-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Description
Is your feature request related to a problem? Please describe.
Vulnerability scanners pick up JS packages from ui folder: https://github.com/feast-dev/feast/tree/master/sdk/python/feast/ui even though I don't actually use it.
Describe the solution you'd like
Requiring to install it with feast[ui] would provide a way to avoid deploying that code if not needed.
Describe alternatives you've considered
I looked into disabling certain paths but in my CI this is currently not possible. We may soon have problems deploying any feast code in production, unfortunately.
An alternative would be to keep those JS packages as much up to date as possible. But it would be much better if we didn't have any JS code in our Python deployment.
Additional context
Open to other suggestions how I could force this code out of my deployment but I must use Poetry for dependency management...