-
-
Notifications
You must be signed in to change notification settings - Fork 14
Open
Labels
Description
Hi!
@cyclonedx/cyclonedx-library
currently relies on optionalDependencies
for some features. Because this mechanism is not really well-known (or even accessible), consumers end up with 10MB of additional dependencies.
My recommendation is to make these dependencies opt-in instead of opt-out:
- Move them to
peerDependencies
- Mark them as optional with
peerDependenciesMeta
Since this package is a software library not intended for standalone use, this would allow consumers to provide the required dependencies for the features they need.
jkowalleck