flipper-plugin-relay-devtools react-native-flipper-relay-devtools defines a dependency on forked version of relay-devtools

react-native-flipper-relay-devtools defines a dependency on forked version of relay-devtools

Open getsaf opened this issue 3 years ago • 1 comments

Dependency is defined here and it seems to be unnecessary considering the only changes were the version number and a debug flag (diff).

The risk here is that git dependencies side-step package security features like npm audit.

Oct 05 '22 17:10 getsaf

The original package hasn’t been published to npm in years, but I think I could publish the fork to npm instead of using git.

Oct 06 '22 00:10 janicduplessis