stores-com / bloodhound / 30507354936 / 1

86%

main: 88%

Pull #175

github

chore: drop xml2js, which nothing has required since the USPS JSON migration

Audited every declared dependency against actual `require()` calls. xml2js is the only
dead one: its sole mention anywhere outside node_modules is its own package.json line.
The last XML consumer was the legacy USPS API, and carriers/usps.js now only carries a
comment referring to it — the v3r2 JSON API arrived in 3.3.0 via @stores.com/usps.

The other four asked about are all still load-bearing:

  memory-cache      carriers/fedEx.js — caches the OAuth token
  moment-timezone   dhl.js, dhlEcommerceSolutions.js, pitneyBowes.js, usps.js
  pitney-bowes      carriers/pitneyBowes.js
  async             six carriers, for async.retry and async.mapLimit

Scoping the negative claim: I grepped carriers/, util/, index.js and test/ for
require('xml2js'), for dynamic require patterns, and for parseString/Builder usage.
Nothing. I did not audit transitive dependents, which are free to depend on it
themselves.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

312 of 373 branches covered (83.65%)

Branch coverage included in aggregate %.

1494 of 1715 relevant lines covered (87.11%)

17.18 hits per line