@module-federation/bridge-react-webpack-plugin package contains unit tests

[JPK64]

Describe the bug

Hello.

The npm package mentioned above seems to include a __tests__ directory which probably should not be there.

Unfortunately, this leads our build analysis tool to flag that package as containing CVE-2025-43865 because of a supposed react-router 7.0.0 dependency due to the package.json included in the __tests__/mockRouterDir/router-v7/react-router directory having that as the version.

Reproduction

Look at the @module-federation/bridge-react-webpack-plugin npm package at version 0.21.6

Used Package Manager

npm

System Info

Should not be relevant here.

Validations

• Read the docs.
• Read the common issues list.
• Check that there isn't already an issue that reports the same bug to avoid creating a duplicate.
• Make sure this is a Module federation issue and not a framework-specific issue.
• The provided reproduction is a minimal reproducible example of the bug.