WARNING: THIS SITE IS A MIRROR OF GITHUB.COM / IT CANNOT LOGIN OR REGISTER ACCOUNTS / THE CONTENTS ARE PROVIDED AS-IS / THIS SITE ASSUMES NO RESPONSIBILITY FOR ANY DISPLAYED CONTENT OR LINKS / IF YOU FOUND SOMETHING MAY NOT GOOD FOR EVERYONE, CONTACT ADMIN AT ilovescratch@foxmail.com
Skip to content

@babel/runtime is listed as a production dependency #41

@rseanhall

Description

@rseanhall

Hi, is there any chance that you can move @babel/runtime to devDependencies?

vhs-utils/package.json

Lines 77 to 82 in ad87c8b

"dependencies": {
"@babel/runtime": "^7.12.5",
"global": "^4.4.0"
},
"devDependencies": {
"@babel/cli": "^7.12.8",

It doesn't look like this project depends on it during runtime. By listing it under dependencies, everyone that uses this project must install it during deployment of their project even if they don't use it. This also causes everyone to get notified of security vulnerabilities in @babel/runtime, such as babel/babel#17173.

I am currently using this project through https://github.com/videojs/m3u8-parser, which has the same problem. Someone reported this same issue there at videojs/m3u8-parser#180.

Thanks for everything you do to maintain these projects! Let me know if I can help with resolving this.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions