Potential Dependency Issue with box-ui-elements and Outdated ua-parser-js

Dear Box.com Support,

We've observed a potential dependency concern while utilizing box-ui-elements within our application, which is integral to our integration.

Observation:

Our application relies on box-ui-elements to provide users with a sheet picker interface for Box.com files. It appears that box-ui-elements introduces a dependency chain that includes an older version of ua-parser-js.

Specifically, the dependency tree appears to be as follows:

• box-ui-elements@latest depends on draft-js@^0.11.7
• draft-js@^0.11.7 depends on fbjs@^2.0.0
• fbjs@^2.0.0 depends on ua-parser-js@^0.7.18

This results in our application potentially relying on ua-parser-js version 0.7.18, which is relatively dated.

Request:

We would appreciate it if Box.com could investigate this dependency chain within box-ui-elements and consider updating the dependencies to utilize a more recent and actively maintained version of ua-parser-js (or a suitable alternative).

Any guidance or updates on this matter would be greatly appreciated. If there are any temporary workarounds that could be applied, we would be grateful for that information as well.

Giovanmaria Scanu for DataShuttle ( Smartsheet )