[security] Any plans to address SNYK-JS-INFLIGHT-6095116 any time soon?

[angeloreale]

Do we still need Inflight for Nextjs as a dep?
https://app.snyk.io/vuln/SNYK-JS-INFLIGHT-6095116

[AbhiPrasad]

~/sdk-demos/nextjs/nextjs-sdk-inflight » yarn why inflight                                                                       1 ↵ abhijeetprasad@GT9RQ02WW5
yarn why v1.22.19
[1/4] 🤔  Why do we have the module "inflight"...?
[2/4] 🚚  Initialising dependency graph...
[3/4] 🔍  Finding dependency...
[4/4] 🚡  Calculating file sizes...
=> Found "[email protected]"
info Reasons this module exists
   - "@sentry#nextjs#@rollup#plugin-commonjs#glob" depends on it
   - Hoisted from "@sentry#nextjs#@rollup#plugin-commonjs#glob#inflight"
info Disk size without dependencies: "16KB"
info Disk size with unique dependencies: "48KB"
info Disk size with transitive dependencies: "48KB"
info Number of shared dependencies: 2
✨  Done in 0.05s.

inflight comes from a rollup plugin that the SDK uses, which comes from glob, which is only used for build-time - it doesn't run in production with your next.js app. Therefore I think this security warning does not apply for the Next.js SDK.