Skip to content

Don't distribute dev dependencies #177

@svandragt

Description

@svandragt

I noticed when inspecting my personal site that in the Debugger > Sources tab of the development tools of Firefox there was a node_modules and webpack entries. As my site doesn't use these I had a look at it's contents and it appears this plugin is the cause.
Looking at your package.json it seems you're distributing all your dev dependencies to your users. You should review the whole list not just webpack.

This will slow down the performance of the app, open your users up to dev only security vulnerabilities and allow your users to debug your extension.

image

Thanks for an otherwise great browser extension!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions