Security Threat Identified – ngrok Dependency
Author: muzammildafedarCreated Apr 15, 2025Updated Apr 15, 2025
⚠️ I have cloned this repository to my local machine, and it currently uses React 16.x, which is quite outdated. ⚠️ While running npm install, I noticed that ngrok is included as a dependency. I'm curious — why is tunnel creation necessary in this boilerplate? If you’re planning to use this in a production environment, please double-check all dependencies and verify their purpose. Some of them might pose security risks or be unintended inclusions.
Source: react-boilerplate/react-boilerplate