Question about the required dependency "typo3/coding-standards"

[EvilBMP]

After deploying one of our projects I was wondering about some installed packages on the production system like friendsofphp/php-cs-fixer and typo3/coding-standards.

We also use these packages in our extensions but normally as "require-dev" dependency, as those packages are IMHO only necessary for local development.

After researching, why those packages got installed on production, I found out, that cobweb/external_import and cobweb/svconnector* packages require typo3/coding-standards as standard "require" dependency. That's why the packages above also got installed in production context.

Is this by design or could typo3/coding-standards be moved to the list of "require-dev" dependencies for cobweb/external_import and cobweb/svconnector* packages?

[fsuter]

Hi. It's a fair question. This was part of introducing automated testing to all these extensions and I must say that I didn't check every detail of the implementation. I will look into this.

[EvilBMP]

Yes, that's what I thought. But the package doesn't have to be listed among the regular dependencies for that. Just move it over to the list of "required-dev" packages, as automated testing is normally done locally or via CI where "dev" packages are installed anyways.