BTW, this module is used for development, but unexpected issue will occur without it. I just created an Issue in [1] to apply for a License whitelist.
[1] https://github.com/joyent/node-bcrypt-pbkdf/issues/10 Best Regards! @ Zhiyuan Ju <https://www.shaoyaoju.org/> Zhiyuan Ju <juzhiy...@apache.org> 于2020年2月11日周二 上午10:24写道： > Hi Justin, > > Thanks for your check. > > The first one, jschardet could be removed, but the second is one of the > dependencies for vue-cli, so it cannot be removed. > > Could we keep this dependency and do a release? > > Best Regards! > @ Zhiyuan Ju <https://www.shaoyaoju.org/> > > > Justin Mclean <jus...@classsoftware.com> 于2020年1月23日周四 上午9:20写道： > >> Hi, >> >> The KEYS file is now fine. However i’m still -1 due to Category X >> dependancies, can you explain the below? >> >> While this is being sorted out you could make a release with the work in >> progress disclaimer noting this issue. >> >> However I installed this [1] and running this: >> license-checker --production >> >> Shows this as a dependancy: >> ├─ jschardet@1.4.2 >> │ ├─ licenses: LGPL-2.1+ >> │ ├─ repository: https://github.com/aadsm/jschardet >> │ ├─ publisher: António Afonso >> >> And this: >> >> ├─ bcrypt-pbkdf@1.0.0 >> │ ├─ licenses: BSD-4-Clause >> >> Everything else there looked fine. >> >> Thanks, >> Justin >> >> 1. https://www.npmjs.com/package/license-checker > >
