feat: remove moment dependency

the moment dependency accounts for 59% of the bundle
size of snyk-to-html pacakge and only used for a
simple (and predefined?) formatting option.

source: https://bundlephobia.com/package/[email protected]

package.json

@@ -30,7 +30,6 @@
     "lodash.isempty": "^4.4.0",
     "lodash.orderby": "^4.6.0",
     "marked": "^4.0.12",
-    "moment": "^2.29.4",
     "source-map-support": "^0.5.16",
     "uglify-js": "^3.15.1"
   },

src/lib/dateutil.ts

@@ -0,0 +1,50 @@
+export function formatDateTime(date, format): string {
+    if (!date) {
+        date = new Date();
+    }
+    const day = date.getUTCDate();
+    const ordinalSuffix = getOrdinalSuffix(day);
+    const dayWithSuffix = `${day}${ordinalSuffix}`;
+
+    const hours = date.getUTCHours();
+    const minutes = date.getUTCMinutes();
+    const seconds = date.getUTCSeconds();
+    const ampm = hours >= 12 ? 'pm' : 'am';
+    const formattedHours = hours % 12 || 12;
+
+    const monthNames = [
+        "January", "February", "March", "April",
+        "May", "June", "July", "August",
+        "September", "October", "November", "December"
+    ];
+
+    const replacements = {
+        'MMMM': monthNames[date.getUTCMonth()],
+        'Do': dayWithSuffix,
+        'YYYY': date.getUTCFullYear(),
+        'h': formattedHours,
+        'mm': minutes.toString().padStart(2, '0'),
+        'ss': seconds.toString().padStart(2, '0'),
+        'a': ampm,
+        'z': 'UTC',
+        'Z': '+00:00'
+    };
+
+    return format.replace(/MMMM|Do|YYYY|h|mm|ss|a|z|Z/g, (match) => replacements[match]);
+}
+
+function getOrdinalSuffix(day) {
+    if (day > 3 && day < 21) {
+        return 'th';
+    }
+    switch (day % 10) {
+        case 1:
+            return 'st';
+        case 2:
+            return 'nd';
+        case 3:
+            return 'rd';
+        default:
+            return 'th';
+    }
+}

src/lib/snyk-to-html.ts

@@ -7,12 +7,14 @@ import * as debugModule from 'debug';
 import fs = require('fs');
 import Handlebars = require('handlebars');
 import marked = require('marked');
-import moment = require('moment');
 import path = require('path');
 import { addIssueDataToPatch, getUpgrades, severityMap, IacProjectType } from './vuln';
 import {
   processSourceCode,
 } from './codeutil';
+import { 
+  formatDateTime
+} from './dateutil';
 
 const debug = debugModule('snyk-to-html');
 
@@ -99,7 +101,7 @@ class SnykToHtml {
 export { SnykToHtml };
 
 function metadataForVuln(vuln: any) {
-  let {cveSpaced, cveLineBreaks} = concatenateCVEs(vuln)
+  const {cveSpaced, cveLineBreaks} = concatenateCVEs(vuln)
 
   return {
     id: vuln.id,
@@ -127,7 +129,7 @@ function concatenateCVEs(vuln: any) {
 
   if (vuln.identifiers) {
     vuln.identifiers.CVE.forEach(function(c) {
-      let cveLink = `<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=${c}">${c}</a>`
+      const cveLink = `<a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=${c}">${c}</a>`
       cveSpaced += `${cveLink}&nbsp;`
       cveLineBreaks += `${cveLink}</br>`
     })
@@ -381,7 +383,7 @@ async function readInputFromStdin(): Promise<string> {
 // handlebar helpers
 const hh = {
   markdown: marked.parse,
-  moment: (date, format) => moment.utc(date).format(format),
+  moment: (date, format) => formatDateTime(date, format),
   count: data => data && data.length,
   dump: (data, spacer) => JSON.stringify(data, null, spacer || null),
   // block helpers