`	`vscode-oniguruma`	`tmlanguage-generator`	Updated WASM loading and regex validation logic
`inquirer`	`@inquirer/prompts`	`http-server-csharp`, `http-server-js`, `http-client-js`	Switched to modern modular `select()` API
`rimraf`	`fs.rm()`	`typespec-vscode`	Uses `rm(dir, { recursive: true, force: true })`

Code changes

Emit scenario scripts in http-server-csharp, http-server-js, and http-client-js updated to use native fs/promises and @inquirer/prompts
A local pathExists() helper added to replace the fs-extra version
tmlanguage-generator migrated from onigasm to vscode-oniguruma, including updated WASM loading and regex validation logic (also removed a workaround for an onigasm bug)
@typespec/spector mock API server replaced bodyParser.* calls with express.* equivalents
@typespec/spec-api and @typespec/spector replaced all deepEqual(a, b, { strict: true }) calls with isDeepStrictEqual(a, b)
pnpm catalog and lockfile cleaned up, removing many transitive dependencies

pkg-pr-new · 2026-04-01T16:15:01Z

Open in StackBlitz

@typespec/asset-emitter

npm i https://pkg.pr.new/microsoft/typespec/@typespec/asset-emitter@10239

@typespec/bundler

npm i https://pkg.pr.new/microsoft/typespec/@typespec/bundler@10239

@typespec/compiler

npm i https://pkg.pr.new/microsoft/typespec/@typespec/compiler@10239

@typespec/eslint-plugin

npm i https://pkg.pr.new/microsoft/typespec/@typespec/eslint-plugin@10239

@typespec/events

npm i https://pkg.pr.new/microsoft/typespec/@typespec/events@10239

@typespec/html-program-viewer

npm i https://pkg.pr.new/microsoft/typespec/@typespec/html-program-viewer@10239

@typespec/http

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http@10239

@typespec/http-client-js

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http-client-js@10239

@typespec/http-server-csharp

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http-server-csharp@10239

@typespec/http-server-js

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http-server-js@10239

@typespec/http-specs

npm i https://pkg.pr.new/microsoft/typespec/@typespec/http-specs@10239

@typespec/internal-build-utils

npm i https://pkg.pr.new/microsoft/typespec/@typespec/internal-build-utils@10239

@typespec/json-schema

npm i https://pkg.pr.new/microsoft/typespec/@typespec/json-schema@10239

@typespec/library-linter

npm i https://pkg.pr.new/microsoft/typespec/@typespec/library-linter@10239

@typespec/openapi

npm i https://pkg.pr.new/microsoft/typespec/@typespec/openapi@10239

@typespec/openapi3

npm i https://pkg.pr.new/microsoft/typespec/@typespec/openapi3@10239

@typespec/playground

npm i https://pkg.pr.new/microsoft/typespec/@typespec/playground@10239

@typespec/protobuf

npm i https://pkg.pr.new/microsoft/typespec/@typespec/protobuf@10239

@typespec/rest

npm i https://pkg.pr.new/microsoft/typespec/@typespec/rest@10239

@typespec/spec-api

npm i https://pkg.pr.new/microsoft/typespec/@typespec/spec-api@10239

@typespec/spector

npm i https://pkg.pr.new/microsoft/typespec/@typespec/spector@10239

@typespec/sse

npm i https://pkg.pr.new/microsoft/typespec/@typespec/sse@10239

@typespec/streams

npm i https://pkg.pr.new/microsoft/typespec/@typespec/streams@10239

tmlanguage-generator

npm i https://pkg.pr.new/microsoft/typespec/tmlanguage-generator@10239

@typespec/tspd

npm i https://pkg.pr.new/microsoft/typespec/@typespec/tspd@10239

typespec-vscode

npm i https://pkg.pr.new/microsoft/typespec/typespec-vscode@10239

@typespec/versioning

npm i https://pkg.pr.new/microsoft/typespec/@typespec/versioning@10239

@typespec/xml

npm i https://pkg.pr.new/microsoft/typespec/@typespec/xml@10239

commit: 19206f6

github-actions · 2026-04-01T16:17:49Z

All changed packages have been documented.

✅ @typespec/asset-emitter
✅ @typespec/bundler
✅ @typespec/compiler
✅ @typespec/eslint-plugin
✅ @typespec/events
✅ @typespec/html-program-viewer
✅ @typespec/http-client-js
✅ @typespec/http-server-csharp
✅ @typespec/http-server-js
✅ @typespec/http-specs
✅ @typespec/http
✅ @typespec/internal-build-utils
✅ @typespec/json-schema
✅ @typespec/library-linter
✅ @typespec/openapi
✅ @typespec/openapi3
✅ @typespec/playground
✅ @typespec/protobuf
✅ @typespec/rest
✅ @typespec/spec-api
✅ @typespec/spector
✅ @typespec/sse
✅ @typespec/streams
✅ tmlanguage-generator
✅ @typespec/tspd
✅ typespec-vscode
✅ @typespec/versioning
✅ @typespec/xml

Show changes

`@typespec/asset-emitter` - internal ✏️

`@typespec/bundler` - internal ✏️

`@typespec/compiler` - internal ✏️

`@typespec/eslint-plugin` - internal ✏️

`@typespec/events` - internal ✏️

`@typespec/html-program-viewer` - internal ✏️

`@typespec/http-client-js` - internal ✏️

`@typespec/http-server-csharp` - internal ✏️

`@typespec/http-server-js` - internal ✏️

`@typespec/http-specs` - internal ✏️

`@typespec/http` - internal ✏️

`@typespec/internal-build-utils` - internal ✏️

`@typespec/json-schema` - internal ✏️

`@typespec/library-linter` - internal ✏️

`@typespec/openapi` - internal ✏️

`@typespec/openapi3` - internal ✏️

`@typespec/playground` - internal ✏️

`@typespec/protobuf` - internal ✏️

`@typespec/rest` - internal ✏️

`@typespec/spec-api` - internal ✏️

`@typespec/spector` - internal ✏️

`@typespec/sse` - internal ✏️

`@typespec/streams` - internal ✏️

`tmlanguage-generator` - internal ✏️

`@typespec/tspd` - internal ✏️

`typespec-vscode` - internal ✏️

`@typespec/versioning` - internal ✏️

`@typespec/xml` - internal ✏️

azure-sdk · 2026-04-01T16:28:11Z

You can try these changes here

🛝 Playground	🌐 Website	🛝 VSCode Extension

…endency-audit

timotheeguerin added 3 commits April 1, 2026 10:31

dep audit plan

fa3653c

pass 1

70ad4f1

remove c8

38e75a8

remove body parser

0e2bd00

replace unneeded rimraf use

a4dd6f0

microsoft-github-policy-service bot added the spector Issues related to spector and the spec sets label Apr 1, 2026

remove deep equal

db883ac

microsoft-github-policy-service bot added the lib:http-specs For issues/prs related to the @typespec/http-specs package label Apr 1, 2026

remove path-extra

e5a404e

microsoft-github-policy-service bot added the emitter:client:js Issue for the JS client emitter: @typespec/http-client-js label Apr 1, 2026

timotheeguerin added 4 commits April 1, 2026 14:49

migrate inquier

de4960a

migrate onigasm

5744d92

delete plan

c7b04ae

Create dependency-audit-2026-3-1-19-4-24.md

8ccccf0

format

d6dfd57

timotheeguerin marked this pull request as ready for review April 1, 2026 19:40

timotheeguerin requested review from AlitzelMendez, MaryGao, RodgeFu, bterlson, chrisradek, joheredi, lirenhe, markcowl, qiaozha, timovv, witemple-msft and xirzec as code owners April 1, 2026 19:40

timotheeguerin added 5 commits April 1, 2026 16:12

Merge branch 'main' of https://github.com/Microsoft/typespec into dep…

a83b221

…endency-audit

fix merge issue

13dce48

fix

53d9c5e

remove unused xml2js

79fb6a6

format

19206f6

timotheeguerin mentioned this pull request Apr 1, 2026

Dependency audit Azure/typespec-azure#4175

Open

Conversation

timotheeguerin commented Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Removed unused dependencies

Replaced with built in

Modernized dependencies

Code changes

Uh oh!

pkg-pr-new bot commented Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

@typespec/asset-emitter - internal ✏️

@typespec/bundler - internal ✏️

@typespec/compiler - internal ✏️

@typespec/eslint-plugin - internal ✏️

@typespec/events - internal ✏️

@typespec/html-program-viewer - internal ✏️

@typespec/http-client-js - internal ✏️

@typespec/http-server-csharp - internal ✏️

@typespec/http-server-js - internal ✏️

@typespec/http-specs - internal ✏️

@typespec/http - internal ✏️

@typespec/internal-build-utils - internal ✏️

@typespec/json-schema - internal ✏️

@typespec/library-linter - internal ✏️

@typespec/openapi - internal ✏️

@typespec/openapi3 - internal ✏️

@typespec/playground - internal ✏️

@typespec/protobuf - internal ✏️

@typespec/rest - internal ✏️

@typespec/spec-api - internal ✏️

@typespec/spector - internal ✏️

@typespec/sse - internal ✏️

@typespec/streams - internal ✏️

tmlanguage-generator - internal ✏️

@typespec/tspd - internal ✏️

typespec-vscode - internal ✏️

@typespec/versioning - internal ✏️

@typespec/xml - internal ✏️

Uh oh!

azure-sdk commented Apr 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

timotheeguerin commented Apr 1, 2026 •

edited

Loading

pkg-pr-new bot commented Apr 1, 2026 •

edited

Loading

github-actions bot commented Apr 1, 2026 •

edited

Loading

`@typespec/asset-emitter` - internal ✏️

`@typespec/bundler` - internal ✏️

`@typespec/compiler` - internal ✏️

`@typespec/eslint-plugin` - internal ✏️

`@typespec/events` - internal ✏️

`@typespec/html-program-viewer` - internal ✏️

`@typespec/http-client-js` - internal ✏️

`@typespec/http-server-csharp` - internal ✏️

`@typespec/http-server-js` - internal ✏️

`@typespec/http-specs` - internal ✏️

`@typespec/http` - internal ✏️

`@typespec/internal-build-utils` - internal ✏️

`@typespec/json-schema` - internal ✏️

`@typespec/library-linter` - internal ✏️

`@typespec/openapi` - internal ✏️

`@typespec/openapi3` - internal ✏️

`@typespec/playground` - internal ✏️

`@typespec/protobuf` - internal ✏️

`@typespec/rest` - internal ✏️

`@typespec/spec-api` - internal ✏️

`@typespec/spector` - internal ✏️

`@typespec/sse` - internal ✏️

`@typespec/streams` - internal ✏️

`tmlanguage-generator` - internal ✏️

`@typespec/tspd` - internal ✏️

`typespec-vscode` - internal ✏️

`@typespec/versioning` - internal ✏️

`@typespec/xml` - internal ✏️

azure-sdk commented Apr 1, 2026 •

edited

Loading