-
Notifications
You must be signed in to change notification settings - Fork 8
Open
Description
Hi, is there any chance that you can move @babel/runtime to devDependencies?
Lines 77 to 82 in ad87c8b
| "dependencies": { | |
| "@babel/runtime": "^7.12.5", | |
| "global": "^4.4.0" | |
| }, | |
| "devDependencies": { | |
| "@babel/cli": "^7.12.8", |
It doesn't look like this project depends on it during runtime. By listing it under dependencies, everyone that uses this project must install it during deployment of their project even if they don't use it. This also causes everyone to get notified of security vulnerabilities in @babel/runtime, such as babel/babel#17173.
I am currently using this project through https://github.com/videojs/m3u8-parser, which has the same problem. Someone reported this same issue there at videojs/m3u8-parser#180.
Thanks for everything you do to maintain these projects! Let me know if I can help with resolving this.
Metadata
Metadata
Assignees
Labels
No labels