Skip to content

Migrate to npm #8569

@rzhao271

Description

@rzhao271

While looking into Component Governance alerts for this repository, I noticed that

  1. Dependencies are locked to specific versions, which makes bumping packages harder.
  2. Some dependencies such as telemetry-extractor are years out of date.
  3. yarn upgrade X does nothing, probably because of 1.

I suggest migrating to npm and using ^ along with the version numbers so that most CG alerts can be resolved with npm audit fix or dependabot.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions