arcus-azure / arcus-azure/arcus.webapi
[Dependencies]: use version ranges for dependencies
- Dominant language
- C#
- Stars
- 21
- Forks
- 11
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
Our security scanner Trivy picks up packages inside Arcus.WebApi as deprecated.
(System.Text.RegularExpressions, Microsoft.IdentityModel.JsonWebTokens and System.IdentityModel.Tokens.Jwt)
**Describe the solution you'd like**
Make sure that we use version ranges to always support a range of versions and prevent the use of deprecated packages.
Contributor guide
Research direction
No files, tests, or entry points are named. Start by locating Arcus.WebApi's dependency declarations and reproducing the Trivy scan; done means the listed deprecated packages are replaced or constrained with version ranges and the scan no longer reports them.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- backend
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100