Hi, is there any chance that you can move @babel/runtime to devDependencies?
|
"dependencies": { |
|
"@babel/runtime": "^7.12.5", |
|
"global": "^4.4.0" |
|
}, |
|
"devDependencies": { |
|
"@babel/cli": "^7.12.8", |
It doesn't look like this project depends on it during runtime. By listing it under dependencies, everyone that uses this project must install it during deployment of their project even if they don't use it. This also causes everyone to get notified of security vulnerabilities in @babel/runtime, such as babel/babel#17173.
I am currently using this project through https://github.com/videojs/m3u8-parser, which has the same problem. Someone reported this same issue there at videojs/m3u8-parser#180.
Thanks for everything you do to maintain these projects! Let me know if I can help with resolving this.
Hi, is there any chance that you can move
@babel/runtimetodevDependencies?vhs-utils/package.json
Lines 77 to 82 in ad87c8b
It doesn't look like this project depends on it during runtime. By listing it under
dependencies, everyone that uses this project must install it during deployment of their project even if they don't use it. This also causes everyone to get notified of security vulnerabilities in@babel/runtime, such as babel/babel#17173.I am currently using this project through https://github.com/videojs/m3u8-parser, which has the same problem. Someone reported this same issue there at videojs/m3u8-parser#180.
Thanks for everything you do to maintain these projects! Let me know if I can help with resolving this.