webdetect: drop service dependency reporting

webOS JS services bundle everything (no on-device npm); package.json only
carries main/name. Stop parsing and reporting `dependencies`, which was
misleading. Native services are unaffected.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Mariotaku

common/webdetect/src/lib.rs

@@ -97,8 +97,6 @@ impl FrameworkKind {
 /// reliably, so it is not trusted as a runtime requirement.
 #[derive(Debug, Clone, Default)]
 pub struct ServiceRuntimeDetection {
-    /// `dependencies` as (name, version-spec) pairs, sorted by name.
-    pub dependencies: Vec<(String, String)>,
     /// The `main` entry point, if declared.
     pub main: Option<String>,
     /// Minimum ES level the service's own code requires — a code-derived,

common/webdetect/src/service.rs

@@ -1,6 +1,5 @@
 //! Node.js service runtime detection from a bundled `package.json`.
 
-use std::collections::BTreeMap;
 use std::fs;
 use std::path::Path;
 
@@ -13,12 +12,10 @@ use crate::ServiceRuntimeDetection;
 struct PackageJson {
     #[serde(default)]
     main: Option<String>,
-    #[serde(default)]
-    dependencies: BTreeMap<String, String>,
 }
 
-/// Inspect a service directory: read `package.json` for dependencies/entry
-/// point, and analyze the service's own `.js` code for its ES language level
+/// Inspect a service directory: read `package.json` for the entry point, and
+/// analyze the service's own `.js` code for its ES language level
 /// (checked against the firmware's Node.js) and runtime-API usage.
 ///
 /// Note: `engines.node` is deliberately NOT read — webOS services don't set it
@@ -33,7 +30,6 @@ pub fn detect_service_runtime(dir: &Path) -> ServiceRuntimeDetection {
     let analysis = js::analyze_js(&sources, false);
 
     ServiceRuntimeDetection {
-        dependencies: pkg.dependencies.into_iter().collect(),
         main: pkg.main,
         es_level: analysis.es_level,
         es_features: analysis.es_features,
@@ -55,22 +51,18 @@ mod tests {
     }
 
     #[test]
-    fn parses_main_and_deps() {
+    fn parses_main() {
         let dir = write_pkg(
-            r#"{ "main": "service.js", "engines": { "node": ">=12.0.0" },
-                "dependencies": { "express": "^4.18.0", "lodash": "4.17.21" } }"#,
+            r#"{ "main": "service.js", "name": "com.example.app.service" }"#,
         );
         let d = detect_service_runtime(dir.path());
         assert_eq!(d.main.as_deref(), Some("service.js"));
-        assert_eq!(d.dependencies.len(), 2);
-        assert_eq!(d.dependencies[0].0, "express");
     }
 
     #[test]
     fn missing_package_json_is_empty() {
         let dir = tempfile::TempDir::new().unwrap();
         let d = detect_service_runtime(dir.path());
-        assert!(d.dependencies.is_empty());
         assert!(d.main.is_none());
     }
 }

packages/ipk-verify/src/main.rs

@@ -366,8 +366,8 @@ fn es_support_title(level: Option<webdetect_lib::EsLevel>) -> String {
     }
 }
 
-/// Render `--details` for a non-native component: syntax-feature / dependency
-/// evidence, then any firmware on which it is incompatible and why.
+/// Render `--details` for a non-native component: syntax-feature evidence,
+/// then any firmware on which it is incompatible and why.
 fn print_detection_details(
     results: &Vec<(&Firmware, &ComponentVerifyResult)>,
     out: &mut Box<dyn ReportOutput>,
@@ -399,9 +399,6 @@ fn print_detection_details(
                 out.write_fmt(format_args!("* Language features used: {}\n", feats.join(", ")))?;
             }
             print_api_details(&svc.es_apis, &svc.polyfills, out)?;
-            for (name, ver) in &svc.dependencies {
-                out.write_fmt(format_args!("* Dependency: {name} {ver}\n"))?;
-            }
         }
     }
     // Report incompatible firmwares with their reason (gating verdicts only).
@@ -490,7 +487,7 @@ fn describe_web(web: &WebAppDetection) -> String {
 }
 
 /// One-line description of the detected JS service: its ES language level
-/// (checked against Node.js) and dependency count.
+/// (checked against Node.js).
 fn describe_service(svc: &ServiceRuntimeDetection) -> String {
     let mut parts: Vec<String> = vec!["Node.js service".to_string()];
     if let Some(level) = svc.es_level {
@@ -499,11 +496,6 @@ fn describe_service(svc: &ServiceRuntimeDetection) -> String {
     if !svc.polyfills.is_empty() {
         parts.push(format!("bundles polyfills ({})", svc.polyfills.join(", ")));
     }
-    match svc.dependencies.len() {
-        0 => {}
-        1 => parts.push("1 dependency".to_string()),
-        n => parts.push(format!("{n} dependencies")),
-    }
     parts.join("; ")
 }
 

packages/ipk-verify/tests/detection.rs

@@ -51,7 +51,6 @@ fn node_service(id: &str, es: EsLevel) -> Component<ServiceInfo> {
             engine: Some("node".to_string()),
             executable: None,
             runtime: Some(ServiceRuntimeDetection {
-                dependencies: vec![("express".to_string(), "^4.18.0".to_string())],
                 main: None,
                 es_level: Some(es),
                 es_features: vec![],