From efffbbe68091b18ab6ececa06df9b41f1a4933b1 Mon Sep 17 00:00:00 2001 From: DeeDeeG Date: Fri, 10 May 2019 21:18:00 -0400 Subject: [PATCH] Move mocha to devdependencies It's vulnerable, per `npm audit`, so we don't want it in production. Inspired by GitHub user makuro's commit @ 9045d25. https://github.com/makuro/swagger-node/commit/9045d25e69710bf5c91d93b20787c8e83329d03c --- package.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index f944b068..ed30e413 100644 --- a/package.json +++ b/package.json @@ -26,7 +26,6 @@ "inquirer": "^1.2.3", "js-yaml": "^3.3.0", "lodash": "^4.17.2", - "mocha": "^3.2.0", "nodemon": "^1.3.7", "serve-static": "^1.9.2", "swagger-converter": "^1.4.1", @@ -36,6 +35,7 @@ }, "devDependencies": { "chai": "^3.0.0", + "mocha": "^3.2.0", "mock-stdin": "^0.3.0", "proxyquire": "^1.4.0", "should": "^11.1.1", @@ -54,4 +54,4 @@ "swagger": "bin/swagger.js", "swagger-project": "bin/swagger-project.js" } -} \ No newline at end of file +}