Commit d5292b6
committed
chore(deps): remove unused quill and vendored pyodide/package.json
Fixes two Dependabot alerts:
- #165 (esbuild <=0.24.2, medium): app/modules/generator/assets/js/pyodide/package.json
is Pyodide's own vendored manifest, shipped alongside pyodide.asm.js / pyodide.mjs.
Our webpack never bundles from it and the runtime loads Pyodide via <script>, so
removing the file eliminates the alert at the source without touching any code path.
- #84 (quill 2.0.3, low, HTML export XSS, no upstream patch): quill was a root
dependency but no webpack-bundled module imports it. The only references are in
unreachable Metronic demo pages (app/static/js/custom/apps/{inbox,ecommerce}) whose
templates have no routes. Dropping it from package.json regenerates the lockfile
cleanly; dead demo code stays but is no longer a resolvable dependency.1 parent 25f34af commit d5292b6
3 files changed
Lines changed: 2 additions & 200 deletions
This file was deleted.
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
51 | 51 | | |
52 | 52 | | |
53 | 53 | | |
| 54 | + | |
54 | 55 | | |
55 | 56 | | |
56 | 57 | | |
| |||
61 | 62 | | |
62 | 63 | | |
63 | 64 | | |
64 | | - | |
65 | 65 | | |
66 | 66 | | |
67 | 67 | | |
| |||
74 | 74 | | |
75 | 75 | | |
76 | 76 | | |
77 | | - | |
78 | 77 | | |
79 | 78 | | |
80 | 79 | | |
| |||
0 commit comments