Do a dependency analysis
Open
P2
Technical Enhancement
- Dominant language
- Java
- Stars
- 80
- Forks
- 17
- PR merge metrics
- No merged PRs in 30d
Description
# Do a Dependency Analysis
## Context
Ara uses dependency from NPM and Maven with fixed version numbers.
## Expected
We should do a vulnerabilities analysis on those dependencies versions and upgrade/patch them if needed.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by identifying Ara’s NPM and Maven dependencies and their fixed versions, then check those versions for known vulnerabilities. Done means documenting the findings and upgrading or patching affected dependencies; the issue does not name specific files or tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, javascript
- Domain
- build-system, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100