bahmutov / bahmutov/dependency-version-badge

Security and deprecation warnings, dependencies update is required

Open
#25 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
8
Forks
7
PR merge metrics
No merged PRs in 30d

Description

When installing this package I get the following warnings:
```console
npm i -D dependency-version-badge
npm warn deprecated debug@4.1.1: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (https://github.com/visionmedia/debug/issues/797)
npm warn deprecated async-cache@1.1.0: No longer maintained. Use [lru-cache](http://npm.im/lru-cache) version 7.6 or higher, and provide an asynchronous `fetchMethod` option.
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by inspecting the package dependency manifests and reproducing the npm install output for debug and async-cache. Done means the dependency versions no longer produce the reported deprecation or security warnings during installation.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security, tooling
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.