Replace Lodash with Smaller Modular Packages for Improved Performance and to remove security vulnerabilities

[prashantswami]

Summary:

This PR replaces the use of the full Lodash library with smaller, modular Lodash packages. The goal is to optimize our application by reducing its bundle size, improving load times, and ensuring more efficient dependency management.

Details:

• Identified and replaced the following Lodash functions with their corresponding smaller packages:
  • _.get -> lodash.get
  • _.filter -> lodash.filter
  • _.last -> lodash.last
  • _.find -> lodash.find
  • _.isempty -> lodash.isempty
  • _.values -> lodash.values
• Updated import statements across the codebase to reflect these changes.
• Uninstalled the main Lodash package.

Benefits:

1. Reduced Bundle Size: By importing only the specific functions we need, we significantly reduce the overall size of our application's bundle.
2. Improved Load Times: Smaller bundles result in faster load times, enhancing the user experience, especially for users with slower network connections.
3. Better Performance: Less code to parse and execute can lead to performance improvements in the application.
4. Efficient Dependency Management: Using only necessary parts of a library promotes more efficient and maintainable code.

Security Concern:

We do use this package and blackduck (security scan) has identified issues in some of the files of loadsh.

• Future development should follow this pattern by avoiding the inclusion of large libraries when only specific functions are needed. This practice will help maintain optimal performance and keep our codebase lean.

Checklist

• npm test passes and has 100% coverage
• Update readme - NA

[prashantswami]

@seppevs Can we get this in as soon as possible. We are using this package and loadsh has security vulnerabilities.

Let me know if you need any help in this.

[prashantswami]

@seppevs can we get this in?

[theogravity]

what is this strange package? I don't see it used anywhere

[prashantswami]

Great observation. Let me correct this

[theogravity]

I patched in your PR minus the i package into my fork (which also has way more features than this lib):

https://github.com/theogravity/migrate-mongo-alt