maticzav / graphql-shield

🛡 A GraphQL tool to ease the creation of permission layer.
https://graphql-shield.com
MIT License
3.56k stars 172 forks source link

Update yup@1.x module to avoid @types/lodash and babel runtime in production deps #1510

Open ziggornif opened 1 year ago

ziggornif commented 1 year ago

Explain your question

I've found dev dependencies installed as production deps when I add this module in my project.

The module in question is Yup@032.11 https://github.com/jquense/yup

npm why @types/lodash
@types/lodash@4.14.191
node_modules/@types/lodash
  @types/lodash@"^4.14.175" from yup@0.32.11
  node_modules/yup
    yup@"^0.32.0" from graphql-shield@7.6.5

The 1.0 version no longer seems to have the problem, can you udpate the dependency ?

Thanks 🙏