Skip to content

Online yarn installs created an undesired package install #1684

Closed
@lpalmes

Description

@lpalmes

I just installed create-react-app with yarn global add create-react-app and created a project.
When i was looking through the dependencies i found out this

{
  "name": "blue",
  "version": "0.1.0",
  "private": true,
  "dependencies": {
    "false": "0.0.4",
    "react": "^15.4.2",
    "react-dom": "^15.4.2"
  },
  "devDependencies": {
    "react-scripts": "0.9.3"
  },
  "scripts": {
    "start": "react-scripts start",
    "build": "react-scripts build",
    "test": "react-scripts test --env=jsdom",
    "eject": "react-scripts eject"
  }
}

And i was not sure what was "false":"0.0.4", while looking at the module i found out that false was just like another leftpad. I find it hard to reason why has been included in cra. If it was intended to be included sorry, i just found odd.

// false module source code :/
module.exports = function () {
  return false;
};

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions