Switch to using Dart Sass to build CSS

Created on 20 March 2024, 9 months ago
Updated 19 September 2024, 3 months ago

Task

This module currently uses node-sass which is abandoned.
The recommended replacement is Dart Sass.

node-sass has many unresolved security issues which are picked up by security scanners even though it's a development dependency.

package-lock.json and node_modules will be added to .gitignore so it is not committed to the project.

The npm package sass will be kept up to date by the included version constraint so there is no need to lock packages. The CSS should always be compiled using the latest 1.x version of Dart Sass.

Original Issue

As part of Security testing, the team reported vulnerability packages in the package-lock.json. We will not use those in runtime in production environments can we remove package.json and package-lock.json from the stable release to avoid this?

📌 Task
Status

Fixed

Version

1.0

Component

Code

Created by

🇮🇳India sreeram_v Hyderabad

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024