Skip to content

Conversation

@mike706574
Copy link

When using this library, our security scanner picks up vulnerabilities from the transitive dependencies of org.clojure/clojurescript, which this library depends on.

I'm not an expert, but I don't believe this library needs the dependency on org.clojure/clojurescript in order to be usable from Clojurescript. This change removes it.

@souenzzo
Copy link

@mike706574 is right.
It's not good practice to put clojurescript in the dependencies.
Clojurescript is only required to compile, not a runtime dependency

I would greatly appreciate a new release with this change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants