(In reply to Hillwood Yang from comment #3) > (In reply to Camila Camargo de Matos from comment #1) > > Package deeping-manual seems to require the use of webpack. > > I checked BuildRequires in spec, but did not find out webpack. Is it a part > of nodejs-common? The file that lists webpack as a dependency is 'src/web/toSearchMd/package-lock.json' (version is 1.0.0, which might not be affected by the CVE described in this bug, however, the bug was opened either way for reference).