Dependency: backbone-undo is deprecated (npm) — any plan to replace/remove?
- Dominant language
- TypeScript
- Stars
- 26.2k
- Forks
- 4.6k
- Avg merge
- 2d 21h
- Merged PRs (30d)
- 6
Description
### GrapesJS version
0.22.14 (latest release as of 2025-11-20)
### What's the expected behavior?
No deprecated dependencies in the GrapesJS install tree (or guidance/roadmap on replacing them).
### What's the current behavior?
Installing grapesjs@0.22.14 emits an npm/pnpm deprecation warning because it depends on backbone-undo@0.2.6 (deprecated on npm).
### Steps to reproduce
1. pnpm add grapesjs@0.22.14 (or npm i grapesjs@0.22.14)
2. Observe the deprecation warning for backbone-undo@0.2.6
### Additional context
- This is not a vulnerability report by itself; it's a maintenance/support risk (supply-chain concern).
- Related historical issue: #3443 addressed the underscore advisory path; this report is specifically about the package deprecation status.
- Question: is there a plan to remove/replace backbone-undo, or should consumers treat this as "won't fix" and ignore the warning?
Contributor guide
Assessment
This issue has not been assessed yet.