Skip to content

Conversation

quekshuy
Copy link
Contributor

What

This pull request makes a minor update to the package.json file, primarily updating the package version and making small formatting changes to the keywords section. There are no significant code or dependency changes.

  • Version update:

    • Bumped the package version from 1.2.1 to 1.3.0.
  • Metadata and formatting:

    • Reformatted the keywords array to a single-line format.
    • Removed react and react-native from devDependencies.

Why

Declaring our own (dev)dependencies leads to many alerts for vulnerabilities in the package, that are patched in the main application that consumes the package anyway.

Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the package configuration to address dependency management best practices by removing React dependencies from devDependencies and relying on peer dependencies instead. This change helps eliminate false vulnerability alerts while maintaining compatibility with consuming applications.

  • Version bump from 1.2.1 to 1.3.0 to reflect the dependency management changes
  • Removal of react and react-native from devDependencies to rely on peer dependencies
  • Minor formatting improvement to the keywords array

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@quekshuy quekshuy force-pushed the quekshuy/move-react-and-react-native-dependencies/1 branch from bca8278 to 883eb5e Compare September 17, 2025 11:56
Copy link
Member

@thespacemanatee thespacemanatee left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@quekshuy quekshuy merged commit 405a929 into master Sep 18, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants