Skip to content

Commit a309e5e

Browse files
authored
Remove optional transitive dep on vue-template-compiler (#3089)
This transitive dependency is marked as optional, but pnpm installs it by default anyways. This is an old version of vue with a false-positive CVE associated with it [1]. Since we do not use Vue in this repo, we can safely remove this dependency and avoid any security-related noise that it brings our way. 1) documentationjs/documentation#1666 (comment)
1 parent 85f7717 commit a309e5e

2 files changed

Lines changed: 8 additions & 23 deletions

File tree

pnpm-lock.yaml

Lines changed: 3 additions & 23 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

pnpm-workspace.yaml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -13,3 +13,8 @@ catalog:
1313
tsup: ^8.4.0
1414
tsx: ^4.19.4
1515
typescript: ^5.8.3
16+
17+
overrides:
18+
# we do not use the vue capabilities of documentation, so remove this optional dependency
19+
# which has a (false positive) CVE associated with it
20+
"documentation>vue-template-compiler": "-"

0 commit comments

Comments
 (0)