From 1cb342f7a4699d888b1fc613936fe4547f322cef Mon Sep 17 00:00:00 2001 From: Ricardo Santos Date: Mon, 15 Dec 2025 09:12:18 +1030 Subject: [PATCH] Move minimist to devDependencies and exclude bin/ from package minimist is only used in the bin/ CLI scripts for manual testing/debugging, not in the actual library code consumed by third parties. This change: - Moves mini mist from dependencies to devDependencies - Adds .npmignore to exclude bin/ directory from published package - Reduces package size and removes unnecessary dependency for consumers - Eliminates exposure to minimist vulnerabilities (0.0.8 has known issues) The bin/ scripts remain available for development but won't be shipped to users who install this package. --- .npmignore | 1 + package.json | 6 +++--- 2 files changed, 4 insertions(+), 3 deletions(-) create mode 100644 .npmignore diff --git a/.npmignore b/.npmignore new file mode 100644 index 0000000..e660fd9 --- /dev/null +++ b/.npmignore @@ -0,0 +1 @@ +bin/ diff --git a/package.json b/package.json index c475989..be8ca43 100644 --- a/package.json +++ b/package.json @@ -24,12 +24,12 @@ "author": "Ron Korving ", "license": "MIT", "dependencies": { - "jwt-simple": "0.5.6", - "minimist": "0.0.8" + "jwt-simple": "0.5.6" }, "devDependencies": { "eslint": "6.8.0", - "husky": "3.0.2" + "husky": "3.0.2", + "minimist": "0.0.8" }, "husky": { "hooks": {