Skip to content

Use individual lodash modules#386

Open
bapplejax wants to merge 1 commit intofigma:mainfrom
bapplejax:lodash-patch
Open

Use individual lodash modules#386
bapplejax wants to merge 1 commit intofigma:mainfrom
bapplejax:lodash-patch

Conversation

@bapplejax
Copy link
Copy Markdown

Applying previous patch for removing the lodash security update for npm installations.

@stof
Copy link
Copy Markdown

stof commented Apr 29, 2026

Those lodash.* packages are considered deprecated since years: https://lodash.com/per-method-packages

Thus, those packages are not always shipping the code from the latest version of lodash, even for some security fixes sometimes (see lodash/lodash#6106)

@tj-commits
Copy link
Copy Markdown

@stof agreed, we don't want more things depending on these packages. there are too many already.

@tj-commits
Copy link
Copy Markdown

If you're using ES modules you can use like lodash-es/chunk or if not then lodash/chunk instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants