@types/uuid is listed as a production dependency in many clients #6980
Labels
closed-for-staleness
guidance
General information and guidance, answers to FAQs, or recommended best practices/resources.
response-requested
Waiting on additional info and feedback. Will move to \"closing-soon\" in 7 days.
Checkboxes for prior research
Describe the bug
I noticed that I seemed to have devDependencies finding a way into my production docker images. Turns out that one of them came from packages in this repo:
A quick code search in the repo shows that it is in quite a few clients.
Regression Issue
SDK version number
@aws-sdk/client-*@3.699.0
Which JavaScript Runtime is this issue in?
Node.js
Details of the browser/Node.js/ReactNative version
v20.19.0
Reproduction Steps
pnpm why @types/uuid
Observed Behavior
@types/uuid is listed as a production dependency, which does not seem correct.
Expected Behavior
That the package is listed as a devDependency.
Possible Solution
List the package as a devDependency.
Additional Information/Context
Other than just being extra stuff in docker images etc. it also triggers security scanners, which makes it something we have to deal with in our company.
The text was updated successfully, but these errors were encountered: