JKHeadley / JKHeadley/rest-hapi

Loggin (among other issues) has a security vulnerability and hasn't been updated in 3 years. Possibly replace it?

Open
#150 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
1.2k
Forks
155
PR merge metrics
No merged PRs in 30d

Description

There is a security vulnerability in loggin because it uses a vulnerable version of minimatch.
It has not been updated in the last 3 years and still uses gulp for all release tasks so I'm assuming it won't get an update.
Additionally it also uses the now-replaced raven package instead of "@ sentry/node" package

Could this module get replaced with some proper, more common logging library such as pino or bunyan to fix all the problems this rusty thing has?

Contributor guide

Open the contributing guide

Research direction

Start by locating the loggin integration and its gulp-based release configuration, then inspect how minimatch and raven are used. Compare the current logging and error-reporting paths with the proposed replacement options. Done means the vulnerable dependency and outdated raven usage are addressed without breaking the API generator.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, node.js
Domain
backend, observability-sre, security
Issue type
Refactor
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.