JKHeadley / JKHeadley/rest-hapi
Loggin (among other issues) has a security vulnerability and hasn't been updated in 3 years. Possibly replace it?
- Dominant language
- JavaScript
- Stars
- 1.2k
- Forks
- 155
- PR merge metrics
- No merged PRs in 30d
Description
There is a security vulnerability in loggin because it uses a vulnerable version of minimatch.
It has not been updated in the last 3 years and still uses gulp for all release tasks so I'm assuming it won't get an update.
Additionally it also uses the now-replaced raven package instead of "@ sentry/node" package
Could this module get replaced with some proper, more common logging library such as pino or bunyan to fix all the problems this rusty thing has?
Contributor guide
Research direction
Start by locating the loggin integration and its gulp-based release configuration, then inspect how minimatch and raven are used. Compare the current logging and error-reporting paths with the proposed replacement options. Done means the vulnerable dependency and outdated raven usage are addressed without breaking the API generator.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, node.js
- Domain
- backend, observability-sre, security
- Issue type
- Refactor
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100