types referred in dependencies section of package json

[manpreet-compro]

Checklist

• I have looked into the Readme and Examples, and have not found a suitable solution or answer.
• I have searched the issues and have not found a suitable solution or answer.
• I have searched the Auth0 Community forums and have not found a suitable solution or answer.
• I agree to the terms within the Auth0 Code of Conduct.

Description

Package json of the project has 2 packages only for types

"@types/express": "^4.17.17",
"@types/jsonwebtoken": "^9.0.2",

These are only providing the type definitions and ideally should be in devDependencies folder.

This create the issue of large package size. On doing production npm install npm install --production
Size of node_modules folder is 5.33MB of which @types folder is of 4.08 MB

This is significant in the use case when this library is used in AWS Lambda - who is known to have higher cold start time dependeing on the package size

Package json should be updated and has only those dependenies which are required for production code

Reproduction

Install the dependencies using npm install --production

Additional context

No response

jwks-rsa version

3.1.0

Node.js version

18.17.0

[adamjmcgrath]

Hi @manpreet-compro - there's been some back and forth on this. In the end we decided to stick to it in dependencies - See #80 (review)

[manpreet-compro]

@adamjmcgrath Thanks for the reference