ReactiveX / ReactiveX/rxjs

Outdated dependencies detected in package

Open
#7,587 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
31.7k
Forks
3k
PR merge metrics
No merged PRs in 30d

Description

Describe the bug
Description

We are using your package as a dependency in our project.

In our internal security scan (conducted via Black Duck), we found that some of the dependencies included in your package have not been updated for more than 12 months.

This includes both runtime and transitive dependencies that are part of your package's dependency tree.

We are raising this issue to make you aware of this observation. Are these outdated dependencies something you plan to update?

Outdated Dependency List (from Black Duck scan)
The following are the dependencies (direct or transitive) in your package that were identified as outdated (last updated >12 months ago):

Library Name Current Version Package Name Package Version
symbol-observable 1.0.1 ReactiveX RxJS 5.5.12
Expected behavior

You may consider update or remove those ourdated dependencies.

Reproduction code

Reproduction URL

No response

Version

5.5.12

Environment

No response

Additional context

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file or test is named. Start by inspecting the dependency manifests and the RxJS 5.5.12 dependency tree to determine why symbol-observable 1.0.1 is included, then check whether it can be updated or removed without breaking the package. Done means the outdated dependency is addressed and the dependency scan no longer reports it.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, typescript
Domain
tooling
Issue type
Refactor
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.