Requirement on `cordova-serve`

[erisu]

Looking at how cordova-serve is used in this package, I'd question if it would make more sense to drop this dependency entirely.

cordova-serve is not updated regularly and there could be better or modern alternatives for serving web content.

By moving away from this dependency, you'd gain:

• Finer control over the serving logic and choosing which dependencies you prefer to provide.
• Regular updates for the actual seving npm packages.
• Reduced footprint by only including the code that's actually needed.

Possible Approach

This package could replace cordova-serve with a minimal setup by:

1. Installing dependencies that was used in cordova-serve:

   • express@4.21.2
   • compression@1.8.1
   • open@8.4.2

2. Creating its own express app with just the necessary functionality.

The only logic that would need to be copied from cordova-serve is:

• This entire file: https://github.com/apache/cordova-serve/blob/master/src/util.js
• findProjectRoot from https://github.com/apache/cordova-serve/blob/master/src/platform.js#L56-L66

Proof of Concept

I had created a test branch to confirm the above approach but wanted to get your opinion if you find this beneficial.

[EzioLi01]

@erisu Thanks for the suggestion, it looks fine to me. Actually we don't have plan for any improvement for this project so far. It may not be changed currently. If you already have some thoughts, PR's welcome. : )

[erisu]

I can submit a PR based on my current Proof of Concept and we go from there.

I may also correct the node & npm engine requirements based on the current dependency-tree.

The minimum node requirement should at least be >=14.17.0, if development dependencies are included, or >=12 if development dependencies were excluded. These values are pulled from the package-lock.json. The current values appear to be too low...

It may also be updated either way after including the dependencies needed...

[EzioLi01]

I can submit a PR based on my current Proof of Concept and we go from there.

I may also correct the node & npm engine requirements based on the current dependency-tree.

The minimum node requirement should at least be >=14.17.0, if development dependencies are included, or >=12 if development dependencies were excluded. These values are pulled from the package-lock.json. The current values appear to be too low...

It may also be updated either way after including the dependencies needed...

np, please go ahead firstly, and we can update dependencies according to requirements.