From 0739e3a1235404a634ee446fab8de477f9a871fc Mon Sep 17 00:00:00 2001 From: Lazizbek Ergashev Date: Thu, 20 Aug 2026 17:19:56 +0500 Subject: [PATCH] docs: warn against using in-memory-web-api in production (cherry picked from commit 3438614f5e7dd495f13a9f5823694945c18f3fa7) --- packages/misc/angular-in-memory-web-api/README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/packages/misc/angular-in-memory-web-api/README.md b/packages/misc/angular-in-memory-web-api/README.md index a36229fb33d..5b063798528 100644 --- a/packages/misc/angular-in-memory-web-api/README.md +++ b/packages/misc/angular-in-memory-web-api/README.md @@ -3,6 +3,13 @@ An in-memory web api for Angular demos and tests that emulates CRUD operations over a RESTy API. +> **WARNING** +> +> This package is a development and testing tool only. +> The in-memory data store applies no authentication or authorization +> to the requests it answers. +> Never ship it in a production app. + It intercepts Angular `Http` and `HttpClient` requests that would otherwise go to the remote server and redirects them to an in-memory data store that you control. See [Austin McDaniel's article](https://medium.com/@amcdnl/mocking-with-angular-more-than-just-unit-testing-cbb7908c9fcc)