jwks-rsa introduces deprecated @types/mime package (mime now provides its own types) #446
Description
Checklist
- I have looked into the Readme and Examples, and have not found a suitable solution or answer.
- I have searched the issues and have not found a suitable solution or answer.
- I have searched the Auth0 Community forums and have not found a suitable solution or answer.
- I agree to the terms within the Auth0 Code of Conduct.
Description
Description
When installing jwks-rsa, a deprecated package @types/[email protected] is pulled into the project via transitive type dependencies.
The mime package maintainers have officially deprecated @types/mime with this message:
“This package has been deprecated. This is a stub types definition. mime provides its own type definitions, so you do not need this installed.”
Link to @type/mime: https://www.npmjs.com/package/@types/mime?activeTab=readme
This means any project using jwks-rsa ends up installing an unnecessary, deprecated types package.
Dependency Chain
The deprecated package enters through the following chain:
jwks-rsa
└─ @types/express
└─ @types/send
└─ @types/mime (deprecated)
Impact
-
Deprecated types package is being downloaded and included in projects.
-
mime now ships its own types, so @types/mime should not exist in modern dependency graphs.
-
Keeping deprecated types introduces unnecessary noise, possibl
Reproduction
Steps to Reproduce
Install jwks-rsa:
npm install jwks-rsa
Check for @types/mime:
npm ls @types/mime
Output shows:
@types/[email protected]
└─ @types/send
└─ @types/express
└─ jwks-rsa
Removing jwks-rsa removes the deprecated types, reinstalling brings them back.
Additional context
No response
jwks-rsa version
3.2.0
Node.js version
v22.14.0