Skip to content

Commit 954a5e5

Browse files
committed
move @graphql-codegen/cli to dev dependencies
@graphql-codegen/cli and friends are super useful as tooling, but they also depend on the world: https://npmgraph.js.org/?q=%40shopify%2Fshopify_function Just @graphql-codegen/cli and its transitive dependencies add 211 maintainers to your supply chain: https://npmgraph.js.org/?q=%40graphql-codegen%2Fcli It also creates noise re: CVE spam in a long tail of dependent packages. As far as I can tell, there's no runtime dependency on any of these packages -- so we can freely move them to dev dependencies.
1 parent 7d6ae60 commit 954a5e5

File tree

1 file changed

+5
-3
lines changed

1 file changed

+5
-3
lines changed

package.json

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,15 @@
1111
"author": "Surma <[email protected]>",
1212
"license": "Apache-2.0",
1313
"dependencies": {
14-
"@graphql-codegen/cli": "^2.13.7",
15-
"@graphql-codegen/typescript": "^2.8.0",
16-
"@graphql-codegen/typescript-operations": "^2.5.5",
1714
"graphql": "^16.6.0",
1815
"typescript": "^4.8.4"
1916
},
2017
"peerDependencies": {
2118
"javy": "^0.1.0"
19+
},
20+
"devDependencies": {
21+
"@graphql-codegen/cli": "^2.13.7",
22+
"@graphql-codegen/typescript": "^2.8.0",
23+
"@graphql-codegen/typescript-operations": "^2.5.5"
2224
}
2325
}

0 commit comments

Comments
 (0)