arcus-azure / arcus-azure/arcus.webapi

[Dependencies]: use version ranges for dependencies

Open
#494 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
21
Forks
11
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
Our security scanner Trivy picks up packages inside Arcus.WebApi as deprecated.
(System.Text.RegularExpressions, Microsoft.IdentityModel.JsonWebTokens and System.IdentityModel.Tokens.Jwt)

**Describe the solution you'd like**
Make sure that we use version ranges to always support a range of versions and prevent the use of deprecated packages.

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. Start by locating Arcus.WebApi's dependency declarations and reproducing the Trivy scan; done means the listed deprecated packages are replaced or constrained with version ranges and the scan no longer reports them.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
backend
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.