@dan_abramov
@snyksec I love and use @snyksec but it's a
brainless tool, which does not understand the difference between compile-time
dependencies and run-time dependencies and treats them like all ends up in
production.