Remove unused utility dependencies

[rak-phillip]

There are several utility packages have no imports in the codebase and can be removed.

Packages to remove

• jsdiff
• url-parse
• d3-selection
• shell-quote

Acceptance criteria

• All packages removed from package.json and shell/package.json
• CI passes all gates

[github-actions]

🎯 Agentic Issue Triage

This is a sub-task of the dependency cleanup epic #17622. It asks for the removal of three utility packages from package.json that have no source imports in the codebase: d3-selection, url-parse, and shell-quote. Verification confirms zero usage across .ts, .js, and .vue files.

📋 Summary & Context

Type: Maintenance / dependency cleanup
Priority: Normal (p2) — no runtime impact, reduces install footprint and dependency surface
Parent epic: #17622 — Remove unused and misplaced dependencies

Packages targeted

Package	Version in package.json	Source imports found
d3-selection	present	❌ None
url-parse	present	❌ None
shell-quote	present	❌ None

Note: d3 (the full D3 bundle) IS used — only the standalone d3-selection sub-package is redundant (it is already bundled within d3).

🔧 Implementation Steps

• Remove d3-selection, url-parse, and shell-quote from dependencies in package.json
• Run yarn install --frozen-lockfile — this will fail if lockfile is out of sync; if so, regenerate with yarn install and commit the updated yarn.lock
• Run yarn build to confirm the build succeeds without these packages
• Run yarn test:ci to confirm unit tests still pass
• Open a PR referencing this issue (Fixes #17626) and the parent epic (Part of #17622)

🐛 Debugging / Verification Strategy

Before removing, double-check with:

# Confirm no direct imports
grep -r "d3-selection\|url-parse\|shell-quote" --include="*.ts" --include="*.js" --include="*.vue" . | grep -v node_modules

# Confirm d3-selection is a sub-package already included via the main d3 dep
node -e "require('d3'); console.log('d3 loaded ok')"

If the build fails after removal, search for any dynamic require() or webpack aliases that might reference these packages indirectly.

📚 Relevant Resources

• npm depcheck — automated unused dependency scanner (useful for future audits)
• d3 bundle vs sub-packages — explains how d3 already re-exports all sub-packages including d3-selection
• [url-parse security advisories]((security.snyk.io/redacted) — this package has had several CVEs; removing it is a security win too
• Parent epic: #17622

Generated by Agentic Triage for issue #17626 · ● 204.6K · ◷

[github-actions]

🤖 Issue grooming analysis

This issue meets all four primary grooming criteria and is ready for triage.

Criterion	Status	Notes
Clear Problem Statement	✅	Title and description clearly explain that listed packages have no imports and should be removed from the dependency tree
Acceptance Criteria	✅	Checklist items are concrete and testable: remove packages from package.json and shell/package.json, CI passes all gates
Technical Details	✅	Specific package names identified (jsdiff, url-parse, d3-selection, shell-quote) with target files
Reproducibility	✅	Tech-debt task with clearly enumerated scope — no reproduction steps required

This analysis was generated automatically based on the repository's grooming checklist.

Generated by Daily Issue Grooming · ● 584.1K · ◷