René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"@angular/fire indirectly depends on webpack","articleBody":"\u003c!--\r\n\r\nIMPORTANT! YOU MUST FOLLOW THESE INSTRUCTIONS OR YOUR ISSUE WILL BE CLOSED.\r\n\r\nThank you for contributing to the Angular and Firebase communities!\r\n\r\nHave a usage question?\r\n=======================\r\nWe get lots of those and we love helping you, but GitHub is not the best place for them and they will be closed. Here are some resources to get help:\r\n\r\n- Go through the Developer's Guide: https://github.com/angular/angularfire2#developer-guide\r\n\r\nIf the official documentation doesn't help, try asking through our officially supported channels:\r\n\r\n- Firebase Google Group: https://groups.google.com/forum/#!forum/firebase-talk\r\n- Stack Overflow: https://stackoverflow.com/questions/tagged/angular (include the firebase and angularfire tags, too!)\r\n\r\n*Please avoid double posting across multiple channels!*\r\n\r\nThink you found a bug?\r\n=======================\r\nYeah, we're definitely not perfect! Please use the bug report template below and include a minimal repro when opening the issue.\r\n\r\nHave a feature request?\r\n========================\r\nGreat, we love hearing how we can improve our products! Remove the template below and\r\nprovide an explanation of your feature request. Provide code samples if applicable. Try to\r\nthink about what it will allow you to do that you can't do today? How will it make current\r\nworkarounds straightforward? What potential bugs and edge cases does it help to avoid?\r\n\r\n--\u003e\r\n\r\n\r\n### Version info\r\n\r\n\u003c!-- What versions of the following libraries are you using? Note that your issue may already\r\nbe fixed in the latest versions. --\u003e\r\n\r\n**Angular:** 15.2.1\r\n\r\n**Firebase:** 9.17.2\r\n\r\n**AngularFire:** 7.5.0\r\n\r\n**Other (e.g. Ionic/Cordova, Node, browser, operating system):**\r\n- @ionic/angular: 6.6.0\r\n- Node: 18.13.0\r\n- Windows 11\r\n\r\n### How to reproduce these conditions\r\n\r\n**Steps to set up and reproduce**\r\n\r\n- `npm install @angular/fire`\r\n- `npm ls webpack --omit=dev`\r\n\r\n### Expected behavior\r\n\r\n```\r\nmy-project@0.0.1 C:\\Users\\name\\Projects\\my-project\r\n`-- (empty)\r\n```\r\n\r\n### Actual behavior\r\n\r\n```\r\nmy-project@0.0.1 C:\\Users\\name\\Projects\\my-project\r\n`-- @angular/fire@7.5.0\r\n  `-- file-loader@6.2.0\r\n    `-- webpack@5.75.0\r\n      `-- terser-webpack-plugin@5.3.6\r\n        `-- webpack@5.75.0 deduped\r\n```\r\n\r\n### Additional information\r\n\r\nA search of this repository does not show that `file-loader` is used anywhere, maybe it can be removed from https://github.com/angular/angularfire/blob/master/src/package.json? But I could be wrong.\r\n\r\nWebpack should probably not be a (production)dependency, but a devDependency instead?\r\n\r\nRunning `npm audit --omit=dev` is how I noticed this dependency: https://github.com/advisories/GHSA-hc6q-2mpp-qw7j","author":{"url":"https://github.com/Ionaru","@type":"Person","name":"Ionaru"},"datePublished":"2023-03-15T15:32:46.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":2},"url":"https://github.com/3324/angularfire/issues/3324"}