chore(cli): switch to tinyglobby

[benmccann]

https://npmgraph.js.org/?q=fast-glob - 17 dependencies
https://npmgraph.js.org/?q=tinyglobby - 2 dependencies

[changeset-bot]

🦋 Changeset detected

Latest commit: 32271ef

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 1 package

Name	Type
@swc/cli	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[CLAassistant]

All committers have signed the CLA.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​swc/​cli@​0.7.7

View full report

[benmccann]

@kdy1 any chance you might be able to take a look at this? thanks!

[kdy1]

I don’t think this changes worth

[benmccann]

It's ultimately your decision, but just to share some more info, other packages that have adopted tinyglobby include vite, pnpm, node-gyp, copy-webpack-plugin, storybook, nuxt, astro, and more.

fast-glob consists of 18 packages by 12 maintainers with an install size of 513KB. In comparison, tinyglobby consists of 3 packages by 6 maintainers with an install size of 162KB. Fewer packages and people with access to publish those packages means less supply chain risk.

[kdy1]

Can you look at CI failures?

[benmccann]

@kdy1 it's passing the CI now. it seems it was a problem regarding an outdated version of pnpm

[kdy1]

Thank you!