Dependency: backbone-undo is deprecated (npm) — any plan to replace/remove?
Author: rhaarhoffCreated Jan 13, 2026Updated Jan 13, 2026
GrapesJS version
0.22.14 (latest release as of 2025-11-20)
What's the expected behavior?
No deprecated dependencies in the GrapesJS install tree (or guidance/roadmap on replacing them).
What's the current behavior?
Installing [email protected] emits an npm/pnpm deprecation warning because it depends on [email protected] (deprecated on npm).
Steps to reproduce
- pnpm add [email protected] (or npm i [email protected])
- Observe the deprecation warning for [email protected]
Additional context
- This is not a vulnerability report by itself; it's a maintenance/support risk (supply-chain concern).
- Related historical issue: #3443 addressed the underscore advisory path; this report is specifically about the package deprecation status.
- Question: is there a plan to remove/replace backbone-undo, or should consumers treat this as "won't fix" and ignore the warning?
Source: GrapesJS/grapesjs