system-text-json-jsondiffpatch icon indicating copy to clipboard operation
system-text-json-jsondiffpatch copied to clipboard

Remove explicit STJ dependency for net 8

Open thompson-tomo opened this issue 1 year ago • 2 comments

Is your feature request related to a problem? Please describe. I want to minimise dependencies in my project by utilising framework dependencies wherever possible

Describe the solution you'd like I want the package to not have an explicit dependency on System.Text.Json as it can be provided by the framework.

Describe alternatives you've considered Accept the additional dependency

Additional context n/a

thompson-tomo avatar Apr 13 '24 11:04 thompson-tomo

On a semi-related note, the version 8.0.0 System.Text.Json NuGet package that is currently being referenced is listed as suffering from https://github.com/advisories/GHSA-hh2w-p6rv-4g7w, and using the inbox version of System.Text.Json where possible might help to minimize that sort of issue.

Numpsy avatar Aug 07 '24 12:08 Numpsy

@Numpsy Totally agree by leveraging framework dependencies where ever possible we can reduce effort on package maintainers while helping to make less vulnerable dotnet eco-system.

thompson-tomo avatar Aug 07 '24 21:08 thompson-tomo