bahmutov / bahmutov/dependency-version-badge
Security and deprecation warnings, dependencies update is required
- Dominant language
- JavaScript
- Stars
- 8
- Forks
- 7
- PR merge metrics
- No merged PRs in 30d
Description
When installing this package I get the following warnings:
```console
npm i -D dependency-version-badge
npm warn deprecated debug@4.1.1: Debug versions >=3.2.0 <3.2.7 || >=4 <4.3.1 have a low-severity ReDos regression when used in a Node.js environment. It is recommended you upgrade to 3.2.7 or 4.3.1. (https://github.com/visionmedia/debug/issues/797)
npm warn deprecated async-cache@1.1.0: No longer maintained. Use [lru-cache](http://npm.im/lru-cache) version 7.6 or higher, and provide an asynchronous `fetchMethod` option.
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by inspecting the package dependency manifests and reproducing the npm install output for debug and async-cache. Done means the dependency versions no longer produce the reported deprecation or security warnings during installation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- security, tooling
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100