Get rid of commitizen?

[flicksolutions]

Current Behavior

There is a dependabot alert that depends on commitizen. The package hasn't been updated for a year and there are 107 open issues on it...

can we drop it?

Reproduction / Steps To Reproduce

No response

Anything else?

No response

[maehr]

Of course you can. I find it quite helpful for novice users to write more useful commit messages and as it is a dev dependency only the security implications are not that severe. There are a lot of alternatives if you want to change. Check https://www.conventionalcommits.org/en/about/