chore: switch to tinyglobby

[benmccann]

https://npmgraph.js.org/?q=globby - 23 dependencies
https://npmgraph.js.org/?q=tinyglobby - 2 dependencies

[floydspace]

hi @benmccann
thanks for contribution, could you pls explain what motivated you to make this fix
and pls apply prettier formater changes properly

[benmccann]

My motivation was to reduce the number of dependencies. This reduces install size, but more importantly reduces supply chain risk. There are 14 people who have access to publish globby and its dependencies vs only 6 to publish tinyglobby and its dependencies because it has so many fewer dependencies. serverless-esbuild has 137 dependencies currently, but it could be trimmed down substantially with only a few simple changes such as this one and upgrading from chokidar 3 to chokidar 4.

[floydspace]

I don't think this switch will solve the issues you are describing, because globby is already a dependency of the serverless@3 package itself, which anyway has to be installed by end user.
so, in fact, total, with this change end user will have + one more + 2 dependencies.

[benmccann]

Makes sense. I guess it would only make sense when supporting serverless@4