Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

@semantic-release/git shouldn't be a dependency #18

Open
jirihajek opened this issue Jun 21, 2018 · 1 comment
Open

@semantic-release/git shouldn't be a dependency #18

jirihajek opened this issue Jun 21, 2018 · 1 comment

Comments

@jirihajek
Copy link

It should only be a devDependency, right?

imlucas added a commit to mongodb-js/table-parser that referenced this issue Nov 6, 2018
- Move semantic-release/git to devDependency. Fixes neekey#18
- Update mocha to latest from `npm audit`
@rastorc3v
Copy link

For sure, it is a dev dependency. Idk why PR hasn't been merged, but closed. @semantic-release/git and other packages from this owner raise a lot of security warnings because they are listed in the dependencies. @neekey could you please take a look at the PR with fix for that? #19

If you don't maintain this package anymore, please mark it as deprecated or mention that in the docs (readme)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants