Skip to content

Move semantic-release to devDependencies#5

Open
y-senchuk wants to merge 1 commit intodistinction-dev:mainfrom
y-senchuk:feature/semantic-release
Open

Move semantic-release to devDependencies#5
y-senchuk wants to merge 1 commit intodistinction-dev:mainfrom
y-senchuk:feature/semantic-release

Conversation

@y-senchuk
Copy link
Copy Markdown

Semantic-release creates a bunch of vulnerabilities, but it isn't a dependency at all, as it is used only for releasing a new version

@y-senchuk
Copy link
Copy Markdown
Author

Hi @Nilay1999 ,
Thanks for developing the plugin, it is really useful

Could you please review this PR and release a new version? So we can move semantic-release to devDependencies to fix vulnerabilities
Also, it looks like the latest pipeline run wasn't successful due to an expired npm token...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant