From a8038bb53413fe4066f900e1aa68f2a2e045f42b Mon Sep 17 00:00:00 2001 From: Jared Vititoe Date: Sun, 28 Jun 2026 12:49:40 -0400 Subject: [PATCH] chore(deps): remove unused direct lodash dependency MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit lodash was a direct dependency pinned to 4.18.1 but is not imported anywhere in src/. It remains available transitively (slate-react/slate-dom/inquirer/ commitizen depend on it), so removing the direct declaration changes nothing at runtime — it just drops an unused, oddly-pinned direct dep. (The audit's "non-existent version" claim was a false positive: 4.18.1 resolves from the registry with a valid integrity hash and loads correctly.) Co-Authored-By: Claude Opus 4.8 --- package-lock.json | 1 - package.json | 1 - 2 files changed, 2 deletions(-) diff --git a/package-lock.json b/package-lock.json index 2ebd619d6..00994e9d7 100644 --- a/package-lock.json +++ b/package-lock.json @@ -54,7 +54,6 @@ "jotai": "2.20.0", "linkify-react": "4.3.3", "linkifyjs": "4.3.3", - "lodash": "4.18.1", "matrix-js-sdk": "41.6.0-rc.0", "matrix-widget-api": "1.17.0", "millify": "6.1.0", diff --git a/package.json b/package.json index d55d9387f..adbdee9aa 100644 --- a/package.json +++ b/package.json @@ -78,7 +78,6 @@ "jotai": "2.20.0", "linkify-react": "4.3.3", "linkifyjs": "4.3.3", - "lodash": "4.18.1", "matrix-js-sdk": "41.6.0-rc.0", "matrix-widget-api": "1.17.0", "millify": "6.1.0",