Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor(dependencies): Move webrick to be a pure development dependency. #322

Merged

Commits on Sep 24, 2024

  1. refactor(dependencies): Move webrick to be a pure development depende…

    …ncy.
    
    Webrick was originally part of the pact application, but is now purely used to support testing.
    
    Also, to quote Jeremy Evans ruby/webrick#145 (comment)
    
    > Webrick has not been part of Ruby since the release of Ruby 3.0, over three years ago. While this repository is under the ruby organization on GitHub, it is no longer considered part of Ruby.
    >
    > Webrick should not be used in production. It is only still maintained because there are other gems relying it, most of which do so only for testing, and only because it is a pure ruby implementation and it was shipped with Ruby in the past.
    
    As Webrick has recently seen a number of CVEs, pulling Webrick in to other codebases unecessarily causes security related maintenance.
    
    It's still fine for testing.
    rea-jonpad committed Sep 24, 2024
    Configuration menu
    Copy the full SHA
    48ff773 View commit details
    Browse the repository at this point in the history