copy-webpack-plugin should be a dev dependency

[minht11]

It is only used during development thus not needed for users to install as a dependency.

iterable-web-sdk/webpack.dev.config.js

Lines 1 to 5 in 3948ff5

	const path = require('path');
	const env = require('dotenv').config({ path: './.env' });
	const webpack = require('webpack');
	const { version } = require('./package.json');
	const CopyPlugin = require('copy-webpack-plugin');

[blieque]

This dependency is now causing a warning from npm audit:

serialize-javascript  <=7.0.2
Severity: high
Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() - https://github.com/advisories/GHSA-5c6j-r48x-rmvq
fix available via `npm audit fix --force`
Will install @iterable/web-sdk@1.0.11, which is a breaking change
node_modules/serialize-javascript
  copy-webpack-plugin  4.3.0 - 13.0.1
  Depends on vulnerable versions of serialize-javascript
  node_modules/copy-webpack-plugin
    @iterable/web-sdk  >=1.1.0-beta
    Depends on vulnerable versions of copy-webpack-plugin
    node_modules/@iterable/web-sdk

The only automated fix npm can make is to downgrade the Iterable SDK to 1.0.11.

In the meantime, for anyone else seeing this warning, an overrides rule can be added to package.json to force npm to use a newer version of copy-webpack-plugin:

{
  "name": "...",
  "dependencies": {
    "@iterable/web-sdk": "..."
  },
  "overrides": {
    "@iterable/web-sdk": {
      "copy-webpack-plugin": "14.0.0"
    }
  }
}

If your project actually uses copy-webpack-plugin, it would best to set the version to "@copy-webpack-plugin" rather than "14.0.0".