Skip to content

ui as one of extras #4439

@elshize

Description

@elshize

Is your feature request related to a problem? Please describe.

Vulnerability scanners pick up JS packages from ui folder: https://github.com/feast-dev/feast/tree/master/sdk/python/feast/ui even though I don't actually use it.

Describe the solution you'd like

Requiring to install it with feast[ui] would provide a way to avoid deploying that code if not needed.

Describe alternatives you've considered

I looked into disabling certain paths but in my CI this is currently not possible. We may soon have problems deploying any feast code in production, unfortunately.

An alternative would be to keep those JS packages as much up to date as possible. But it would be much better if we didn't have any JS code in our Python deployment.

Additional context

Open to other suggestions how I could force this code out of my deployment but I must use Poetry for dependency management...

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions