Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Review dependencies vs devDependencies #311

Open
dcloud opened this issue Feb 19, 2021 · 0 comments
Open

Review dependencies vs devDependencies #311

dcloud opened this issue Feb 19, 2021 · 0 comments
Labels
JIRA Post MVP Issues cut from the MVP scope severity-low

Comments

@dcloud
Copy link
Contributor

dcloud commented Feb 19, 2021

During an CI security scan, yarn audit raised a warning about react-scripts as a dependency. Given react-scripts is build tool rather than a runtime tool, it was moved to devDependencies. We should look for other dependencies that aren't needed at runtime and move those to devDependencies, testing to make sure the applications still build as expected.
@marriej marriej added Post MVP Issues cut from the MVP scope severity-low JIRA labels Mar 3, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
JIRA Post MVP Issues cut from the MVP scope severity-low
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@dcloud @marriej