Dependency: backbone-undo is deprecated (npm) — any plan to replace/remove?

[rhaarhoff]

GrapesJS version

0.22.14 (latest release as of 2025-11-20)

What's the expected behavior?

No deprecated dependencies in the GrapesJS install tree (or guidance/roadmap on replacing them).

What's the current behavior?

Installing grapesjs@0.22.14 emits an npm/pnpm deprecation warning because it depends on backbone-undo@0.2.6 (deprecated on npm).

Steps to reproduce

1. pnpm add grapesjs@0.22.14 (or npm i grapesjs@0.22.14)
2. Observe the deprecation warning for backbone-undo@0.2.6

Additional context

• This is not a vulnerability report by itself; it's a maintenance/support risk (supply-chain concern).
• Related historical issue: BUG: backbone-undo/underscore security advisory #3443 addressed the underscore advisory path; this report is specifically about the package deprecation status.
• Question: is there a plan to remove/replace backbone-undo, or should consumers treat this as "won't fix" and ignore the warning?