expressjs / expressjs/generator
To automate maintenance of dependency versions in `express-cli.js`
Open
ideas
- Dominant language
- JavaScript
- Stars
- 1.9k
- Forks
- 548
- PR merge metrics
- No merged PRs in 30d
Description
Right now the generation of the `package.json` to scaffold with its corresponding dependencies has hard-coded values of the names of the packages to use and its corresponding version.
This implies a manual maintenance of the version of the packages whenever there is a new release. This can be specially critical to not scaffold to users packages with vulnerabilities (which are already fixed in greater versions).
---
I would like to discuss a solution for this and also, I would be open to participate with my first contribution on this repository if possible :)
Contributor guide
Assessment
This issue has not been assessed yet.