Esbuild (#10940)

* ci: add minimum GitHub token permissions for workflows
Signed-off-by: Ashish Kurmi <akurmi@stepsecurity.io>

* feat: use esbuild for minification

Co-authored-by: Ashish Kurmi <akurmi@stepsecurity.io>

install/package.json

@@ -58,6 +58,7 @@
         "csurf": "1.11.0",
         "daemon": "1.1.0",
         "diff": "5.1.0",
+        "esbuild": "0.15.10",
         "express": "4.18.1",
         "express-session": "1.17.3",
         "express-useragent": "1.0.15",
@@ -129,6 +130,7 @@
         "sortablejs": "1.15.0",
         "spdx-license-list": "6.6.0",
         "spider-detector": "2.0.0",
+        "terser-webpack-plugin": "5.3.6",
         "textcomplete": "0.18.2",
         "textcomplete.contenteditable": "0.1.1",
         "timeago": "1.6.7",

webpack.prod.js

@@ -1,8 +1,19 @@
 'use strict';
 
 const { merge } = require('webpack-merge');
+const TerserPlugin = require('terser-webpack-plugin');
+
 const common = require('./webpack.common');
 
 module.exports = merge(common, {
 	mode: 'production',
+	optimization: {
+		minimize: true,
+		minimizer: [
+			new TerserPlugin({
+				minify: TerserPlugin.esbuildMinify,
+				terserOptions: {},
+			}),
+		],
+	},
 });