From d7c0c1edc96f08cf3a6f693fec433f959db5c4e0 Mon Sep 17 00:00:00 2001 From: Justin Beckwith Date: Sun, 30 Nov 2025 08:53:23 -0800 Subject: [PATCH] chore(deps): remove unused @babel/runtime-corejs3 dependency The @docusaurus/babel package lists @babel/runtime-corejs3 as a dependency, but it is not used anywhere in the codebase: 1. The Babel preset explicitly sets `corejs: false` in the transform-runtime plugin configuration 2. The absoluteRuntime path points to @babel/runtime, not @babel/runtime-corejs3 3. No source files import from @babel/runtime-corejs3 This dependency brings in core-js-pure, which executes a postinstall script during npm install. Removing unused dependencies that run install scripts helps reduce supply chain attack surface. Fixes #11585 --- packages/docusaurus-babel/package.json | 1 - 1 file changed, 1 deletion(-) diff --git a/packages/docusaurus-babel/package.json b/packages/docusaurus-babel/package.json index 5c3886aa70..2da7cef99c 100644 --- a/packages/docusaurus-babel/package.json +++ b/packages/docusaurus-babel/package.json @@ -36,7 +36,6 @@ "@babel/preset-react": "^7.25.9", "@babel/preset-typescript": "^7.25.9", "@babel/runtime": "^7.25.9", - "@babel/runtime-corejs3": "^7.25.9", "@babel/traverse": "^7.25.9", "@docusaurus/logger": "3.9.2", "@docusaurus/utils": "3.9.2",