remove outdated deps

[owlstronaut]

• feat: use node:crypto instead of imurmurhash
• deps: remove imurmurhash

[wraithgar]

iirc imurmurhash was picked for performance reasons

This version works significantly faster than the non-incremental version if you need to hash many small strings into a single hash

We may want to do a quick benchmark to make sure we're not getting wildly out of frame here.

[owlstronaut]

That sounds like a fun experiment :)

[owlstronaut]

@wraithgar

I ran some benchmarks on this. imurmurhash is faster, but the difference is negligible:

• A single getTmpname hash takes ~0.7 µs with crypto.sha1 vs ~0.14 µs with imurmurhash
• A single fs.writeFileSync takes ~500 µs so the hash is 0.1% of the actual write operation either way
• In the npm CLI, write-file-atomic is only used transitively through bin-links (in fix-bin.js), and only fires when a bin script has Windows \r\n line endings, a rare edge case.

For unique-slug (which I'd also like to make this change in), cacache calls it once per content write. Even on a large install with 1,000 packages, the total
difference across the entire operation would be ~0.5 ms, completely lost in the noise of network and disk I/O.

I think using this hash originally was a hobbyist optimization

[wraithgar]

nit: this is a fix not a feat imvhmo