search

koajs / csrf

CSRF tokens for koa
MIT License
264 stars 32 forks source link

Remove `auto-bind` dependency. #48

Closed karthikv closed 5 years ago

karthikv commented 5 years ago

The auto-bind package depends on @types/react. If a TypeScript project is using JSX without using react, the @types/react package can cause problems, as it defines a global JSX namespace that may conflict with alternative JSX typings from non-react packages.

Users of this package may or may not be using react, so it seems like this package shouldn't rely on something react-specific. auto-bind is only used for binding this.middleware, so it's a fairly simple change to remove it.

Let me know if this sounds reasonable or if you have any questions/concerns.

niftylettuce commented 5 years ago

Released in v3.0.8 🎉 

npm install koa-csrf@latest

Thanks @karthikv

karthikv commented 5 years ago

Thank you @niftylettuce! Really appreciate the fast turnaround 👍