pact-ruby
pact-ruby copied to clipboard
refactor(dependencies): Move webrick to be a pure development dependency.
Webrick was originally part of the pact application, but is now purely used to support testing.
Also, to quote Jeremy Evans https://github.com/ruby/webrick/issues/145#issuecomment-2359963761
Webrick has not been part of Ruby since the release of Ruby 3.0, over three years ago. While this repository is under the ruby organization on GitHub, it is no longer considered part of Ruby.
Webrick should not be used in production. It is only still maintained because there are other gems relying it, most of which do so only for testing, and only because it is a pure ruby implementation and it was shipped with Ruby in the past.
As Webrick has recently seen a number of CVEs, pulling Webrick in to other codebases unecessarily causes security related maintenance.
It's still fine for testing.