[FR] a way to ignore packages

[farfromrefug]

Right now in npm or yarn it's impossible to ignore packages.
This makes it very difficult to package small node_modules folder.

Let me explain:
In my apps i use many packages, some for which i need to keep optionalDependencies like noble. Some i dont want and which makes the node_modules folder a lot bigger, like log4js optional dependencies.

The consequence of that is that i can't use --ignore-optional.

So for example if i want, after a yarn install --flat --prod cleanup and remove log4js optionalDependencies, i simply cant! I would need to get the dependency tree for all the optional modules, make sure there are not used by anyone else, and then remove the folders manualy.

The best solution, even if not perfect, would be to be able in the package.json to add "ignored" packages. Those would be ignored in yarn install and thus would not alter the dependency tree.
I would then simply have to add all log4js optional dependencies in my ignored section.

Would that be possible?

[tvald]

I second this request, both to manage package size and also to suppress misbehaving optional packages.

The Problem
To elaborate, a package we rely on (good-package) has an optional dependency (bad-package) with unmanaged dependencies. That is, bad-package requires you to separately download and build some libfoo before running yarn install, which we never do because bad-package isn't useful to us. Unfortunately, this causes yarn install to always spew a lengthy warning when bad-package fails to install.

This optional dependency is obviously misbehaving, but we can't fix it, so instead we'd like to ignore it. We can't just use --ignore-optional everywhere, because we do need some optional dependencies like fsevents.

The Suggestion
I suggest the repeatable flag --suppress-optional <package-name>, which would cause <package-name> to be ignored if <package-name> is a purely optional dependency, and would cause an error if <package-name> is actually required.

(For reference, see /pull/5059 for discussion of when a package is truly optional...)

[tvald]

Also, could we edit the title for clarity: Add way to ignore individual optional packages?

[farfromrefug]

@tvald i am not sure about the title cause maybe you you want to ignore non optional packages too!

[tvald]

If a non-optional package were suppressed, that would presumably break all packages which directly or transitively depend on it, including the top-level package.

It would be great if you can illustrate a case where a non-optional package can be suppressed without breaking things. Otherwise, I'd prefer the smaller and safer capability to suppress only transitively optional packages.

Do note that a required dependency of an optional dependency is considered optional, unless referenced elsewhere (again, transitively) as required.

[farfromrefug]

@tvald node-pre-gyp is one simple case. it comes with a lot of unecessary data for production.
I already ignore it by removing it. And in my package.json i include my own package to replace it which only include what s necessary for production.

[tvald]

That's far more complicated, then. I'll split off a separate feature request if that's the kind of scenario you want to support with this issue. /shrug

[zevdg]

Another specific use case for this feature was raised in firebase/firebase-js-sdk#546 (comment)

Namely, firestore is an isomorphic package that includes large platform specific dependencies. If you are using their package for a website, it would be nice to able to tell yarn that it can ignore the dependencies that aren't specific to that platform.

[petrgazarov]

Another scenario where this can help is with Node.js usage on AWS lambda. Lambda has a 50MB code limit. Many packages (including one created by our team, for example) tend to include a large dependency tree. To fit into the space limit, one would tell yarn to ignore certain packages, assuming you know what you are doing and are ignoring only dependencies that you are not using in your code.

[aneilbaboo]

Another use case - fsevents:

• Unsupported platform for fsevents@1.0.14: wanted {"os":"darwin","arch":"any"} (current: {"os":"win32","arch":"x64"}) angular/angular#13935
• fsevents doesn't install on linux google/web-starter-kit#796
• fsevents@1.1.3: The platform "linux" is incompatible with this module 0xProject/0x-monorepo#473

A yarn.lock file generated on a Mac will include this dependency, so when code is deployed to a CI system running ubuntu, yarn finishes with an exit code 1. It would be nice to ignore this dependency in a particular environment.

[Et0san]

Still not a thing? I'm having problems rn with chromedriver getting overridden while bootstrapping, and I don't want that because it breaks while trying to download the .zip (behind corp proxy). So I want to tell yarn not to touch chromedriver, so it does not override my local modifications that should make it work -_- (I mean, I read through chromedriver/install.js, and I did what it does by myself in like twenty seconds...)
Please tell me if you have a workaround, though

[GongT]

Some package have multiple function, and if I only use part of them, then some required dependencies can suppressed.
Currently we can use tools like rollup to do this After install.

(🤔 ok, I think this is rare)

I'm using gulp-sass, it's default to use node-sass, also can config to use sass instead.
But they write node-sass in dependencies... 💢