Merge pull request #1171 from apiaryio/honzajavorek/never-have-dev-in…

…-shrinkwrap Never have dev deps in shrinkwrap
apiaryio · Dec 20, 2018 · dd98e52 · dd98e52
2 parents 379c279 + 683fa19
commit dd98e52
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 7 deletions.
diff --git a/npm-shrinkwrap.json b/npm-shrinkwrap.json
diff --git a/scripts/postshrinkwrap.js b/scripts/postshrinkwrap.js
@@ -1,10 +1,16 @@
 #!/usr/bin/env node
-// Postprocesses the lockfile to remove C++ dependency and to enforce https://
+// Postprocesses the lockfile to remove dev dependencies and one C++
+// dependency, and to enforce https://
 
 const fs = require('fs');
 const path = require('path');
 const lockfile = require('../npm-shrinkwrap');
 
+// Remove dev dependencies so they NEVER get to the final distribution of Dredd
+Object.keys(lockfile.dependencies)
+  .filter(name => lockfile.dependencies[name].dev)
+  .forEach(name => delete lockfile.dependencies[name]);
+
 // Force all installations of Dredd to use only the pure JavaScript version
 // of the API Blueprint parser. It has slower performance, but it solves
 // quite a few installation & distribution problems.