chore: remove image-size

[ilteoood]

Summary

The image-size package is now read-only on GitHub, and on codeberg has been a while since its last commit.
This PR is to migrate to sharp.

Test plan

[vercel]

@ilteoood is attempting to deploy a commit to the Callstack Team on Vercel.

A member of the Team first needs to authorize it.

[changeset-bot]

🦋 Changeset detected

Latest commit: 0a202a4

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 6 packages

Name	Type
@callstack/repack	Patch
@callstack/repack-plugin-expo-modules	Patch
@callstack/repack-plugin-nativewind	Patch
@callstack/repack-plugin-reanimated	Patch
@callstack/repack-dev-server	Patch
@callstack/repack-init	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[dannyhw]

Firstly thanks for taking the time for opening this pr, appreciate the interest in repack.

I'm concerned that sharp might be a large dependency to add for just image size check?

1. what do we gain by moving to sharp
2. is there some issue with image-size in its current form?

[ilteoood]

Hey @dannyhw, to both I would answer with the following Snyk vulnerability

[dannyhw]

@ilteoood is that not addressed?
As in if we updated to the latest version on the package it also solves the vuln right?

[ilteoood]

@ilteoood is that not addressed?
As in if we updated to the latest version on the package it also solves the vuln right?

Yes, exactly!

[dannyhw]

Im not opposed to a change like this I just think there needs to be a measurable improvement. Of course we need to address the vuln but simpler is usually better i.e whats the downside of just updating the image size version to a non vulnerable one.

I also see that sharp might require us to bump the minimum node version (which may be due but not in a patch)