GrapesJS / GrapesJS/grapesjs

Dependency: backbone-undo is deprecated (npm) — any plan to replace/remove?

Open
#6,687 0 comments 5 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
26.2k
Forks
4.6k
Avg merge
2d 21h
Merged PRs (30d)
6

Description

### GrapesJS version
0.22.14 (latest release as of 2025-11-20)

### What's the expected behavior?
No deprecated dependencies in the GrapesJS install tree (or guidance/roadmap on replacing them).

### What's the current behavior?
Installing grapesjs@0.22.14 emits an npm/pnpm deprecation warning because it depends on backbone-undo@0.2.6 (deprecated on npm).

### Steps to reproduce
1. pnpm add grapesjs@0.22.14 (or npm i grapesjs@0.22.14)
2. Observe the deprecation warning for backbone-undo@0.2.6

### Additional context
- This is not a vulnerability report by itself; it's a maintenance/support risk (supply-chain concern).
- Related historical issue: #3443 addressed the underscore advisory path; this report is specifically about the package deprecation status.
- Question: is there a plan to remove/replace backbone-undo, or should consumers treat this as "won't fix" and ignore the warning?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.